Updates from the Duality team

GDPR vs CCPA is not a comparison of two laws that cover different geographies and otherwise work the same way. They are built on fundamentally different legal architectures: GDPR requires a lawful basis before any personal data can be processed, while CCPA permits processing by default and gives consumers the right to opt out of…

Sensitive data discovery is the systematic process of scanning, identifying, and classifying data that requires special handling under regulatory law ” and it is the first step, not the last, in a protection workflow. The 2023 HHS Office for Civil Rights breach portal recorded 725 healthcare data breaches affecting more than 133 million individuals. In…

If you’re comparing pseudonymization vs anonymization, the most important thing to know is that choosing the wrong approach can have serious compliance and security consequences. Under GDPR, pseudonymized data is still considered personal data, while properly anonymized data is not. That distinction affects everything from AI development and data sharing to regulatory compliance and breach…

HIPAA compliant AI is not a product you buy ” it is an architectural commitment that determines whether patient data can ever be extracted, reconstructed, or exposed at any stage of the AI pipeline. A 2024 Protenus survey found that over 60 percent of healthcare employees had used a consumer AI tool for work-related tasks….

Data governance for AI is the set of policies, processes, and technical controls that determine how data is collected, prepared, used for model training, and monitored throughout the AI lifecycle ” and it is the discipline that most organizations discover they are missing only after their first audit or breach. Gartner research predicts that through…

Every compliance team has had this conversation: legal wants to know exactly where the data is going, the data science team wants to train the model on the richest dataset available, and the DPO is somewhere in between trying to figure out whether any of it is actually permissible under GDPR. Cross-border AI data collaboration…

Collaboration combines Red Hat’s open hybrid cloud and confidential computing capabilities with Duality’s privacy-enhancing technologies to enable secure analytics and AI without exposing sensitive data. HOBOKEN, NJ – June 17, 2026 – Duality Technologies today announced a partnership with Red Hat to help governments and regulated enterprises operationalize sovereign AI and secure analytics across sensitive…

There is a fundamental tension between using AI and the cloud while adhering to strict privacy mandates like digital sovereignty and sovereign AI. Encryption of data at rest and in transit is increasingly common, but traditional computing leaves data exposed in system memory during processing—known as data in use—which puts it at risk.  To address…

Most security teams feel fairly confident about how they protect sensitive data. They encrypt databases. They mask data in test environments. They have policies in place. Job done. But here is the problem. Neither data masking nor encryption protects data while it is actually being used: while a query is running, an AI model is…