GDPR
What qualifies as "personal data" under the GDPR and "personal information" under the CCPA? This comparative guide explains why both laws adopt intentionally broad definitions and debunks common myths about public, hashed, pseudonymous, and household data.
Data Protection Law
From Convention 108 to the GDPR, this article traces the evolution of European data protection law, explaining its history, constitutional foundations, core principles, and global influence. It shows why data protection is a distinct legal discipline built on accountability and transparency.
Adequacy Decisions
Could California one day obtain its own EU adequacy decision? Written before the CCPA's enactment, this article explores whether California could develop a comprehensive privacy framework capable of supporting unrestricted transfers of personal data from Europe.
Data Retention
Learn how to build a practical data retention program under the GDPR, including retention schedules, legal justifications, anonymization strategies, and best practices for defensible data lifecycle management.
Data Protection
Modern data protection law did not begin with the GDPR. This article traces its origins from the first European laws regulating automated data processing through Convention 108 and the recognition of data protection as a fundamental right in the European Union.
CCPA
How did the initially enacted CCPA compare to the GDPR? Written in 2018, this early comparative analysis examines the similarities and differences between California's groundbreaking privacy law and Europe's global benchmark for data protection.