PIPEDA: One Year After Mandatory Reporting

Canada's Bill C-36 proposes replacing PIPEDA with new privacy law targeting surveillance pricing

Canada's Bill C-36 (Protecting Privacy and Consumer Data Act) proposes replacing the outdated PIPEDA (1998) with modern privacy protections.

Bill C-36’s PIPEDA to PPCDA Shift: The rise of documented privacy compliance

1,000 Data Breaches on Have I Been Pwned: Disclosure Delays Are Getting Worse

The article marks the 1,000th data breach loaded into Have I Been Pwned (HIBP), reflecting on why the service is still necessary despite pri

CIRCIA, other big cyber rules expected to get finalized this fall

ANPD Extends Deadline for Companies to Report Digital ECA Law Compliance Measures to February 2026

The Brazilian National Data Protection Authority (ANPD) has extended the deadline for companies subject to the new Digital ECA law (Law No.

CISA resumes public engagement on delayed cyber incident reporting rules for critical infrastructure

CISA is restarting public engagement on long-delayed cyber incident reporting rules that will affect tens of thousands of critical infrastru