PRIVACY + SECURITY BLOG

News, Developments, and Insights

Three TV Commercials Show What’s Wrong with Big Tech, Privacy, and AI

Originally posted on Substack This year’s Superbowl was a showcase for how out of touch tech companies are when it comes to privacy and AI. Several ads demonstrated that tech companies are obtuse about the dystopia they’re creating. Hopefully, public reaction will get through to policymakers that the tone deafness of tech companies reveals a […]

Why Consent Is Broken for Privacy and AI

Originally posted on Substack The following is an excerpt from my book ON PRIVACY AND TECHNOLOGY where I summarize my thinking on privacy consent: New technologies pose significant challenges to people’s ability to consent to the collection, use, and disclosure of their personal data. Under most privacy laws, consent makes permissible a wide array of data collection […]

Bizarre Dystopian Superbowl AI Commercial

Here’s a bizarre dystopian Superbowl commercial where AIexa+ tries to kill Chris Hemsworth many different ways, then offers him a massage. And this is to try to convince folks that AI is good? I thought it was a promo for a Black Mirror episode. <iframe width=”560″ height=”315″ src=”https://www.youtube.com/embed/ha92_hfK9Po?si=ka8ErdwxqU_evaIs” title=”YouTube video player” frameborder=”0″ allow=”accelerometer; autoplay; clipboard-write; […]

Privacy in Authoritarian Times: Surveillance Capitalism and Government Surveillance – Final Published Version

I’m very excited to share with you the final published version of my article, Privacy in Authoritarian Times: Surveillance Capitalism and Government Surveillance, 67 Boston College Law Review 51 (2026).  You can download the article for free on SSRN.

Challenging Times Ahead for the Privacy Office

Originally posted on Substack It’s Data Privacy Day, though it’s now been expanded to data privacy week. Things are quite turbulent for privacy these days, so we need to celebrate less and focus on how to respond to the challenges ahead. Based on my anecdotal assessment, the CPO and DPO roles seem to have expanded […]

Privacy and AI Law in 2025

Originally posted on Substack We’ve now closed the books on 2025, so it’s time to review what happened in privacy law over the past year. At first glance, it seems like a quiet year (no new state consumer privacy laws) but quite a lot happened. Many smaller things, but they really add up. Here’s a […]