Practical compliance insight on consent management, cookie law, and tracking technologies.
Laws and RegulationsOn March 20, 2025, Mexico published its new Federal Law on the Protection of Personal Data held by Private Parties in the Official Gazette of the Federation. The law became effective the next day, Mar
Laws and RegulationsOn September 3, 2025, the European General Court rejected French MP Philippe Latombe s request to annul the EU-U.S. Data Privacy Framework (DPF). This decision allows over 3,400 U.S. organizations cer
Laws and RegulationsChina s Q2 2025 regulatory sprint has introduced five simultaneous compliance workstreams for multinational privacy officers. The CAC s draft Cybersecurity Law amendments, TC260 s audit guidelines, th
Laws and RegulationsConnecticut s settlement with TicketNetwork reveals a truth many privacy officers suspect: your privacy policy might be worse than you think. The Attorney General didn t just find missing disclosures.
Get weekly security insights and compliance updates delivered to your inbox.
Laws and RegulationsThe European Data Protection Board (EDPB) is at the heart of a regulatory system under pressure. When Anu Talus became chair in May 2023, she took on the task of ensuring consistent GDPR enforcement a
Laws and RegulationsWith Indiana, Kentucky, and Rhode Island now enforcing comprehensive privacy laws as of January 1, 2026, nearly half of US states require organizations to manage consumer rights, conduct Data Protecti
Laws and RegulationsThe European Data Protection Board (EDPB) launched a contact form on June 24 for stakeholders to report GDPR interpretation inconsistencies across member states. This tool is the Board s first structu
Laws and RegulationsWhen the FTC bars a data broker from selling location data without affirmative express consent, it s not just a headline. It s a 10-year enforcement roadmap. The May 2026 stipulated final order agains
Consent InterfacesYou re operating under 20 state privacy laws, with two more arriving in 2027. There s still no federal baseline to simplify this. What you need isn t another law-by-law summary, it s a decision framew
Laws and RegulationsThe Colorado Privacy Act (CPA) stopped offering second chances on January 1, 2025. The 60-day cure period that allowed businesses to fix violations before facing fines is gone. Now, every enforcement
Laws and RegulationsThe California attorney general recently secured a $1.55 million settlement from Healthline Media for CCPA violations involving online tracking and inferred sensitive personal information. This is the
Laws and RegulationsThe Challenge Your marketing team wants to draft personalized emails using a large language model. Your support desk wants to summarize customer complaints with AI assistance. Your HR department wants
Laws and RegulationsThe breach announced on August 14, 2026, at France s Direction générale des Finances publiques (DGFiP) exposed fiscal and cadastral data, including reference income, withholding rates, family quotient
