Persona’s Q1 2025 fraud insights highlight the growing threat of deepfakes, with financial losses from fraud projected to reach $40 billion by 2027. Generative AI tools like ByteDance’s OmniHuman are enabling realistic deepfakes, making defense strategies…
Posts by Category: Data Protection & Privacy
Key Findings from Oregon’s Consumer Privacy Act Report
Six months into Oregon’s Consumer Privacy Act (OCPA), the Attorney General reports strong consumer engagement and business compliance, but highlights issues with unclear privacy notices, hidden opt-out options, and denials of data deletion requests. The DOJ received…
GDPR: What Impact Has It Really Made During Its First Year?
As we come up on the one-year mark of the GDPR, it makes sense to take stock of what seems to be working well—and what may be working less well. The breach notification plank of the regulation has clearly had a significant impact, while the fining authority has been…
FDIC Announces Electronic Fingerprinting Requirement for Background Checks Conducted in Conjunction with Applications and Notices
The Federal Deposit Insurance Corporation (FDIC) recently announced that it will require electronic fingerprinting in order to conduct more efficient and effective background checks when reviewing various applications and notices for FDIC-insured and proposed insured…
Are Work Email Addresses and Business Contact Information Considered Personal Data
In most cases, email addresses and business contact information are considered “personal data.” Personal data is defined by the General Data Protection Regulation (GDPR) as “any information relating to an identified or identifiable natural…
US Companies Doing Business in the EU or Impacting EU Individuals Must Comply with the EU GDPR by May 25, 2018
In a short two months, the European Union’s General Data Protection Regulation will take effect. The deadline for compliance is May 25, 2018. The GDPR significantly expands the jurisdiction of the EU’s data privacy framework to companies processing or…
GDPR: The Most Frequently Asked Questions: If I receive a Right to Be Forgotten Request From a Former Employee That was Terminated for Cause, Do I have to Honor it?
Bryan Cave addresses the common question “If I receive a Right to Be Forgotten Request from a former employee that was terminated for cause, do I have to honor it?” The General Data Protection Regulation (GDPR) indicates that people have a “right to…
GDPR: The Most Frequently Asked Questions: When Honoring a “Right to Be Forgotten” Request Do I Have to Delete Personal Data from Backup Systems?
There continues to be a great deal of confusion surrounding the requirements of the General Data Protection Regulation (GDPR). To help address the confusion, Bryan Cave has published a multi-part series that discusses the questions that most frequently are asked by…
Pulling Fraud Out of the Shadows: Global Economic Crime and Fraud Survey 2018
The PwC’s 2018 Global Economic Crime and Fraud Survey has found that only 49% of global organisations said they had been a victim of fraud and economic crime. In reality, though, too few companies are fully aware of the fraud risks they face. Companies who focus on…
An AI That Reads Privacy Policies So That You Don’t Have To
A group of academics has proposed a way to make reading and understanding privacy policies a bit easier. An artificial intelligence (AI) called Polisis (privacy policy analysis) has been released by researchers at Switzerland’s Federal Institute of Technology at…




