GDPR in the US: Does GDPR Apply to US Companies?
General Data Protection Regulation (GDPR) applies to any US company that offers goods or services to people in the European Union (EU) or monitors their behavior there. You […]
Explore the blog
Latest analysis
Read the evidence
CCPA Cookie Banner Requirements: Compliance Guide (2026)
The CCPA does not require a cookie banner. No provision of the statute or the California Privacy Protection Agency’s regulations mandates one. The regulations go further: under 11 […]
What is a Record of Processing Activities (RoPA)?
A record of processing activities (RoPA) is a written inventory of how an organization handles personal data, as required by Article 30 of the GDPR. While it is […]
What is shadow AI? Definition, risks, and what to do about it?
Shadow AI happens when employees use AI tools or features without IT or security knowing about it. This could be someone pasting customer data into their personal ChatGPT, […]
Data Risk Management Framework Explained
A data risk management framework (DRMF) is a structured, repeatable system that helps organizations identify, assess, address, and monitor risks related to their data wherever it is created, […]
SB 690 Signed: What California’s New CIPA Law Changes for Businesses
California Governor Gavin Newsom signed Senate Bill 690 on September 30, 2026. The law ends the private right of action under the California Invasion of Privacy Act’s “pen […]
What is a Risk Register & How to Build One [Free Template]
A risk register is an up-to-date list of the risks your organization has identified. It shows what each risk is, how likely it is, how much harm it […]
What Is COPPA? The Children’s Online Privacy Protection Act Explained
The Children’s Online Privacy Protection Act (COPPA) is a US law from 1998, updated in 2025, that controls what websites, apps, and online services can collect from kids […]
Data Privacy Regulations: Global, Federal & State Laws (2026)
Data privacy regulations govern how organizations collect, use, store, and share personal data and what rights people have over it. There is no single global rulebook. 172 countries […]
Privacy Policy Requirements: What Your Policy Must Disclose (Guide)
A privacy policy must disclose who you are and how to contact you, what personal data you collect, why you collect it, who receives it, how long you […]