Articles on compliance training, ethics culture, whistleblowing, anti-corruption, and more — written for the teams doing the work.
Privacy & Data GovernanceA jury recently found that Meta willfully misled the public on 26 occasions regarding data privacy, hate speech, misinformation, and its investigation of third-party app developers after the Cambridge
Privacy & Data GovernanceThe Conventional Wisdom When regulators announce a new reporting deadline, many security teams react by building a notification process. You draft a template, map out who contacts whom, and create a d
Privacy & Data GovernanceWhat Happened T-Mobile has been found liable for over 722,000 violations of Washington State s data breach notification law, as ruled by a King County Superior Court. The Washington State Attorney Gen
Privacy & Data GovernanceNew Mexico is taking Meta to court for the third time in seven months, this time over claims that Facebook misrepresented its privacy practices. The trial focuses on issues related to the Cambridge An
Get weekly security insights and compliance updates delivered to your inbox.
Privacy & Data GovernanceIf your organization buys, sells, or shares consumer data, you re likely subject to data broker registration requirements. California s privacy agency recently warned data brokers about facing daily f
Privacy & Data GovernanceCalifornia s Legislative Push on AI Employment Decisions California lawmakers recently sent Governor Gavin Newsom a package of eight privacy bills and 16 AI bills, including SB 947, the No Robo Bosses
Privacy & Data GovernanceYou ve probably heard the pitch: treat GDPR compliance as a competitive differentiator. Turn your data protection program into a trust-building engine. Transform regulatory burden into strategic oppor
Privacy & Data GovernanceThe Spanish Data Protection Authority issued a formal notice on January 13, 2026, about the risks of using AI tools with images. The European Commission published its first draft Code of Practice on T
Privacy & Data GovernanceThe Indiana Consumer Data Protection Act (CDPA) took effect on January 1, 2026, and compliance teams are finding that good intentions alone don t prevent costly mistakes. The Indiana Attorney General
Privacy & Data GovernanceIf your company processes data about people in the EU, you might be wondering how to handle GDPR compliance. Whether you re a U.S. software vendor with European customers or an Australian retailer shi
Privacy & Data GovernanceThe Challenge A Virginia-based data broker was fined $36,400 by the California Privacy Protection Agency for not registering as required by state law. Beyond the fine, the company must now honor consu
Privacy & Data GovernanceThe Cyber Incident Reporting for Critical Infrastructure Act of 2022 regulations are expected to be finalized this fall. If your organization qualifies as critical infrastructure, you ll face new mand
Privacy & Data GovernanceMany organizations treat HIPAA training as a simple compliance task: cover the rules, define violations, and get employees to sign off. This might satisfy an auditor, but it won t prevent a phishing e
Privacy & Data GovernanceYour organization completed its GDPR compliance project two years ago. You documented everything, filed the paperwork, and trained the team. Done, right? Not quite. The biggest shift in data protectio
Privacy & Data GovernanceIf you re reporting the same cybersecurity incident to multiple regulators under different frameworks, you re familiar with the inefficiency. The European Commission s digital package, introduced in N
Privacy & Data GovernanceYou re facing a practical question: California just passed privacy legislation that reshapes your legal exposure and your employees obligations. Do you rebuild your training from scratch, update the e
Privacy & Data GovernanceThe Question at Hand The U.K. has updated its data protection rules with a law aimed at simplifying compliance with existing privacy legislation, including the GDPR . This presents a real challenge fo
Privacy & Data GovernanceThe Meta settlement isn t just another Big Tech headline. It s a signal that your compliance team needs to be at the design table, not waiting at the approval gate. Meta agreed to pay up to $17 billio
Privacy & Data GovernanceThe challenge When the California Privacy Protection Agency cybersecurity audit regulations took effect on January 1, 2026, large businesses faced a high-stakes challenge: proving their cybersecurity
Privacy & Data GovernanceThe Problem: Your Compliance Strategy Just Lost Its Safety Valve If you ve been using HIPAA s addressable specifications as a buffer for flexibility, that approach is about to change. The proposed upd
