Practical compliance insight on consent management, cookie law, and tracking technologies.
Laws and RegulationsProfiling isn t just about the data you collect; it s about the impact of your automated decisions. Privacy laws in the US and Europe distinguish between automated decisions with legal or similarly si
Laws and RegulationsBetween September 2022 and September 2023, Quebec s Law 25 transitioned from statute to enforcement. Despite clear deadlines, many organizations missed foundational requirements in the first year. Her
Consent InterfacesYou ve implemented Global Privacy Control . Your systems recognize browser-based opt-out signals. You ve told your team the Do Not Share link can come off the homepage. Not so fast. These myths persis
Laws and RegulationsWhen data protection authorities speak at conferences, privacy teams pay close attention. Yet, when these teams return to their desks, they often continue with business as usual. This gap between regu
Get weekly security insights and compliance updates delivered to your inbox.
Laws and RegulationsThe California Privacy Protection Agency s 2023 rulemaking resolved a critical ambiguity: service providers can now retain, use, or disclose deidentified or aggregated information for their own purpos
Laws and RegulationsCalifornia s updated CCPA regulations clarified the Do Not Sell or Share My Personal Information requirements three months before enforcement. If you re still drafting disclosure language from scratch
Laws and RegulationsThree data protection authorities, CNIL , the California attorney general, and the FTC, are ramping up enforcement against mobile apps. If your team manages a mobile app that processes personal data,
Laws and RegulationsContext: Questions from the Washington Privacy Act Hearing On January 15, 2020, the Washington State Legislature s Senate Environment, Energy Technology Committee held its first public hearing on the
Laws and RegulationsThe Challenge Your data governance team faces a complex issue: state privacy laws don t just set thresholds for applicability; some reduce compliance requirements if you process less data. These volum
Laws and RegulationsWhat Happened A Quebec-based nonprofit running health clinics mistakenly believed it was exempt from Law 25 due to its nonprofit status. This organization processed patient data, coordinated appointme
Laws and RegulationsUnderstanding the Scope This guide explains the consent requirements under Washington s My Health My Data Act (WMHMDA), effective March 31, 2024. It s aimed at organizations that may not see themselve
Laws and RegulationsThe Conventional Approach Legal teams often view data protection authority (DPA) investigations as confidential matters. The typical strategy involves cooperating, remediating, and settling if needed.
Laws and RegulationsMany compliance teams see Florida s Digital Bill of Rights (FDBR) and stop at the revenue threshold. If your business doesn t make $1 billion annually, you might think you re exempt from controller ob
Laws and RegulationsYour AI projects need personal data, but GDPR Article 6 requires a lawful basis before processing any records. Many teams default to consent or assume legitimate interest without fully understanding t
Laws and RegulationsWhen someone submits an Article 17 erasure request for data used in training an AI model, your legal team needs a clear response framework. This template guides you through deciding whether to honor,
Laws and RegulationsWhen the Court of Justice of the European Union invalidated the EU-U.S. Privacy Shield on July 16, 2020, thousands of organizations suddenly lost their primary data transfer mechanism. In the rush to
Laws and RegulationsThe Superior Court for the County of Sacramento gave you extra time on June 30, 2023, delaying enforcement of updated CCPA regulations until March 29, 2024. But here s what many teams overlook: enforc
Laws and RegulationsThe Compliance Challenge Washington s My Health My Data Act, passed April 17, 2023, presents a compliance challenge for privacy teams. The Act requires consent for processing Consumer Health Data but
Laws and RegulationsScope This guide outlines the compliance requirements and steps for transferring personal data from the EU to the United States under the EU-U.S. Data Privacy Framework (DPF), which has received an ad
Laws and RegulationsWhat Happened On November 3, 2020, California voters approved Proposition 24, establishing the California Privacy Rights Act (CPRA) . Despite mixed support from privacy advocates and opposition from i
