This website uses cookies
Read our Privacy policy and Terms of use for more information.
Award-Winning Author | Privacy & Technology Lawyer | Founder @ Privacy Design Lab & ARLA Strategies
Privacy KPIs
+1
Apr 16, 2026
•
3 min read
Practical metrics for operational readiness (not just pretty charts), and how to translate ops signal into board language.
Audit Readiness
Apr 13, 2026
8 min read
Why evidence wins (audits, insurers, customer reviews), and how to efficiently operationalize an artifact register.
Incident Response
Apr 9, 2026
10 min read
A practical, non-legal guide to closing the gap between 'we have an IRP' and 'we can execute it at 10:47 p.m.'
Apr 6, 2026
12 min read
A Fieldnotes guide to getting your first 48 hours right without confusing urgency with accuracy.
+2
Apr 2, 2026
15 min read
A Fieldnotes walkthrough of (1) what happened, (2) why it matters from a security standpoint for both Anthropic and enterprise customers, (3) how the IP story gets mushy when AI-generated authorship enters the chat, and (4) what the next year could look like for Anthropic now that the genie has slipped the bottle
Data Mapping
Mar 30, 2026
17 min read
A practical Fieldnotes guide to creating a “sensible” data map that’s useful under pressure, without turning it into a six‐month art project.
Privacy Change Management
Mar 26, 2026
13 min read
A practical way to turn “everyone’s involved” into “someone’s actually doing the thing.”
Mar 23, 2026
16 min read
Privacy operations that actually ship without a tool spiral.
Vendor Risk
Mar 19, 2026
A Fieldnotes guide to vendor privacy reviews that actually reduce risk without turning procurement into a bottleneck.
Mar 16, 2026
How to operationalize vendor intake and triage so review is predictable, fast, and defensible (without arguments).
Risk Acceptance
Mar 12, 2026
How to define decision rights, document defensible risk acceptance, and avoid ghostly risks that haunt your backlog graveyard.
+5
Mar 9, 2026
18 min read
Post-merger privacy integration basics, and how to pick first-90-days priorities so you do not inherit a data attic as a surprise.
Data Subject Rights
Mar 5, 2026
A Fieldnotes guide to running end‐to‐end data subject rights (DSR) operations without turning your team into a full‐time search party.
Privacy Training
Mar 2, 2026
14 min read
A practical, non‐legal guide to weaving tabletop exercises into your privacy training program—plus when to build the muscle in‐house vs. outsource it (so “annual training” isn’t your only line of defense).
Employee Privacy
Feb 26, 2026
When logging turns into workplace surveillance
Privacy Engineering
Feb 24, 2026
A practical mindset for product teams. Ship fast, collect less, and avoid accidental data chaos!
Online Privacy
A practical, non-legal guide to keeping your website privacy notice, your cookie banner, and your site behavior telling the same story.
Data Retention
It’s not going to end up on Antiques Roadshow with a surprise valuation, so let this be a gentle intervention to move your data retention program from “we should delete” to “we did delete.”
11 min read
You also entrust them with your reputation.
Tracking Technologies
When the User Clicks "No" but the Cookies Still Fire
And start treating them like routine training exercises
