Recent Resource
Featured Resource
If you have spoken with RadarFirst, you have probably heard us mention the patented RadarFirst Legal Engine. You may have also heard us describe it as deterministic. Here is the simplest explanation: the RadarFirst Legal Engine is the decision engine that helps determine what a privacy incident legally requires. It evaluates the specific facts of … Continued
California’s CCPA risk assessment rules change how privacy teams need to manage PIAs. As of January 1, 2026, covered businesses must conduct and document risk assessments before engaging in certain processing activities that pose a significant risk to consumers’ privacy. Existing covered processing must also be assessed by December 31, 2027; material changes can require … Continued
Organizations do not need AI to make regulatory decisions. They need AI that removes the manual work standing between their teams and better decisions. For privacy, compliance, legal, and AI governance teams, the challenge is not a lack of judgment. It is the operational burden that comes before judgment can be applied: incomplete intake, missing … Continued
Managing hundreds of Data Subject Access Requests, or DSARs, requires more than a shared inbox, a spreadsheet, and a few response templates. At scale, DSAR management becomes an operational challenge: every request must be received, routed, tracked, reviewed, documented, and completed within required timelines. For privacy leaders, the question is no longer simply, “What is … Continued
At Ai4 2026, the energy surrounding artificial intelligence was unmistakable. Builders, business leaders, and technology teams gathered in Las Vegas to explore increasingly capable models, autonomous agents, and new enterprise applications. The pace of innovation was exhilarating. It was also unsettling. If one idea captured the week, it was this: AI innovation is moving at … Continued
A privacy incident does not always start with ransomware, a stolen device, or a malicious insider. Sometimes it starts with a marketing pixel, analytics tag, or audience-matching tool doing exactly what it was configured to do. That is the operational lesson privacy leaders should take from the FTC’s lawsuit against Hims & Hers. The FTC, … Continued
Large organizations scale Privacy Impact Assessments by turning them into repeatable operational workflows rather than one-off documents. As privacy teams review more applications, vendors, AI initiatives, and data uses, manual PIA processes become harder to manage. Spreadsheets, Word documents, shared drives, and email approvals may work for a small number of assessments, but they create … Continued
Artificial intelligence is quickly becoming part of healthcare operations, from clinical decision support and documentation to administrative workflows, patient engagement, and data analysis. But in healthcare, AI adoption cannot be separated from accountability. The Joint Commission–Coalition for Health AI guidance gives hospitals and health systems a practical foundation for responsible AI use. Its message is … Continued
Artificial intelligence, advanced analytics, and data mining have changed how organizations access and use personal information. Customer interactions, website visits, mobile app sessions, and connected devices can all generate data that supports personalization, product improvement, and business insight. They also create a broader privacy risk surface. Privacy class actions are no longer limited to traditional … Continued
AI guardrails are necessary, but they are not an AI response plan. As organizations deploy AI agents that can interpret instructions, use tools, access systems, and act at machine speed, static controls alone cannot account for every prompt, workflow, integration, or harmful outcome. A rule may block one risky action while missing a similar one … Continued
