Insights from the front lines of privacy policy, analysis and enforcement.
Write for us→River Starnes
10/19/2026
Norway fines Xandr €8.6M over Grindr ad data, Texas settles with Temu, the ICO opens an agentic AI inquiry, and California's privacy package gets a closer read.
Eddy Udegbe
10/14/2026
Colorado's AI Act regulates high-risk AI systems that make consequential decisions. Here is which eCommerce AI tools trigger CAIA and what compliance requires.
River Starnes
10/12/2026
Italy fines IQVIA, BBVA, and Emirates, its email tracking-pixel rules take effect October 29, and California adds a kids' design law and new AI bills.
River Starnes
10/12/2026
The EU proposes its KIDS Act, von der Leyen sets a child-safety and frontier AI agenda, and Newsom weighs SB 690 and three AI employment bills.
River Starnes
10/12/2026
Ireland fines Google €403M over location data, the EDPB adopts fining guidelines, an AI agent breaches Australia's Medicare portal, and SB 923 is signed.
Eddy Udegbe
10/6/2026
Q3 2026 privacy enforcement recap for eCommerce brands: key CIPA, CPPA, and GDPR actions this quarter and what they mean for your compliance program.
River Starnes
10/5/2026
California ends private CIPA pen-register suits with SB 690, the FTC and California AG probe AI agents, and the EDPB's fining guidelines open for comment.
Marc Parrish
9/20/2026
California's SB 690 removes private lawsuits under CIPA's pen register provision, but Section 631 wiretap claims survive. Here's what changes, what doesn't, and what to fix before January 1, 2027.
Yuvraj Singh
9/15/2026
A/B testing and personalization can improve customer experiences, but consent and personal data need a different success metric than ordinary conversion optimization.
Motaz Gandol
9/15/2026
How Shopify merchants can design upsells around cart and purchase context instead of expanding behavioral tracking, and when broader customer data actually earns its place.
River Starnes
9/14/2026
The Dutch DPA hits Uber with a nearly €825 million fine over automated decision-making, French and Irish regulators fine a hospital, a staffing firm, and a health service over breach and DSAR failures, the FTC withdraws its 2021 health-app guidance without touching the underlying rule, and Delaware lowers its privacy law's applicability thresholds.
River Starnes
9/7/2026
Ireland's DPC fines the HSE €645,000 over insecure paper records, California's privacy agency issues its first accuracy-focused advisory against registered data brokers, Connecticut settles with TaxAct over ad-tech data sharing, and Australia opens consultation on the next wave of Privacy Act reforms.
Subscribe to our newsletter for the latest privacy insights and product updates.