Browse the full DataRidge library of data protection and governance guidance.
Privacy RegulationsCalifornia s Delete Request and Opt-Out Platform (DROP) went live on January 1, 2026, with over 215,000 registrants and more than 500 registered data brokers. If your organization operates as a data b
Privacy RegulationsYour legal team approved your tracking implementation six months ago. Since then, plaintiffs attorneys have filed class actions using legal theories that didn t exist when you got sign-off. This is th
Privacy RegulationsThe Conventional Wisdom Privacy and legal teams in 2024 have been trying to get ahead of regulatory changes. The goal is to build frameworks before enforcement arrives, anticipate requirements, and st
Breach & Risk AssessmentYour security team just confirmed unauthorized access to customer data. You don t yet know how many records, which fields, or whether the attacker is still in your environment. The clock on your 72-ho
Get weekly security insights and compliance updates delivered to your inbox.
Breach & Risk AssessmentCould your data security program withstand the FTC s scrutiny? The Commission s order against Illuminate Education Inc. offers a clear guide on regulatory expectations. Use this checklist to evaluate
Data QualityConsumer reporting agencies play a crucial role in determining access to housing, credit, and employment. Errors in their data can lead to more than just compliance issues. RentGrow s $2.25 million se
Breach & Risk AssessmentThe FTC s complaint against Hims Hers highlights a common issue: companies often combine privacy violations with deceptive billing practices, then express surprise when regulators take action. The com
Breach & Risk AssessmentWhen the Criminal Records Office (ACRO) discovered unauthorized access to its Kentico CMS between August 2022 and March 2023, exposing sensitive data on over 10,000 individuals, the ICO s reprimand di
Legal Basis & ConsentWhen TikTok and ByteDance agreed to pay up to $400 million to settle Children s Online Privacy Protection Act allegations, it became one of the largest COPPA recoveries on record. The Justice Departme
Breach & Risk AssessmentDaVita, operating over 3,000 kidney dialysis centers across the U.S. and 14 other countries, agreed to pay $15 million to settle class action litigation from a 2025 ransomware attack by the Interlock
Privacy RegulationsThe California Consumer Privacy Act (CCPA) reached its final legislative form on September 6, 2019. Soon after, the California Privacy Rights Act (CPRA) arrived in 2020, creating a critical decision p
Privacy RegulationsThe Challenge In mid-2020, the U.S. faced a familiar roadblock: federal privacy legislation had stalled. The COVID-19 pandemic and social unrest shifted legislative focus, but the real issues were lon
Compliance & MonitoringWhen X Corp. filed its petition to set aside the 2022 FTC settlement order on June 2, 2025, it wasn t just seeking regulatory relief. The company argued that the order no longer applies because every
