Browse the full DataRidge library of data protection and governance guidance.
Privacy RegulationsPurpose of This Checklist California s Privacy Rights Act (CPRA) is now in effect, even as final regulations are still pending. You re dealing with an active law, impending enforcement, and the need t
Privacy RegulationsYou can t audit what you haven t mapped. Cross-border data transfers are a key focus of GDPR enforcement, yet many organizations treat transfer mechanisms as a one-time paperwork exercise. With superv
Privacy RegulationsThe Washington Privacy Act returned for a public hearing on January 15, 2020, with bipartisan support and endorsements from several privacy advocates. However, experts Jevan Hutson and Jennifer Lee te
Privacy RegulationsThe ICO s Age Appropriate Design Code isn t limited to social media platforms and gaming companies. If your service collects data online, you re likely covered, even if children aren t your target dem
Get weekly security insights and compliance updates delivered to your inbox.
Privacy RegulationsUnderstanding the Risk Your interaction with a supervisory authority doesn t end with your final response. Under GDPR Article 82 , every data subject whose personal data you ve mishandled can pursue d
International Data TransfersThe invalidation of the EU-U.S. Privacy Shield on July 16, 2020, didn t just eliminate a transfer mechanism. It exposed how many legal and compliance teams had built their cross-border data strategies
Privacy RegulationsThe Conventional Wisdom You ve heard it in every compliance workshop: Build your privacy program with enough runway. Map your data flows, document your processing activities, train your teams, and imp
Compliance & MonitoringThe Challenge In 2018, a real estate developer named Alastair Mactaggart, with no legislative background, managed to push the California Consumer Privacy Act through a ballot initiative. Two years lat
Privacy RegulationsThe Legislative Wave In early 2021, six U.S. states, Washington, Connecticut, Minnesota, New York, Oklahoma, and Virginia, introduced comprehensive privacy legislation almost simultaneously. Each stat
Privacy RegulationsPrivacy commissioners don t just enforce regulations; they shape them. When the Office of the Privacy Commissioner of Canada issued its preliminary reaction to Bill C-30, it opened a formal consultati
Breach & Risk AssessmentThe Privacy Commissioner s investigation into Human Resources and Skills Development Canada s breach of student loan recipient information follows a familiar pattern: a sensitive data exposure, regula
International Data TransfersThe Schrems II decision left you with a choice: patch your existing transfer mechanisms with supplementary measures , wait for a new adequacy decision , or explore alternative frameworks. Now, a third
Legal Basis & ConsentThe question at hand You re redesigning your consent mechanism. Engineering wants a streamlined experience with minimal clicks. Legal wants clear, granular choices. Your product manager argues that fr
International Data TransfersThese questions keep landing in legal team Slack channels, compliance officer inboxes, and DPO office hours. They re coming from product teams launching new features, procurement officers vetting SaaS
Privacy RegulationsThe Ohio Personal Privacy Act (OPPA) introduces a unique feature not found in Virginia, Colorado, or Connecticut: a safe harbor for businesses that conform to the NIST Privacy Framework . This isn t j
Privacy RegulationsWhat Happened In August 2021, Amazon was hit with an $888 million fine for GDPR violations. This penalty highlighted a growing trend where data protection enforcement intersects with competition regul
Data Governance FrameworksYour legal team keeps asking if the Digital Services Act is basically GDPR for platforms. Your compliance roadmap treats the AI Act as a data protection extension. You re not alone, but you re prepari
Privacy RegulationsScope This guide helps your team track the U.K. Information Commissioner s Office (ICO) regulatory direction since John Edwards took office on January 4, 2022. Use it to anticipate enforcement priorit
Privacy RegulationsThe EU AI Act introduces a risk-based framework that complements your existing GDPR obligations. If you re a Data Protection Officer, you re facing a practical question: do you extend your current dat
generalYour team joins the International Association of Privacy Professionals . You attend a webinar. You earn a certification. Then you wait for compliance to improve. It doesn t. Professional associations
