The Docket: The SEC's CAT Review Is Really About Privacy, Security, and Market Surveillance
The SEC's CAT review turns market infrastructure into a governance fight over privacy, surveillance scale, retention, and security.
regulatory-timeline
Explain This: The EDPB's DPIA Template Is an Attempt to Standardize Proof
The EDPB's DPIA template matters because it tries to turn fragmented privacy risk assessments into a more uniform evidence standard.
The Docket: Europe Just Turned Privacy Notices Into an Enforcement Target
The EDPB's 2026 transparency sweep turns privacy notices from stale boilerplate into audit evidence that regulators can test across Europe.
Policy Roast: The FTC's AI Enforcement Unfairness Doctrine Is Dangerously Vague
When 'unfair AI practices' means whatever the FTC decides it means this week, compliance becomes a moving target.
The Docket: OpenAI's $122bn Raise Brings Regulatory Scrutiny to AI Governance
OpenAI's record-breaking funding round makes it too big to ignore—and regulators are already asking whether existing frameworks can handle AI at this scale.
Policy Roast: SEC's 'Material Impact' Standard Is a License to Hide Breaches
The SEC's cybersecurity disclosure rules let companies decide what's material—leaving investors in the dark until it's too late.
Policy Roast: The FCC's IoT Security Update Mandate and the Liability Gap
Mandating security updates without defining who pays when they fail creates more risk than it solves.