Browse the full DataRidge library of data protection and governance guidance.
Privacy RegulationsWhat Changed The U.S. remains the only major economy without comprehensive federal privacy legislation. Rep. Suzan DelBene introduced a federal privacy bill in 2021, gaining support from the U.S. Cham
Privacy RegulationsPurpose of This Checklist California s Privacy Rights Act (CPRA) is now in effect, even as final regulations are still pending. You re dealing with an active law, impending enforcement, and the need t
Privacy RegulationsYou can t audit what you haven t mapped. Cross-border data transfers are a key focus of GDPR enforcement, yet many organizations treat transfer mechanisms as a one-time paperwork exercise. With superv
Privacy RegulationsThe Washington Privacy Act returned for a public hearing on January 15, 2020, with bipartisan support and endorsements from several privacy advocates. However, experts Jevan Hutson and Jennifer Lee te
Get weekly security insights and compliance updates delivered to your inbox.
Privacy RegulationsThe ICO s Age Appropriate Design Code isn t limited to social media platforms and gaming companies. If your service collects data online, you re likely covered, even if children aren t your target dem
Privacy RegulationsUnderstanding the Risk Your interaction with a supervisory authority doesn t end with your final response. Under GDPR Article 82 , every data subject whose personal data you ve mishandled can pursue d
Privacy RegulationsThe Conventional Wisdom You ve heard it in every compliance workshop: Build your privacy program with enough runway. Map your data flows, document your processing activities, train your teams, and imp
Privacy RegulationsThe Legislative Wave In early 2021, six U.S. states, Washington, Connecticut, Minnesota, New York, Oklahoma, and Virginia, introduced comprehensive privacy legislation almost simultaneously. Each stat
Privacy RegulationsPrivacy commissioners don t just enforce regulations; they shape them. When the Office of the Privacy Commissioner of Canada issued its preliminary reaction to Bill C-30, it opened a formal consultati
Privacy RegulationsThe Ohio Personal Privacy Act (OPPA) introduces a unique feature not found in Virginia, Colorado, or Connecticut: a safe harbor for businesses that conform to the NIST Privacy Framework . This isn t j
Privacy RegulationsWhat Happened In August 2021, Amazon was hit with an $888 million fine for GDPR violations. This penalty highlighted a growing trend where data protection enforcement intersects with competition regul
Privacy RegulationsScope This guide helps your team track the U.K. Information Commissioner s Office (ICO) regulatory direction since John Edwards took office on January 4, 2022. Use it to anticipate enforcement priorit
Privacy RegulationsThe EU AI Act introduces a risk-based framework that complements your existing GDPR obligations. If you re a Data Protection Officer, you re facing a practical question: do you extend your current dat
Privacy RegulationsThe European Data Protection Board (EDPB) is becoming increasingly central to your data protection strategy. With the EU s Digital Omnibus package proposing amendments to the GDPR and Anu Talus leadin
Privacy RegulationsCalifornia s Delete Request and Opt-Out Platform (DROP) went live on January 1, 2026, with over 215,000 registrants and more than 500 registered data brokers. If your organization operates as a data b
Privacy RegulationsWhen supervisory authorities share case files and coordinate enforcement actions, your compliance gaps become visible across multiple jurisdictions simultaneously. Regulatory enforcement cooperation i
Privacy RegulationsYour legal team approved your tracking implementation six months ago. Since then, plaintiffs attorneys have filed class actions using legal theories that didn t exist when you got sign-off. This is th
Privacy RegulationsThe Challenge When the Global Privacy Enforcement Network (GPEN) conducted a coordinated sweep of mobile applications, the Office of the Privacy Commissioner (OPC) contacted developers whose apps had
Privacy RegulationsThe era of a unified U.S. state privacy law has ended. In 2024, seven states passed new privacy laws, bringing the total to 19. These laws diverged from the Washington State Privacy Act framework that
Privacy RegulationsThe Conventional Wisdom Privacy and legal teams in 2024 have been trying to get ahead of regulatory changes. The goal is to build frameworks before enforcement arrives, anticipate requirements, and st
