Browse the full DataRidge library of data protection and governance guidance.
Privacy RegulationsYou ve probably heard data broker lobbyists claim their operations are too complex to regulate and any restrictions will fail under constitutional scrutiny. The Radaris case, where a New Jersey court
Breach & Risk AssessmentYou ve just learned that a third-party ID verification service your organization uses may have exposed 153 million driver s licenses. The FBI is investigating. Class-action lawsuits have been filed. Y
Privacy RegulationsLate 2019 marked a turning point in GDPR enforcement. At the IAPP s Data Protection Congress in Brussels, supervisory authorities from three countries addressed privacy officers with a clear message:
Data Governance FrameworksYour team s been tasked with designing a privacy experience for younger users. Legal has handed you the COPPA requirements. Your product manager wants a seamless signup process. A board member asks if
Get weekly security insights and compliance updates delivered to your inbox.
Data Governance FrameworksThe enforcement landscape shifted in 2023. The EU General Data Protection Regulation turned five, major enforcement actions hit Big Tech companies, and at least seven US states enacted new data protec
Data Governance FrameworksIf you re managing privacy across business units that operate like independent fiefdoms, you re facing the same coordination challenge as a city government. New York City s Office of Information Priva
Cryptography & EncryptionYour encryption strategy is at a crossroads. Quantum computers capable of breaking current cryptographic algorithms are on the horizon. Tech companies are already building defenses, and your team need
Privacy RegulationsThe ICO s Age Appropriate Design Code isn t limited to social media platforms and gaming companies. If your service collects data online, you re likely covered, even if children aren t your target dem
Privacy RegulationsThe Ohio Personal Privacy Act (OPPA) introduces a unique feature not found in Virginia, Colorado, or Connecticut: a safe harbor for businesses that conform to the NIST Privacy Framework . This isn t j
generalYour team joins the International Association of Privacy Professionals . You attend a webinar. You earn a certification. Then you wait for compliance to improve. It doesn t. Professional associations
Breach & Risk AssessmentA year into mandatory data breach reporting, many organizations are still getting the basics wrong. It s not because the regulations are unclear, GDPR Article 33 and similar frameworks are explicit, b
Privacy RegulationsWhen supervisory authorities share case files and coordinate enforcement actions, your compliance gaps become visible across multiple jurisdictions simultaneously. Regulatory enforcement cooperation i
Breach & Risk AssessmentWhat Changed On June 26, Nissan revealed a critical remote code execution flaw in Oracle PeopleSoft, CVE-2026-35273, had been exploited as a zero-day. This breach exposed Social Security numbers, bank
Breach & Risk AssessmentThe Conventional Wisdom When a major breach makes the news, privacy officers often look to settlement terms for guidance. The 23andMe case is no exception: an $18 million penalty, mandatory risk analy
Breach & Risk AssessmentYour incident response team has brought systems back online. Your communications team has shifted from crisis mode to recovery language. Your board wants to move on. But if you re measuring breach rec
Data Subject RightsPrivacy officers often hear that machine unlearning is the solution to AI s GDPR problem. The idea is straightforward: when someone exercises their right to be forgotten , you unlearn their data from
