Practical compliance insight on consent management, cookie law, and tracking technologies.
Consent PrinciplesA comprehensive template to assess dataset anonymisation against GDPR standards, documenting techniques and residual re-identification risks for compliance.
Laws and RegulationsThe EDPB's guidelines emphasize GDPR corrective powers, such as processing bans, which can disrupt operations more than fines. Shift compliance priorities accordingly.
Laws and RegulationsThe Challenge In 2020, the Norwegian Consumer Council filed a complaint against Xandr (then AppNexus, now part of Microsoft) over its handling of personal data during real-time bidding on Grindr, a da
Laws and RegulationsWhen Securitas Direct printed a chargeable 902 telephone number on their video surveillance notices, they created what seemed like a minor inconvenience. The Spanish Data Protection Authority saw it d
Get weekly security insights and compliance updates delivered to your inbox.
Laws and RegulationsWhen a data breach lands on your desk, the incident response doesn t end with notification. You re now managing two parallel tracks: regulatory compliance and potential civil liability. Under Article
Laws and RegulationsYou ve been tracking PIPEDA enforcement for years, and the pattern s been consistent: investigations, findings, commitments, maybe a Federal Court order. The Office of the Privacy Commissioner of Cana
Laws and RegulationsYou ve mapped your processing activities. Your processor agreements reference Article 28 . Your transfer impact assessments are marked complete. Then an employee of your EEA-based processor boards a f
Laws and RegulationsCalifornia s new AB 2561 law has sparked questions from many teams about its impact on mobile apps. The main confusion lies in how it differs from the California Consumer Privacy Act (CCPA) and whethe
Laws and RegulationsWhen a jurisdiction proposes sweeping privacy reforms, the compliance community tends to react in one of two ways: panic over imagined requirements or dismissal based on outdated assumptions. Australi
Laws and RegulationsScope This guide focuses on the Maryland Online Data Privacy Act (MODPA) compliance for businesses already operating under privacy frameworks in states like California, Virginia, Colorado, and Connect
Consent InterfacesThe Challenge In late 2022, a privacy team at a mid-sized retailer faced a dilemma during their CCPA compliance review: should they post a Do Not Sell My Personal Information link when their privacy n
Laws and RegulationsProfiling isn t just about the data you collect; it s about the impact of your automated decisions. Privacy laws in the US and Europe distinguish between automated decisions with legal or similarly si
Laws and RegulationsCalifornia s updated CCPA regulations clarified the Do Not Sell or Share My Personal Information requirements three months before enforcement. If you re still drafting disclosure language from scratch
Laws and RegulationsWhen someone submits an Article 17 erasure request for data used in training an AI model, your legal team needs a clear response framework. This template guides you through deciding whether to honor,
Laws and RegulationsWhat Happened On November 3, 2020, California voters approved Proposition 24, establishing the California Privacy Rights Act (CPRA) . Despite mixed support from privacy advocates and opposition from i
Laws and RegulationsIf you re building a sensitive data inventory, you ve likely noticed that sensitive means different things in different states. This is especially true for gender and sexuality data. States like Color
Laws and RegulationsScope This guide explains how nine U.S. state privacy laws define targeted advertising and what activities they exempt. You ll find statutory citations, a comparative reference table, and guidance for
Laws and RegulationsA new wave of state privacy legislation surfaced in early 2021, creating a more fragmented compliance landscape. Connecticut, Minnesota, New York, Oklahoma, and Virginia introduced privacy bills, join
Laws and RegulationsThe American Privacy Records Act (APRA), introduced on April 7, could invalidate the compliance frameworks you ve built under state laws. Unlike the failed American Data Privacy and Protection Act, AP
Laws and RegulationsThe EU General Court recently ruled that the European Commission violated EU data protection laws by transferring personal data to the U.S. without proper safeguards. The Commission must pay damages t
