News, analysis, and guidance across GRC, risk, audit, and regulatory compliance.
Privacy & Data ProtectionUber s €825 million fine from the Dutch data protection authority isn t just a headline. It s a warning that automated decision-making systems affecting employment, access, or benefits now carry signi
Privacy & Data ProtectionYou ve categorized your data, drafted your privacy notice, and set up a toll-free number for data subject requests. But if an auditor or regulator asked you to prove your CCPA compliance tomorrow, cou
Privacy & Data ProtectionYou re staring at a spreadsheet with five tabs, one for each state privacy law your company needs to comply with. California wants data protection assessments. Utah doesn t. Connecticut requires unive
Privacy & Data ProtectionIreland s Data Protection Commission imposed a record €1.2 billion fine on Meta in May 2023 for transferring European Facebook user data to the United States without adequate protection from U.S. inte
Get weekly security insights and compliance updates delivered to your inbox.
Privacy & Data ProtectionThe Spanish Data Protection Authority s January 2026 notice and the European Commission s draft Code of Practice on AI transparency mark a regulatory shift. If your organization views these as distant
Privacy & Data ProtectionThe Challenge On January 1, 2026, the Indiana Consumer Data Protection Act (CDPA) took effect, giving enforcement authority to the Indiana Attorney General s Office. For a mid-sized Midwest retailer o
Privacy & Data ProtectionScope This guide addresses the compliance and risk management challenges created when regulatory enforcement actions conclude with undisclosed settlement terms. It s for privacy officers, compliance t
