Practical compliance insight on consent management, cookie law, and tracking technologies.
Laws and RegulationsChina's Final Cert Guideline shifts focus from certification to operational consent infrastructure and cross-entity data controls for multinational companies.
Laws and RegulationsThe 2026 GDPR guidelines define when web scraping counts as personal data processing for AI training. This checklist helps ensure compliance with legal bases and data rights.
Laws and RegulationsCNIL fined a French hospital EUR 500K after a breach exposed over 700,000 patient and third-party records due to weak authentication and access controls.
Laws and RegulationsThis playbook helps DPOs manage California's changing privacy regulations by integrating CCPA compliance efficiently without overspending or duplicating GDPR efforts.
Get weekly security insights and compliance updates delivered to your inbox.
Laws and RegulationsEXTIA’s EUR 300,000 fine highlights the need for effective DSAR triage. Choosing the right process based on volume and complexity ensures GDPR compliance.
Laws and RegulationsReconstructing professional emails from LinkedIn profiles involves processing personal data under GDPR, creating compliance challenges for sales outreach.
Laws and RegulationsThe EDPB's guidelines emphasize GDPR corrective powers, such as processing bans, which can disrupt operations more than fines. Shift compliance priorities accordingly.
Laws and RegulationsWhen Brazil s National Data Protection Authority (ANPD) published its semiannual Regulatory Agenda Monitoring Report in July 2022, it highlighted a common misconception: regulatory implementation isn
Laws and RegulationsWhen the Norwegian Data Protection Authority fined Xandr NOK 92 million for unlawfully sharing sensitive data from Grindr users, the company s defense was predictable: they assumed someone else had ob
Laws and RegulationsScope This guide explores the legal and operational framework for reconstructing professional email addresses from publicly available data under GDPR Article 6(1)(f) (legitimate interest). It applies
Laws and RegulationsThe Challenge In 2020, the Norwegian Consumer Council filed a complaint against Xandr (then AppNexus, now part of Microsoft) over its handling of personal data during real-time bidding on Grindr, a da
Laws and RegulationsThe question at hand California s privacy legislation puts data brokers in a tough spot: comply with state registration requirements now or wait for potential federal laws. This decision impacts your
Laws and RegulationsThe European Data Protection Board (EDPB) published Guidelines 04/2026 on administrative fines in September 2026, marking a significant change in how supervisory authorities should use their enforceme
Laws and RegulationsGoogle recently resolved a CNIL injunction that threatened fines of €100,000 per day. The French regulator s decision on September 23, 2026, to lift the order provides insight into what regulators dee
Laws and RegulationsThe Conventional Wisdom Many U.S. legal teams view the California Privacy Rights Act (CPRA) as a step toward aligning with the General Data Protection Regulation (GDPR) . The idea is simple: Californi
Laws and RegulationsYou re in a compliance team meeting and someone asks, Do we need a CCPA risk assessment for this? The question comes up more often now that the January 1, 2026 deadline hit. The honest answer is usual
Laws and RegulationsWhen Securitas Direct printed a chargeable 902 telephone number on their video surveillance notices, they created what seemed like a minor inconvenience. The Spanish Data Protection Authority saw it d
Laws and RegulationsA customer clicks stop promotional notifications in a banking app. The setting saves. Seven months later, he s still getting marketing pop-ups. The Italian Data Protection Authority fines the bank EUR
Laws and RegulationsThe Hellenic Data Protection Authority s decision against E.E.T.A.A. S.A. and the Ministry of Social Cohesion and Family Affairs raises a tough question: when your processor s outdated systems cause a
Laws and RegulationsScope This guide details the technical and operational steps needed to ensure compliant channels for data subjects to exercise their GDPR rights under Articles 15-22. It emphasizes Article 12(2) s req
