Welcome to December's GrailMail! We’re back with essential updates, in depth analysis, and actionable insights to help you stay ahead of the curve in the data privacy landscape.
As 2025 comes to a close, privacy teams are already looking ahead to what’s next. At DataGrail, we’re doing the same. Last month, we shared our 2026 Product Vision, outlining how privacy programs must evolve to manage risk in an AI-driven world. From the growing complexity of state laws to the explosion of AI-enabled data use, the next phase of privacy demands smarter, more adaptive tooling built for continuous risk management.
We are excited to announce our re-launch of GrailCast, DataGrail’s short, privacy-focused podcast featuring conversations with industry experts on key trends, challenges, and insights in data privacy.
Stay ahead of the curve with December’s top data privacy headlines. 👇
🏛 European Commission Fines X €120M for Transparency Violations
The European Commission imposed a €120 million fine on social platform X for breaching transparency and accountability obligations under the Digital Services Act. Read more about X’s recent fines.
🚨 Court Tosses Most Claims in Healthcare Pixel Privacy Suit
A federal judge ruled that pixel tracking on a healthcare provider’s public website does not, by itself, reveal protected health information (PHI). Read what this means for healthcare privacy teams.
The Office of the Privacy Commissioner of Canada is seeking input on updating and expanding guidance that will influence future national privacy standards. Learn how to submit feedback to the OPC.
📍 Maryland Privacy Law Compliance Isn’t Impossible, Says Lawyer
This playbook offers a practical framework for small teams to build scalable privacy practices without slowing innovation using AI, automation, and cross-departmental accountability.
This guide walks through how to frame privacy investments in terms of risk reduction, operational efficiency, and long-term ROI in a way that resonates with finance leaders.
To close out the year, we asked privacy leaders to share their perspectives on what 2026 holds for the profession.
Daniel Barber, CEO at DataGrail Daniel shares his outlook on how AI adoption, increasing regulatory scrutiny, and the shift toward continuous risk management will redefine how privacy programs operate in 2026. 👉 Read Daniel’s predictions
Andy Dale, General Counsel & Chief Privacy Officer, OpenAP Andy offers predictions on the future of privacy as a career, including opportunities for professional growth. 👉 Read Andy's predictions
Steve Lappenbusch, Director of Product Management – Nonprofits, Daxko & former Head of Privacy at a global data broker Steve explores the growing convergence of privacy and product, and what leaders should prepare for as more companies classify as data brokers. 👉 Read Steve's predictions
Mark your calendars and join us for these upcoming live sessions. Can’t make it? Recent on-demand recordings are also listed below.
DataGrail in Action: Live Product Demo, January 13, 10:00am PT
Get an inside look at DataGrail with a live walkthrough of key features and workflows.
Data Privacy New Year’s Resolutions (Privacy Huddle), January 14, 9:30am PT
Kick off 2026 with focus and community — join this interactive Privacy Huddle to share your top priorities, learn how peers are tackling their biggest challenges, and set practical goals for the year ahead in privacy and AI governance.
How to Prepare for 2026’s New State Privacy Laws (on-demand)
If you missed it live, you can now watch the webinar on demand to hear expert perspectives on what’s ahead and how teams can prepare with confidence.
Are you passionate about privacy, legal, or security issues? Want to connect with like-minded professionals and stay ahead in a rapidly evolving landscape?