On October 14, 2025, the European Data Protection Board (EDPB) confirmed its 2026 enforcement priority. Global businesses must act now to ensure their privacy notices and informati... more
On January 1, 2026, new comprehensive data privacy laws in Kentucky, Indiana, and Rhode Island will take effect, adding a new layer of complexity to the fragmented US "patchwork" o... more
The UK's upcoming Cyber Security and Resilience Bill (CSRB) transforms cyber security from an IT best practice into a board-level legal obligation, significantly updating the 2018 ... more
2025 has been a pivotal year for data privacy enforcement in the U.S. The period of preparation and grace periods has ended, and regulators are now actively enforcing these new la... more
MODPA imposes unique and absolute restrictions on how Sensitive Data can be handled. Sensitive Data is broadly defined to include: Racial/ethnic origin, religious beliefs, sex lif... more