Browse the full DataRidge library of data protection and governance guidance.
Privacy RegulationsWhat Happened On August 10, 2026, the California Privacy Protection Agency issued an order against LocateSmarter, LLC, an Iowa-based data broker, for violations of both California s data broker law an
Breach & Risk AssessmentWhen identity verification vendors handle millions of documents, you d expect them to secure those systems like a vault. Yet, lawsuits are filed, the FBI is investigating, and 153 million driver s lic
Data Lifecycle & DisposalYou re accountable for compliance decisions. But how often do you consider how the regulations you implement were actually negotiated? The gap between regulatory text and the political process that pr
Privacy RegulationsWhat Happened On January 4, 2023, the Irish Data Protection Commission imposed a €390 million fine on Meta for its Facebook and Instagram platforms. This significant enforcement action marks one of th
Get weekly security insights and compliance updates delivered to your inbox.
Breach & Risk AssessmentThe Challenge Between December 2 and December 18, 2025, an unauthorized actor accessed Amazon Web Services infrastructure belonging to Aesto Health, a healthcare data management provider. Aesto stores
Access ControlThe question at hand NIS2 compliance teams face a resource allocation problem. Article 21 lists ten security requirements, from supply chain due diligence to incident response protocols. All carry the
Privacy RegulationsThe California Consumer Privacy Act (CCPA) keeps evolving. If your team is building a compliance program around a regulation that s being amended mid-implementation, you re not just managing privacy r
Breach & Risk AssessmentWhat Happened UK organizations are facing a surge in litigation following cyber incidents. Legal teams report increased exposure in three areas: individual personal data claims under data protection l
Privacy RegulationsWhat Changed The U.S. remains the only major economy without comprehensive federal privacy legislation. Rep. Suzan DelBene introduced a federal privacy bill in 2021, gaining support from the U.S. Cham
Privacy RegulationsPurpose of This Checklist California s Privacy Rights Act (CPRA) is now in effect, even as final regulations are still pending. You re dealing with an active law, impending enforcement, and the need t
Privacy RegulationsUnderstanding the Risk Your interaction with a supervisory authority doesn t end with your final response. Under GDPR Article 82 , every data subject whose personal data you ve mishandled can pursue d
International Data TransfersThe invalidation of the EU-U.S. Privacy Shield on July 16, 2020, didn t just eliminate a transfer mechanism. It exposed how many legal and compliance teams had built their cross-border data strategies
Compliance & MonitoringThe Challenge In 2018, a real estate developer named Alastair Mactaggart, with no legislative background, managed to push the California Consumer Privacy Act through a ballot initiative. Two years lat
Privacy RegulationsPrivacy commissioners don t just enforce regulations; they shape them. When the Office of the Privacy Commissioner of Canada issued its preliminary reaction to Bill C-30, it opened a formal consultati
International Data TransfersThese questions keep landing in legal team Slack channels, compliance officer inboxes, and DPO office hours. They re coming from product teams launching new features, procurement officers vetting SaaS
Privacy RegulationsCalifornia s Delete Request and Opt-Out Platform (DROP) went live on January 1, 2026, with over 215,000 registrants and more than 500 registered data brokers. If your organization operates as a data b
Privacy RegulationsYour legal team approved your tracking implementation six months ago. Since then, plaintiffs attorneys have filed class actions using legal theories that didn t exist when you got sign-off. This is th
Privacy RegulationsThe Conventional Wisdom Privacy and legal teams in 2024 have been trying to get ahead of regulatory changes. The goal is to build frameworks before enforcement arrives, anticipate requirements, and st
Breach & Risk AssessmentYour security team just confirmed unauthorized access to customer data. You don t yet know how many records, which fields, or whether the attacker is still in your environment. The clock on your 72-ho
Breach & Risk AssessmentCould your data security program withstand the FTC s scrutiny? The Commission s order against Illuminate Education Inc. offers a clear guide on regulatory expectations. Use this checklist to evaluate
