Practical compliance insight on consent management, cookie law, and tracking technologies.
Laws and RegulationsChina's Final Cert Guideline shifts focus from certification to operational consent infrastructure and cross-entity data controls for multinational companies.
Laws and RegulationsWhen Brazil s National Data Protection Authority (ANPD) published its semiannual Regulatory Agenda Monitoring Report in July 2022, it highlighted a common misconception: regulatory implementation isn
Laws and RegulationsThe question at hand California s privacy legislation puts data brokers in a tough spot: comply with state registration requirements now or wait for potential federal laws. This decision impacts your
Laws and RegulationsYou re in a compliance team meeting and someone asks, Do we need a CCPA risk assessment for this? The question comes up more often now that the January 1, 2026 deadline hit. The honest answer is usual
Get weekly security insights and compliance updates delivered to your inbox.
Laws and RegulationsYou ve read the summaries, skimmed the vendor decks, and maybe even sat through a webinar. But compliance managers still walk into CCPA audits carrying assumptions that haven t been true since the CPR
Laws and RegulationsThe European Data Protection Board (EDPB) has introduced a structured methodology for Data Protection Authorities (DPAs) to decide on imposing administrative fines under the GDPR . This isn t just pro
Laws and RegulationsThe European Data Protection Board adopted new guidelines on September 17, 2026, outlining a five-step method for data protection authorities to impose administrative fines under GDPR . Many complianc
Laws and RegulationsWhat Happened In May 2026, the European Data Protection Board (EDPB) issued Binding Decision 1/2026, resolving a dispute submitted by the Belgian supervisory authority concerning Vlaamse Radio-en Tele
Laws and RegulationsHouse Bill 380 has reshaped compliance requirements for Delaware businesses. On September 2, 2026, Governor Carney signed amendments lowering the Delaware Personal Data Privacy Act s (DPDPA) applicabi
Laws and RegulationsThe California Consumer Privacy Act (CCPA) is constantly evolving. Amendments frequently pass through the legislature, potentially altering your disclosure obligations, opt-out processes, or data-rete
Laws and RegulationsUnderstanding the Source of These Questions Recently, Ireland s Data Protection Commission fined the Health Service Executive €645,000 for failing to secure paper medical records in two disused psychi
Laws and RegulationsBetween September 2022 and September 2023, Quebec s Law 25 transitioned from statute to enforcement. Despite clear deadlines, many organizations missed foundational requirements in the first year. Her
Laws and RegulationsWhat Happened A Quebec-based nonprofit running health clinics mistakenly believed it was exempt from Law 25 due to its nonprofit status. This organization processed patient data, coordinated appointme
Laws and RegulationsThe Superior Court for the County of Sacramento gave you extra time on June 30, 2023, delaying enforcement of updated CCPA regulations until March 29, 2024. But here s what many teams overlook: enforc
Laws and RegulationsThese questions come from compliance teams I ve been talking to since California s privacy regulators announced their enforcement posture in mid-July 2023. The California Privacy Protection Agency (CP
Laws and RegulationsYour legal team just approved using AI to process customer support tickets. You re about to paste the first batch of emails into ChatGPT when you remember: those emails contain names, account numbers,
Laws and RegulationsYour legal team chose legitimate interest as the lawful basis for processing training data. Your DPO documented a balancing test. Your AI team scraped publicly available profiles to fine-tune a recomm
Laws and RegulationsWhat Happened Between July 2023 and January 2026, Connecticut s Data Privacy Act (CTDPA) allowed companies time to fix non-compliance issues before facing enforcement. This changed in July 2026 with S
Laws and RegulationsWith five new state privacy laws taking effect in 2025, enforcement teams are already requesting Data Protection Impact Assessments (DPIAs) in response to consumer complaints and attorney general inve
Laws and RegulationsYou re facing 19 different state privacy laws, and the rulebook that let you treat them as variations of the same thing just expired. Seven states enacted privacy laws in 2024, but more importantly, 2
