Topic · Governance Risk And Compliance
Every dispatch tagged Governance Risk And Compliance.
Latest from the Privacy Desk
All dispatches →
GOVERNANCE RISK AND COMPLIANCE Your Employees Are Already Wearing Cameras. You Just Don’t Have a Policy for Them
There is a particular moment in the arc of every disruptive technology when it transitions from being a thing that organizations talk…
GOVERNANCE RISK AND COMPLIANCE Michigan Social Security Number Privacy Act
The Michigan Social Security Number Privacy Act (SSNPA), enacted as Public Act 454 of 2004 and codified at MCL 445.81 et seq.,…
Supreme Court Takes Up FCC Privacy Enforcement: A Defining Moment for Data Accountability in the U.S.
The United States Supreme Court’s recent oral arguments in the high-stakes dispute between the Federal Communications Commission (FCC) and telecom giants AT&T…
New Obstacles for Health Care: Federal and State Rules Tighten Grip on Health and Genomic Data
As a privacy officer working with life sciences and health care clients, I’ve watched the compliance burden shift from HIPAA-centric concerns to…
UK Biobank Data for Sale in China: How a Major Medical Research Breach Exposes Deep Flaws in Data Governance
The news landed like a quiet bombshell: detailed health records from nearly half a million UK Biobank participants were listed for sale…
GOVERNANCE RISK AND COMPLIANCE The Ransomware Reckoning: HHS Sends a Clear Message to Healthcare with $1.165 Million in HIPAA Settlements
On April 23, 2026, the U.S.
McGraw Hill Data Breach 2026: The $10 Billion Governance Gap in Salesforce Security
We have covered a lot on EdTech privacy lawsuits and how they can be avoided if you want to protect against regulatory…
GOVERNANCE RISK AND COMPLIANCE Vercel Breach Tied to Context AI Hack Exposes Limited Customer Credentials
A compromised third-party AI tool, an over-permissioned OAuth grant, and an employee’s Google Workspace account were all it took to pull one…
GOVERNANCE RISK AND COMPLIANCE California’s Cybersecurity Audit Mandate
When the California Privacy Protection Agency finalized its cybersecurity audit regulations in mid-2025, many businesses quietly braced for the paperwork.
Booking.com Warns Customers of Data Breach Exposing Names, Contact Details, and Reservation Information
Booking.com, one of the world’s largest online travel and accommodation platforms, has notified affected customers of a data breach in which unauthorized…
GOVERNANCE RISK AND COMPLIANCE The DOJ’s Bulk Data Rule Is Reshaping Privacy Law — And a Wave of ECPA Lawsuits Is Just the Beginning
A national security regulation that most Americans have never heard of is quietly rewriting the rules of data privacy litigation — and…
GOVERNANCE RISK AND COMPLIANCE Epic Systems Lawsuit Exposes Major Vulnerabilities in Healthcare Data Privacy and Interoperability
In a high-profile federal lawsuit filed in January 2026, electronic health records giant Epic Systems has accused multiple companies of systematically exploiting…