Practical compliance insight on consent management, cookie law, and tracking technologies.
Laws and RegulationsYou ve mapped your processing activities. Your processor agreements reference Article 28 . Your transfer impact assessments are marked complete. Then an employee of your EEA-based processor boards a f
Laws and RegulationsCalifornia s new AB 2561 law has sparked questions from many teams about its impact on mobile apps. The main confusion lies in how it differs from the California Consumer Privacy Act (CCPA) and whethe
Laws and RegulationsYou ve been tasked with implementing PIPEDA consent. Your legal team demands meaningful consent, your product team wants minimal friction, and you need both before the next feature ships. Here s how t
Laws and RegulationsScope This guide explains Canada s Personal Information Protection and Electronic Documents Act (PIPEDA) for private-sector organizations managing personal information in commercial activities. It s d
Get weekly security insights and compliance updates delivered to your inbox.
Laws and RegulationsHouse Bill 380 has reshaped compliance requirements for Delaware businesses. On September 2, 2026, Governor Carney signed amendments lowering the Delaware Personal Data Privacy Act s (DPDPA) applicabi
Laws and RegulationsWhen CNIL audited EXTIA in April 2025, investigators found that 265 erasure requests had arrived in 2024. More than three-quarters were either ignored or mishandled. Twelve people received no response
Laws and RegulationsA €300,000 CNIL fine against EXTIA in July 2026 highlighted a concern for every DSAR operator: more than three-quarters of 265 erasure requests in 2024 were either unprocessed or mishandled. The issue
Laws and RegulationsWhen a jurisdiction proposes sweeping privacy reforms, the compliance community tends to react in one of two ways: panic over imagined requirements or dismissal based on outdated assumptions. Australi
Laws and RegulationsWhat Happened In summer 2025, an attacker accessed the Computerised Patient Summary (DPI) at Hôpital Privé de la Loire, a private hospital in France. Using a single compromised user account, the attac
Laws and RegulationsUnderstanding the Choice When designing your DSAR intake process, you must decide whether to provide a single access my data form or separate pathways for category-level and specific-information reque
Laws and RegulationsScope This guide focuses on the Maryland Online Data Privacy Act (MODPA) compliance for businesses already operating under privacy frameworks in states like California, Virginia, Colorado, and Connect
Laws and RegulationsThe California Consumer Privacy Act (CCPA) is constantly evolving. Amendments frequently pass through the legislature, potentially altering your disclosure obligations, opt-out processes, or data-rete
Laws and RegulationsWhen a consumer submits a specific-information access request under the California Consumer Privacy Act (CCPA) , you re required to verify their identity to a reasonably high degree of certainty. The
Laws and RegulationsThe December 27, 2022 expiration of the old Standard Contractual Clauses (SCCs) was more than just a paperwork update. It marked a critical compliance deadline for organizations engaged in internation
Consent InterfacesThe Challenge In late 2022, a privacy team at a mid-sized retailer faced a dilemma during their CCPA compliance review: should they post a Do Not Sell My Personal Information link when their privacy n
Laws and RegulationsThe conventional wisdom Many compliance teams wait for the final text of legislative amendments before building their programs. This seems sensible. Why interpret requirements that might change soon?
Laws and RegulationsIf you re managing CCPA compliance, you ve likely deployed a Do Not Sell or Share My Personal Information link on your site. But simply having the link isn t enough. This checklist guides you through
Laws and RegulationsThe California Attorney General s January 27, 2023 investigation into mobile apps in the retail, travel, and food sectors raises a pressing question: where should consumer opt-out mechanisms be integr
Laws and RegulationsUnderstanding the Source of These Questions Recently, Ireland s Data Protection Commission fined the Health Service Executive €645,000 for failing to secure paper medical records in two disused psychi
Laws and RegulationsScope This guide addresses the compliance gap created by the ePrivacy Regulation s delay and the shifting legal landscape for international data transfers following Schrems II. If your team manages cr
