Knowledge Hub

Explore our latest blog posts

Stay ahead of global privacy regulations with practical guidance, expert analysis, and real-world best practices for GDPR, CCPA, and beyond.

Showing 786 articles

AI Governance

Quebec Law 25 Automated Decision Making and AI Hiring

Quebec Law 25 section 12.1 requires notice and an explanation when automated processing alone decides about a job applicant or employee. Text and checklist.

By Daniel de Almeida Afonso

Rhode Island Privacy Law (RIDTPPA): 2026 Compliance Guide

Rhode Island's privacy law (RIDTPPA) has been in force since 1 January 2026, with no cure period and no GPC mandate. Scope, exemptions and penalties explained.

By Daniel de Almeida Afonso

AI Browser Security and Governance Guide for 2026

AI browser security means blocking what you can and governing what you cannot. See Gartner's advice, product status in 2026 and a checklist.

By Daniel de Almeida Afonso

Video Privacy Protection Act (VPPA) Guide for 2026

The Video Privacy Protection Act (VPPA) bars sharing what people watch without written consent, and the Supreme Court is deciding who can sue under it.

By Daniel de Almeida Afonso

Garante Tracking Pixel Guidelines: Italy's Email Rules

The Garante tracking pixel guidelines (provvedimento n. 284) require notice and, mostly, consent for email pixels. The deadline passed on 29 October 2026.

By Daniel de Almeida Afonso

Illinois BIPA in 2026: Clay Ruling, Settlements and Compliance

Illinois's Biometric Information Privacy Act (BIPA) still lets people sue for $1,000 per negligent violation and $5,000 per intentional or reckless violation, but since the Seventh Circuit's April 1, 2026 decision in Clay v. Union Pacific Railroad, repeated scans of the same person by the same method count as one recovery, even in cases that were already pending on August 2, 2024. The ruling cuts damages, not duties: the written policy, written release and no-sale rules are unchanged, and the Illinois Supreme Court has not ruled on retroactivity.

By Daniel de Almeida Afonso

Washington AI Law 2026: Chatbot, Content and Health Data Rules

Washington has no single AI law, but as of October 26, 2026 two statutes signed on March 24 matter most to businesses. HB 2225 regulates AI companion chatbots from January 1, 2027, and HB 1170 requires provenance data on AI-generated images, video and audio from February 1, 2027.

By Daniel de Almeida Afonso

Oct 26, 2026

12 min read

Read

Illinois AI Law 2026: Employer Rules and the New AI Safety Act

Illinois has no single AI law, but as of October 20, 2026 two statutes matter to most businesses, and they run on different clocks. HB 3773 has made discriminatory or undisclosed AI use in employment a civil rights violation since January 1, 2026, even though the Illinois Department of Human Rights withdrew its draft notice rules in June.

By Daniel de Almeida Afonso

Grok Privacy: What's Actually Going On in 2026

This guide separates what is documented from the noise, so you can decide how much to trust it.

By Daniel de Almeida Afonso

Connected Car Privacy in 2026: What the Data-Sharing Study and Enforcement Wave Mean for Business

Every manufacturer whose app shared personal data had disclosed that it "may" share data with third parties. None said which third parties or why.

By Daniel de Almeida Afonso

Oklahoma Privacy Law 2027: The Complete Compliance Guide to SB 546

It applies to businesses that handle the personal data of 100,000 or more Oklahoma residents in a calendar year, or 25,000 or more if they also earn over half their revenue from selling personal data. Only the Oklahoma Attorney General can enforce it, with penalties of up to $7,500 per violation after a 30-day chance to cure.

By Daniel de Almeida Afonso

Oct 12, 2026

11 min read

Read