Katarzyna Celińska

There is a lot happening in California privacy right now. CalPrivacy is moving from rulemaking and early enforcement toward a much more mature supervisory model built around audits, technical testing, sectoral reviews and increasingly operational compliance expectations. New obligations are coming into force. Organizations will have more requirements to implement, more evidence to maintain, and more areas where they can be challenged by the regulator. Photo: magnific The Audit Division...

The latest New Zealand NCSC Cyber Security Insights – Q2 2026 report is another good example of why I like reading threat reports from different countries. Link The geography may be different, but many of the patterns are very familiar. Between April and June 2026, the NCSC responded to 1,129 cyber incident reports, compared with 1,164 in Q1. So overall volume remained relatively stable. Photo: pvproductions na Magnific 92 incidents required specialist technical support because of...

One of the most valuable aspects of the newly updated CNIL Practical Guide for DPO is that it addresses an issue I repeatedly encounter during GDPR audits, an issue that is still surprisingly misunderstood by many organizations. The concept of DPO independence. On paper, most organizations know that the GDPR requires the DPO to operate independently. In practice, however, the distinction between having a DPO and allowing the DPO to perform the role independently is often blurred. The CNIL...