Insights
Where Is My Privacy?
Our publication on data privacy, written for founders, operators, and privacy professionals who want to understand what's actually happening, not just what the regulators say.
Articles
Long-form analysis, twice a week
Deep dives on enforcement, regulation, and privacy practice across the EU, India, US, and beyond. Free to read, free to subscribe.
Browse the archiveDaily notes
One privacy story, every day
Short takes on the privacy, security, and AI stories that matter, posted daily on Substack Notes with the source alongside.
Read the daily notesLatest daily notes
All notes16 Oct 2026
Two group lawsuits filed in Chicago on 15 October say food delivery robots from Coco and Serve scan the faces, hands and bodies of customers and of people ju...
Read on Substack1 Oct 2026
The Pentagon is writing to about 2.8 million living service members, plus nearly 300,000 who have died, to say hackers took their personnel records. The atta...
Read on Substack29 Sept 2026
A developer found a 313MB encrypted file in ZCode's folder: their whole workspace, source code and every commit, packed up and uploaded. ZCode is the Chinese...
Read on SubstackLatest articles
16 Oct 2026
Can an AI lab say it was only a test?
Brussels has sent its first formal AI Act demands to OpenAI and Anthropic over agents that broke into real companies during testing. The labs' best defence is a research exemption. The Commission's own guidance makes that defence harder than it sounds.
Read on Substack
6 Oct 2026
8.8 million Danes, and the alarm was an invoice
Someone used one small company's legitimate login to pull most of Denmark's population register. No security alarm went off. A bill did.
Read on Substack
11 Sept 2026
Your prompt went to a different model, and somebody kept the transcript
Plus Anthropic's fourth incident and the monitor that believed the model, South Korea's 10% fine cap from today, a €300,000 lesson in ignoring delete requests, and 220 million passport records on an open server
Read on Substack
4 Sept 2026
A perfect score on breaking software, and a worse view inside
OpenAI shipped a model it says can find unknown security holes on its own, and said in the same announcement that its reasoning got harder to monitor. Both statements come from the same company.
Read on Substack
2 Sept 2026
$150,000 a song, and two founders named personally
Sony and Warner built their Anthropic complaint around where the files came from, which is the part of AI copyright law that has already cost money.
Read on Substack
21 Aug 2026
Why is your price your price?
The FTC moves on personalised pricing, the ICO hands five police forces 107 fixes, and somebody is selling the staff directories of nine large companies.
Read on Substack
19 Aug 2026
The flag that switched off the lock and the alarm
Anthropic says 133 million contractor conversations ran for eleven months without its biological safeguards, and the switch that disabled them disabled the logging too.
Read on Substack
6 Aug 2026
Chat Control is back, and the encryption carve-out is the whole story
314 MEPs voted to kill the EU's message-scanning derogation and that was not enough. Regulation (EU) 2026/1881 has been in force since 31 July. Here is what it actually permits.
Read on Substack
31 Jul 2026
A brake pedal with nothing attached to it
1,293 people at the frontier AI labs asked Washington to build a way to slow AI down. Europe already wrote one into law, and the fines switch on 2 August.
Read on SubstackSubscribe, it's free
Written by Abhishek Bansiwal, founder of the practice. CIPP/E certified, LL.M. Trinity College Dublin, statutory DPO at a multi-jurisdiction B2B SaaS platform, ex-Deloitte. Writing about what actually matters in data privacy.
Start here
Tell us what you're dealing with.
Pick the service that sounds closest, or just describe the situation. You'll get an honest reply within 24 hours: where you stand, what actually needs doing, and whether we're the right fit for it.
Prefer to talk? Book a free 30-min callEmail: abhishek.adv@yahoo.com
LinkedIn: linkedin.com/in/abhishekbansiwal
Working with clients across the EU, UK, US, India, and beyond. See the privacy notice for how enquiries are handled.