Latest from the Privacy Desk
All dispatches →
DATA The OECD Built a Catalogue of Privacy-Enhancing Technologies. Here Is How to Use It Without Overrating It
The OECD has launched a Global Repository for Privacy-Enhancing Technologies, a public toolkit meant to help organizations pick a privacy-enhancing technology (PET)…
DATA The FTC Wants to See the Math: What Its Nine Personalized Pricing Orders Ask Delta, Uber, Walmart and Others
The Federal Trade Commission sent nine companies a set of questions on October 28, 2026, and every one of them goes to…
DATA Your Doctor Didn’t Share Your Diagnosis. Your Phone’s Location Did
A patient sits in an oncologist’s waiting room. Her phone, which has location services switched on for a weather app and a…
DATA Brazil’s ANPD Updates 40 Glossary Terms on Incidents, DPOs and Data Transfers: Why the Definitions Matter
Brazil’s data protection authority has quietly done something that will save compliance teams a lot of guesswork.
DATA The Homework App and the Midnight Feed: How to Design Personalization for Young Users After the Meta Settlement
The biggest child safety settlement in U.S. history was about a design choice.
COMPLIANCE The UAE’s Child Digital Safety Rules Run on Two Clocks, and Two Rulebooks Are Still Missing
“Enforceable on January 1, 2027” is the line most summaries of the UAE’s new child online safety law repeat, and it is…
DATA Surveillance Pricing: What It Is, Which Laws Apply, and How Compliance Teams Should Respond
Shoppers have started comparing phones. In a report published October 25, 2026, the Wall Street Journal described a man who saw a…
Corporate Compliance Failures Brought Billion-Dollar Bills in 2025. Here’s Where the Costs Fell.
Federal fraud settlements and judgments reached a record $6.9 billion, led by health care.
DATA Gartner’s First Magic Quadrant for Privacy UX: What It Says and What It Means for Buyers
On October 6, 2026, Gartner published its first Magic Quadrant for Privacy UX, written by analysts Shadrock Roberts, Stefan Dumitrescu and Bernard…
DATA DSR Automation at Scale: A Practical Framework for Privacy Teams
Automated submissions, authorized agents and AI-assisted requests are changing the workload around privacy rights.
New Mexico’s Unfair Practices Act and Privacy Claims After the Meta Verdict
New Mexico’s Unfair Practices Act has a private right of action, and a recent high-profile case shows that public statements about data…
Robinson v. Meta Platforms and the CDAFA Consent Defense: An Online Terms Playbook for Web Tracking Class Actions in the Post-SB 690 Era
The California Comprehensive Computer Data Access and Fraud Act (CDAFA)—a 1980s computer crime statute—has become a fixture of the web tracking class…