Practical compliance insight on consent management, cookie law, and tracking technologies.
Laws and RegulationsThe Conventional Wisdom When a major court decision occurs in Washington or Beijing, privacy teams often react immediately. For example, when the EDPB sends a letter to the European Commission about a
Laws and RegulationsOverview of Recent Developments On July 8, 2026, the European Data Protection Board (EDPB) released new guidelines on anonymisation, reshaping how your team should determine if data falls outside the
Laws and RegulationsWhen the European Data Protection Board (EDPB) adopted Guidelines 02/2025 on blockchain and GDPR compliance on 7 July 2026, it clarified a key point: your technology choices don t override your legal
Laws and RegulationsWhen your Lead Supervisory Authority receives a cross-border cookie consent complaint, you face a pivotal decision: dismiss on procedural grounds or investigate the substance. The EDPB s binding decis
Get weekly security insights and compliance updates delivered to your inbox.
Laws and RegulationsThe European Data Protection Board (EDPB) released draft guidelines on web scraping for generative AI on July 7, 2026. If your team scrapes data for AI training or buys pre-scraped datasets, you re no
Laws and RegulationsWhat Happened On July 7, 2026, the European Data Protection Board published draft Guidelines 02/2026 on Anonymisation, changing how organizations must determine if data falls outside GDPR scope. The g
Laws and RegulationsPrivacy teams are grappling with the Vermont Data Privacy and Online Surveillance Act (VDPOSA), effective January 1, 2028. If you ve built a multi-state privacy program around Connecticut or Colorado
Laws and RegulationsThe EDPB s July 2026 draft Guidelines on Anonymisation aim to provide a structured framework for assessing whether data is truly anonymous. However, many teams misinterpret the guidance, treating anon
Laws and RegulationsThe California Privacy Protection Agency s enforcement actions in 2025 were not just theoretical warnings. Honda paid $632,500 for missing vendor contract terms. Todd Snyder s portal silently ignored
Laws and RegulationsThe Colorado Privacy Act (CPA) stopped offering second chances on January 1, 2025. The 60-day cure period that allowed businesses to fix violations before facing fines is gone. Now, every enforcement
Laws and RegulationsThe Conventional Wisdom There s a buzz around the Consortium of Privacy Regulators. Vermont joined on Aug. 4, 2026, making it 12 members strong. The idea is that coordinated enforcement leads to predi
Laws and RegulationsYou can t fix what you don t measure. When the California Privacy Protection Agency conducts an audit on your sector, or when a consumer complaint reaches a state Attorney General, the investigation b
Laws and RegulationsYou ve built a consent setup for California and are handling DSARs from Colorado. Now, Utah s privacy law is on your desk, and the first question isn t how to comply, it s whether you re covered at al
Laws and RegulationsThe Challenge On June 30, 2026, a mid-market retailer handling data for 40,000 Connecticut customers was outside the Connecticut Data Privacy Act s (CTDPA) scope. The company didn t sell data, didn t
Laws and RegulationsUnderstanding the TaxAct Settlement Since Connecticut Attorney General William Tong announced the $275,000 TaxAct settlement in August 2026, marketing technology teams, privacy officers, and in-house
Laws and RegulationsYou ve probably heard that California s SB 923 expands deletion rights. What you might not know is how many data governance teams are misinterpreting what all personal information collected about a co
Laws and RegulationsThe California attorney general recently secured a $1.55 million settlement from Healthline Media for CCPA violations involving online tracking and inferred sensitive personal information. This is the
Laws and RegulationsThe EDPB Binding Decision 1/2026 , published on July 14, 2026, addresses a key procedural question: when can you dismiss a GDPR complaint as abusive? The decision examined whether the Belgian SA shoul
Laws and RegulationsThe European Commission has released draft adequacy decisions for the UK under both the General Data Protection Regulation (GDPR) and the Law Enforcement Directive. Once these decisions pass the Europ
Laws and RegulationsThe Challenge Your marketing team wants to draft personalized emails using a large language model. Your support desk wants to summarize customer complaints with AI assistance. Your HR department wants
