Articles on compliance training, ethics culture, whistleblowing, anti-corruption, and more — written for the teams doing the work.
Privacy & Data GovernanceNew Mexico is taking Meta to court for the third time in seven months, this time over claims that Facebook misrepresented its privacy practices. The trial focuses on issues related to the Cambridge An
Privacy & Data GovernanceIf your organization buys, sells, or shares consumer data, you re likely subject to data broker registration requirements. California s privacy agency recently warned data brokers about facing daily f
Privacy & Data GovernanceCalifornia s Legislative Push on AI Employment Decisions California lawmakers recently sent Governor Gavin Newsom a package of eight privacy bills and 16 AI bills, including SB 947, the No Robo Bosses
Privacy & Data GovernanceYou ve probably heard the pitch: treat GDPR compliance as a competitive differentiator. Turn your data protection program into a trust-building engine. Transform regulatory burden into strategic oppor
Get weekly security insights and compliance updates delivered to your inbox.
Privacy & Data GovernanceThe Spanish Data Protection Authority issued a formal notice on January 13, 2026, about the risks of using AI tools with images. The European Commission published its first draft Code of Practice on T
Privacy & Data GovernanceThe Indiana Consumer Data Protection Act (CDPA) took effect on January 1, 2026, and compliance teams are finding that good intentions alone don t prevent costly mistakes. The Indiana Attorney General
Privacy & Data GovernanceIf your company processes data about people in the EU, you might be wondering how to handle GDPR compliance. Whether you re a U.S. software vendor with European customers or an Australian retailer shi
Privacy & Data GovernanceThe Challenge A Virginia-based data broker was fined $36,400 by the California Privacy Protection Agency for not registering as required by state law. Beyond the fine, the company must now honor consu
Privacy & Data GovernanceThe Cyber Incident Reporting for Critical Infrastructure Act of 2022 regulations are expected to be finalized this fall. If your organization qualifies as critical infrastructure, you ll face new mand
Privacy & Data GovernanceMany organizations treat HIPAA training as a simple compliance task: cover the rules, define violations, and get employees to sign off. This might satisfy an auditor, but it won t prevent a phishing e
Privacy & Data GovernanceYour organization completed its GDPR compliance project two years ago. You documented everything, filed the paperwork, and trained the team. Done, right? Not quite. The biggest shift in data protectio
Privacy & Data GovernanceIf you re reporting the same cybersecurity incident to multiple regulators under different frameworks, you re familiar with the inefficiency. The European Commission s digital package, introduced in N
Privacy & Data GovernanceYou re facing a practical question: California just passed privacy legislation that reshapes your legal exposure and your employees obligations. Do you rebuild your training from scratch, update the e
Privacy & Data GovernanceThe Question at Hand The U.K. has updated its data protection rules with a law aimed at simplifying compliance with existing privacy legislation, including the GDPR . This presents a real challenge fo
Privacy & Data GovernanceThe Meta settlement isn t just another Big Tech headline. It s a signal that your compliance team needs to be at the design table, not waiting at the approval gate. Meta agreed to pay up to $17 billio
Privacy & Data GovernanceThe challenge When the California Privacy Protection Agency cybersecurity audit regulations took effect on January 1, 2026, large businesses faced a high-stakes challenge: proving their cybersecurity
Privacy & Data GovernanceThe Problem: Your Compliance Strategy Just Lost Its Safety Valve If you ve been using HIPAA s addressable specifications as a buffer for flexibility, that approach is about to change. The proposed upd
Privacy & Data GovernanceThe Dutch Data Protection Authority s action against Uber, resulting in an €825 million fine, has made automated decision-making a pressing issue for corporate boards. The problem wasn t a data breach
Privacy & Data GovernanceWhat Happened TikTok agreed to pay $400 million to the Department of Justice to settle allegations of repeatedly violating children s privacy. The DOJ announced the settlement but kept the terms confi
Privacy & Data GovernanceThe EU Data Act becomes effective in September 2025, and by September 2026, connected products must be designed for access by design. This timeline is tight for a regulation that fundamentally changes
