Gareth Spanglett – law, technology, and AI governance.
Independent legal research, advisory, and writing on AI regulation, privacy, and cybersecurity.
Research and writing at the intersection of law and technology
AI Regulation – Jurisdictions
Tracked AI legislation by jurisdiction – regulators, key instruments, status, effective dates, and compliance notes.
Explore research →Enterprise Agreements
Microsoft and Google enterprise agreement stacks – layer models, tracked instruments, how each is incorporated by reference, and what the monthly change-check diffs. Report-derived; not legal advice.
Explore research →Latest
Privacy drift, October to November 2026: five changes worth understanding
Microsoft's November DPA lets it report apparent child abuse material without notice to the customer, Google now requires Safety Retention on routed Google models, and three other changes show how the privacy baseline moves between reviews.
Read more →McGill Guide 10th Edition stylesheets added to Zotero's Style Repository
The English and French McGill Guide 10th Edition stylesheets are now available directly from Zotero.
Read more →Beyond the Initial Agreement: How Privacy Drift Affects Modern Third-Party Contracting
A new CIPPIC report examines how privacy conditions and data exposure can change after a public-sector organization approves a cloud or AI service.
Read more →A lawyer who builds with the technology he writes about
I am a licensed lawyer and a cybersecurity and data governance professional. My work sits at the intersection of law and technology.
More about Gareth