1. Home
  2. /
  3. Topics
  4. /
  5. Privacy
Topic archive

Privacy

Privacy law, data governance, and the operational gaps between what retention policies say and what data estates actually do.

3 articles / 0 briefs / 3 total posts
Start here

Read this beat in order

Start with the compliance theater argument, then move to where privacy programs actually break down — in retention systems that don't match policy, and product cycles that don't wait for legal review.

Step 1

GDPR at Eight: Real Law, Fake Compliance Theater

/ 6 min read

The clearest statement of what real privacy law requires versus what compliance theater delivers — and why that gap hasn't closed.

Today marks eight years since GDPR enforcement began. Unlike most awareness campaigns we investigate, this anniversary commemorates something that actually works: the …
Start here
Core threads

What this beat keeps arguing about

Questions

Start with the pressure points

  • Where does the retention policy describe what should happen, and where does it describe what actually happens?
  • Which privacy review steps arrive early enough to change a product decision versus early enough only to document objections?
  • What would a right of erasure request expose about your actual data estate versus your assumed one?
Other beats

Explore another topic

Topic

GRC

Topic

Security

Topic

AI