News, analysis, and guidance across GRC, risk, audit, and regulatory compliance.
Privacy & Data ProtectionThis AI tool intake template helps organizations comply with GDPR by enforcing data minimization, lawful basis, and transparency before AI deployment.
Privacy & Data ProtectionCalifornia s SB 923, effective January 1, 2027, expands CCPA deletion obligations to cover personal data regardless of who originally collected it. This isn t just another compliance checkbox. It s a
Privacy & Data ProtectionThe Challenge Manufacturers and sellers of digital products in the EU now face a strict deadline: report all exploited vulnerabilities and severe security incidents within 24 hours of discovery. This
Privacy & Data ProtectionYou re evaluating how to classify and protect medical information in your data processing register . This decision is critical. Grindr recently agreed to a £26 million ($35.2 million) settlement over
Get weekly security insights and compliance updates delivered to your inbox.
Privacy & Data ProtectionUber s €825 million fine from the Dutch data protection authority isn t just a headline. It s a warning that automated decision-making systems affecting employment, access, or benefits now carry signi
Privacy & Data ProtectionYou ve categorized your data, drafted your privacy notice, and set up a toll-free number for data subject requests. But if an auditor or regulator asked you to prove your CCPA compliance tomorrow, cou
Privacy & Data ProtectionAs California ramps up enforcement and companies rush to meet CCPA obligations, a familiar organizational fault line emerges: who owns the privacy notice on your website? Compliance teams understand l
Privacy & Data ProtectionThe California Individual Rights Act (CPRA) took effect on January 1, 2023, with enforcement starting July 1, 2023. Unlike the California Consumer Privacy Act (CCPA) it replaced, the CPRA expands cons
Privacy & Data ProtectionYou re staring at a spreadsheet with five tabs, one for each state privacy law your company needs to comply with. California wants data protection assessments. Utah doesn t. Connecticut requires unive
Privacy & Data ProtectionThe U.K. has updated its data protection rules with a new law aimed at simplifying compliance with existing privacy legislation, including GDPR . For compliance officers managing data processing regis
Privacy & Data ProtectionYou re processing data for customers or employees in Switzerland. Your legal team asks whether you need to comply with the revised Swiss Federal Act on Data Protection (revFADP). Your GDPR program is
Privacy & Data ProtectionIreland s Data Protection Commission imposed a record €1.2 billion fine on Meta in May 2023 for transferring European Facebook user data to the United States without adequate protection from U.S. inte
Privacy & Data ProtectionYour security team just deployed an AI-powered threat detection tool. Your legal department is experimenting with a contract analysis assistant. Your customer service team wants to use a chatbot train
Privacy & Data ProtectionYour privacy compliance program needs to address 19 state laws and counting. If you re still managing regulatory tracking in spreadsheets and static documents, you re falling behind. This template pro
Privacy & Data ProtectionSingapore s September deadline for DPO registration sent a clear signal: regulators expect you to prove compliance readiness on demand. The Personal Data Protection Commission s notification to compan
Privacy & Data ProtectionThe Spanish Data Protection Authority s January 2026 notice and the European Commission s draft Code of Practice on AI transparency mark a regulatory shift. If your organization views these as distant
Privacy & Data ProtectionThe Challenge On January 1, 2026, the Indiana Consumer Data Protection Act (CDPA) took effect, giving enforcement authority to the Indiana Attorney General s Office. For a mid-sized Midwest retailer o
Privacy & Data ProtectionQuestions about GDPR compliance frequently arise in compliance channels, vendor discussions, and audit preparations. Even six years after GDPR s implementation, teams still grapple with key issues: wh
Privacy & Data ProtectionThe EU AI Act s Fundamental Rights Impact Assessment (FRIA) requirement goes live in three months. If your team is deploying high-risk AI systems as a public body or regulated private entity, Article
Privacy & Data ProtectionThe EU Data Act takes effect in September 2025. If you re running connected products or cloud services with EU users, you re in scope, regardless of where you re headquartered. This isn t just another
