Practical compliance insight on consent management, cookie law, and tracking technologies.
Laws and RegulationsThe European Commission adopted the EU-U.S. Data Privacy Framework on July 10, 2023. This framework requires U.S. companies to self-certify before they can lawfully receive EU personal data. Unlike ty
Laws and RegulationsYour legal team just approved using AI to process customer support tickets. You re about to paste the first batch of emails into ChatGPT when you remember: those emails contain names, account numbers,
Laws and RegulationsIf you re building a sensitive data inventory, you ve likely noticed that sensitive means different things in different states. This is especially true for gender and sexuality data. States like Color
Laws and RegulationsScope This guide explains how nine U.S. state privacy laws define targeted advertising and what activities they exempt. You ll find statutory citations, a comparative reference table, and guidance for
Get weekly security insights and compliance updates delivered to your inbox.
Laws and RegulationsThe challenge Your legal team developed a single opt-out mechanism for targeted advertising across U.S. state privacy laws. It worked for Virginia, Colorado, Utah, Connecticut, Montana, Iowa, Tennesse
Laws and RegulationsA new wave of state privacy legislation surfaced in early 2021, creating a more fragmented compliance landscape. Connecticut, Minnesota, New York, Oklahoma, and Virginia introduced privacy bills, join
Laws and RegulationsUnderstanding State Privacy Laws Your data governance team is grappling with 12 different state privacy laws, each with its own rules for handling sensitive personal information. California wants a Li
Laws and RegulationsIf you re treating internet-accessible information as publicly available under state privacy laws, you might be misclassifying personal information and exposing your organization to compliance risk. M
Laws and RegulationsYour legal team chose legitimate interest as the lawful basis for processing training data. Your DPO documented a balancing test. Your AI team scraped publicly available profiles to fine-tune a recomm
Laws and RegulationsThe Conventional Wisdom Many privacy teams treat AI prompt logs like toxic waste. When someone submits a deletion request, they search every prompt, purge every mention, and document the destruction.
Laws and RegulationsWhen California s Third District Court of Appeal overturned a lower court s stay on February 9, the enforcement landscape changed overnight. The California Privacy Protection Agency (CPPA) can now enf
Laws and RegulationsThe American Privacy Records Act (APRA), introduced on April 7, could invalidate the compliance frameworks you ve built under state laws. Unlike the failed American Data Privacy and Protection Act, AP
Laws and RegulationsYour legal team just forwarded the latest California enforcement settlement. Your engineering lead is asking what an SDK governance framework actually entails. Your product manager wants to know if yo
Laws and RegulationsScope This guide explains how SB 690 eliminates private rights of action under the California Invasion of Privacy Act (CIPA) Section 638.51, which has led to numerous digital-privacy lawsuits since 20
Laws and RegulationsYou re examining the Ohio Personal Privacy Act (OPPA), which offers a rare choice: tailor compliance controls to OPPA s requirements or align with the NIST Privacy Framework for a safe harbor. This is
Laws and RegulationsWho Should Lead AI Compliance? When your organization uses AI systems that handle personal data, deciding who should lead the compliance effort is crucial. Two main perspectives exist. One suggests th
Laws and RegulationsWhat Happened Between July 2023 and January 2026, Connecticut s Data Privacy Act (CTDPA) allowed companies time to fix non-compliance issues before facing enforcement. This changed in July 2026 with S
Laws and RegulationsThe European Data Protection Board (EDPB) recently released guidelines on pseudonymization under the GDPR . For enterprise IT and security teams, these guidelines offer a practical roadmap to reduce d
Laws and RegulationsThe Challenge Consumer Reports Digital Lab encountered a common issue for those handling data subject access requests (DSARs): the lack of a standardized process for consumers to communicate their rig
Laws and RegulationsWith five new state privacy laws taking effect in 2025, enforcement teams are already requesting Data Protection Impact Assessments (DPIAs) in response to consumer complaints and attorney general inve
