Practical compliance insight on consent management, cookie law, and tracking technologies.
Laws and RegulationsWhy These Mistakes Keep Happening You re building compliance programs without a federal privacy framework. Although Rep. Suzan DelBene proposed federal legislation in 2021, it hasn t materialized. Ins
Laws and RegulationsYou re tracking a new data protection law. Implementation is officially delayed until year-end. Your legal team has scheduled a compliance review for Q4. Then, overnight, the Senate reverses course an
Laws and RegulationsThese questions come from compliance teams I ve been talking to since California s privacy regulators announced their enforcement posture in mid-July 2023. The California Privacy Protection Agency (CP
Laws and RegulationsThe European Commission adopted the EU-U.S. Data Privacy Framework on July 10, 2023. This framework requires U.S. companies to self-certify before they can lawfully receive EU personal data. Unlike ty
Get weekly security insights and compliance updates delivered to your inbox.
Laws and RegulationsYour legal team just approved using AI to process customer support tickets. You re about to paste the first batch of emails into ChatGPT when you remember: those emails contain names, account numbers,
Laws and RegulationsIf you re building a sensitive data inventory, you ve likely noticed that sensitive means different things in different states. This is especially true for gender and sexuality data. States like Color
Laws and RegulationsScope This guide explains how nine U.S. state privacy laws define targeted advertising and what activities they exempt. You ll find statutory citations, a comparative reference table, and guidance for
Laws and RegulationsThe challenge Your legal team developed a single opt-out mechanism for targeted advertising across U.S. state privacy laws. It worked for Virginia, Colorado, Utah, Connecticut, Montana, Iowa, Tennesse
Laws and RegulationsA new wave of state privacy legislation surfaced in early 2021, creating a more fragmented compliance landscape. Connecticut, Minnesota, New York, Oklahoma, and Virginia introduced privacy bills, join
Laws and RegulationsUnderstanding State Privacy Laws Your data governance team is grappling with 12 different state privacy laws, each with its own rules for handling sensitive personal information. California wants a Li
Laws and RegulationsIf you re treating internet-accessible information as publicly available under state privacy laws, you might be misclassifying personal information and exposing your organization to compliance risk. M
Laws and RegulationsYour legal team chose legitimate interest as the lawful basis for processing training data. Your DPO documented a balancing test. Your AI team scraped publicly available profiles to fine-tune a recomm
Consent InterfacesWhat Happened In early 2021, Norway s Datatilsynet announced its intention to fine Grindr $12 million following a complaint by the Norwegian Consumer Council (NCC). This penalty, the largest ever issu
Laws and RegulationsThe Conventional Wisdom Many privacy teams treat AI prompt logs like toxic waste. When someone submits a deletion request, they search every prompt, purge every mention, and document the destruction.
Laws and RegulationsWhen California s Third District Court of Appeal overturned a lower court s stay on February 9, the enforcement landscape changed overnight. The California Privacy Protection Agency (CPPA) can now enf
Laws and RegulationsThe American Privacy Records Act (APRA), introduced on April 7, could invalidate the compliance frameworks you ve built under state laws. Unlike the failed American Data Privacy and Protection Act, AP
Laws and RegulationsYour legal team just forwarded the latest California enforcement settlement. Your engineering lead is asking what an SDK governance framework actually entails. Your product manager wants to know if yo
Laws and RegulationsScope This guide explains how SB 690 eliminates private rights of action under the California Invasion of Privacy Act (CIPA) Section 638.51, which has led to numerous digital-privacy lawsuits since 20
Laws and RegulationsYou re examining the Ohio Personal Privacy Act (OPPA), which offers a rare choice: tailor compliance controls to OPPA s requirements or align with the NIST Privacy Framework for a safe harbor. This is
Laws and RegulationsWho Should Lead AI Compliance? When your organization uses AI systems that handle personal data, deciding who should lead the compliance effort is crucial. Two main perspectives exist. One suggests th
