Our Take

Why It Matters: As businesses increasingly rely on AI and algorithmic models to optimize pricing and labor costs, state legislatures are...

From "Paper Compliance" to "Technical Verification": The $12.75M GM Settlement and Beyond The era of "checking the box" on privacy is...

On April 15, 2026, the European Data Protection Board ("EDPB") adopted Guidelines 1/2026 on the processing of personal data for...

On January 26, the European Commission adopted an adequacy decision under Article 45 GDPR finding that Brazil's general data privacy law...

On January 26, 2026, the Supreme Court granted the petition in Salazar v. Paramount Global (Case No. 25-459) to address “[w]hether the...

The European Commission has proposed a comprehensive regulation that would repeal and replace the current EU Cybersecurity Act...

The Court of Justice of the European Union ("CJEU"), on request for a preliminary ruling from the Court of Appeal of Cluj, Romania, has...

Ahead of implementation of Indiana's comprehensive data privacy law, Indiana’s Attorney General has released a Consumer Data Privacy Bill...

After legal review following the expected notification date at the tend of September, India's government has notified the Digital...

On October 9, 2025, the European Data Protection Board ("EDPB") and the European Commission issued (for public consultation) joint...

On September 23, 2025, New Zealand passed a targeted update to the Privacy Act 2020 that strengthens transparency around third‑party data...

A new cyber threat, the "Shai-Hulud" worm, has compromised the Node Package Manager (npm) ecosystem, which is widely used by...