Featured Resource
Managing hundreds of Data Subject Access Requests, or DSARs, requires more than a shared inbox, a spreadsheet, and a few response templates. At scale, DSAR management becomes an operational challenge: every request must be received, routed, tracked, reviewed, documented, and completed within required timelines. For privacy leaders, the question is no longer simply, “What is … Continued
What started as a simple HR question became a reminder that employee privacy deserves the same operational rigor as customer privacy. When most people think about data subject requests, they picture customers exercising privacy rights under laws such as the GDPR, CCPA/CPRA, or other regional privacy regulations. But one Tuesday morning, the request came from … Continued
At Ai4 2026, the energy surrounding artificial intelligence was unmistakable. Builders, business leaders, and technology teams gathered in Las Vegas to explore increasingly capable models, autonomous agents, and new enterprise applications. The pace of innovation was exhilarating. It was also unsettling. If one idea captured the week, it was this: AI innovation is moving at … Continued
A privacy incident does not always start with ransomware, a stolen device, or a malicious insider. Sometimes it starts with a marketing pixel, analytics tag, or audience-matching tool doing exactly what it was configured to do. That is the operational lesson privacy leaders should take from the FTC’s lawsuit against Hims & Hers. The FTC, … Continued
Large organizations scale Privacy Impact Assessments by turning them into repeatable operational workflows rather than one-off documents. As privacy teams review more applications, vendors, AI initiatives, and data uses, manual PIA processes become harder to manage. Spreadsheets, Word documents, shared drives, and email approvals may work for a small number of assessments, but they create … Continued
Artificial intelligence is quickly becoming part of healthcare operations, from clinical decision support and documentation to administrative workflows, patient engagement, and data analysis. But in healthcare, AI adoption cannot be separated from accountability. The Joint Commission–Coalition for Health AI guidance gives hospitals and health systems a practical foundation for responsible AI use. Its message is … Continued
Artificial intelligence, advanced analytics, and data mining have changed how organizations access and use personal information. Customer interactions, website visits, mobile app sessions, and connected devices can all generate data that supports personalization, product improvement, and business insight. They also create a broader privacy risk surface. Privacy class actions are no longer limited to traditional … Continued
AI guardrails are necessary, but they are not an AI response plan. As organizations deploy AI agents that can interpret instructions, use tools, access systems, and act at machine speed, static controls alone cannot account for every prompt, workflow, integration, or harmful outcome. A rule may block one risky action while missing a similar one … Continued
The bipartisan FRONTIER Act, introduced by Representatives Jay Obernolte and Lori Trahan, signals a practical shift in U.S. AI governance. Lawmakers are moving from broad principles for responsible AI to more concrete expectations for transparency, independent evaluation, risk management, and serious-incident reporting. For organizations adopting AI, the signal is clear: AI governance cannot be measured … Continued
The rapid adoption of artificial intelligence is creating a visibility gap inside the enterprise. Organizations may believe they know which AI systems process their data, only to discover that employees are using unapproved tools or that approved vendors have quietly introduced additional AI providers into their processing chains. As the IAPP reports, recent research found … Continued
