Practical compliance insight on consent management, cookie law, and tracking technologies.
Laws and RegulationsCalifornia Governor Gavin Newsom vetoed AB 1542, rejecting a ban on selling sensitive personal information. This decision keeps California from aligning with states like Maryland and New Jersey, which
Laws and RegulationsYou ve read the summaries, skimmed the vendor decks, and maybe even sat through a webinar. But compliance managers still walk into CCPA audits carrying assumptions that haven t been true since the CPR
Laws and RegulationsWhen a data breach lands on your desk, the incident response doesn t end with notification. You re now managing two parallel tracks: regulatory compliance and potential civil liability. Under Article
Laws and RegulationsGovernor Gavin Newsom signed Senate Bill 690 on September 30, 2026, limiting private lawsuits under the California Invasion of Privacy Act (CIPA) related to website-tracking technologies. This raises
Get weekly security insights and compliance updates delivered to your inbox.
Laws and RegulationsThe first CCPA cybersecurity audit period starts January 1, 2027, and legal and privacy teams are already fielding questions. Unlike risk assessments that began this year, cybersecurity audits present
Laws and RegulationsThe Challenge In August 2022, the California Attorney General announced a $1.2 million settlement with Sephora , marking the first CCPA enforcement action focused on Global Privacy Control (GPC) compl
Laws and RegulationsThe conventional wisdom: If you run an online business, adding a contact form to your privacy page satisfies California s subject rights request requirements. It s just a form. Use your CMS, wire it t
Laws and RegulationsThe European Data Protection Board (EDPB) has introduced a structured methodology for Data Protection Authorities (DPAs) to decide on imposing administrative fines under the GDPR . This isn t just pro
Laws and RegulationsScope: What This Guide Covers This guide explains how Consent Management Platforms (CMPs) enforce privacy law requirements at the technical level. You ll learn the specific requirements CMPs must meet
Laws and RegulationsIf your organization qualifies as a micro-company, small company, or startup under Brazil s Data Protection Law, you re working under a different compliance framework than larger enterprises. On Jan.
Laws and RegulationsThe Question at Hand Your organization wants to deliver location-aware features. Marketing wants proximity targeting. Product wants personalized experiences. Engineering says the architecture s ready.
Laws and RegulationsYou ve been tracking PIPEDA enforcement for years, and the pattern s been consistent: investigations, findings, commitments, maybe a Federal Court order. The Office of the Privacy Commissioner of Cana
Laws and RegulationsThe Irish Data Protection Commission s €403 million fine against Google for location-data processing failures between May 2018 and February 2020 highlights a crucial issue: transparency in data use. U
Laws and RegulationsThe European Data Protection Board adopted new guidelines on September 17, 2026, outlining a five-step method for data protection authorities to impose administrative fines under GDPR . Many complianc
Laws and RegulationsA 100,000 EUR fine against Securitas Direct by the Spanish DPA highlights a common oversight: offering free channels for data subject rights isn t enough if you re also directing people to paid option
Laws and RegulationsWhat Happened In May 2026, the European Data Protection Board (EDPB) issued Binding Decision 1/2026, resolving a dispute submitted by the Belgian supervisory authority concerning Vlaamse Radio-en Tele
Laws and RegulationsChallenging Conventional Wisdom Many believe that if your non-EEA processor employs remote workers in third countries, you ve created a new cross-border data transfer chain needing additional mechanis
Laws and RegulationsYour legal team needs a consistent process for evaluating cloud vendors and international service providers under PIPEDA . This template offers a structured checklist to document your accountability,
Laws and RegulationsKenya s new cross-border data transfer guidance might seem familiar at first. Standard Clauses, Binding Corporate Rules, and transfer impact assessments are tools you ve already developed for GDPR . H
Laws and RegulationsYou ve mapped your processing activities. Your processor agreements reference Article 28 . Your transfer impact assessments are marked complete. Then an employee of your EEA-based processor boards a f
