Skip to main content
Privacy

The Devensa Blog

Practical writing on security, AI, risk, compliance, privacy, and data.

A DPO oversight ring beside a separate product team box. Independent oversight is not operational authority.

Privacy

Who Owns Privacy? Why a DPO Title Doesn't Guarantee Accountability

Twenty US states now have comprehensive privacy laws in effect. See why an independent DPO still isn't the same as owning privacy operationally.

Data map across six business areas. Vendors and acquisitions are not reviewed. The map stops where the business kept going.

Privacy

Five Privacy Findings That Show Up Long After the Policy Was Signed

A privacy policy is a snapshot, not a subscription. See the five privacy findings that surface long after the policy was signed and board-approved.