News, analysis, and guidance across GRC, risk, audit, and regulatory compliance.
Privacy & Data ProtectionThis AI tool intake template helps organizations comply with GDPR by enforcing data minimization, lawful basis, and transparency before AI deployment.
Privacy & Data ProtectionCalifornia s SB 923, effective January 1, 2027, expands CCPA deletion obligations to cover personal data regardless of who originally collected it. This isn t just another compliance checkbox. It s a
Privacy & Data ProtectionUber s €825 million fine from the Dutch data protection authority isn t just a headline. It s a warning that automated decision-making systems affecting employment, access, or benefits now carry signi
Privacy & Data ProtectionYou ve categorized your data, drafted your privacy notice, and set up a toll-free number for data subject requests. But if an auditor or regulator asked you to prove your CCPA compliance tomorrow, cou
Get weekly security insights and compliance updates delivered to your inbox.
Privacy & Data ProtectionYou re staring at a spreadsheet with five tabs, one for each state privacy law your company needs to comply with. California wants data protection assessments. Utah doesn t. Connecticut requires unive
Privacy & Data ProtectionIreland s Data Protection Commission imposed a record €1.2 billion fine on Meta in May 2023 for transferring European Facebook user data to the United States without adequate protection from U.S. inte
Privacy & Data ProtectionThe Spanish Data Protection Authority s January 2026 notice and the European Commission s draft Code of Practice on AI transparency mark a regulatory shift. If your organization views these as distant
Privacy & Data ProtectionThe Challenge On January 1, 2026, the Indiana Consumer Data Protection Act (CDPA) took effect, giving enforcement authority to the Indiana Attorney General s Office. For a mid-sized Midwest retailer o
Privacy & Data ProtectionScope This guide addresses the compliance and risk management challenges created when regulatory enforcement actions conclude with undisclosed settlement terms. It s for privacy officers, compliance t
