The U.K. Information Commissioner's Office's (ICO) endorsement of a mechanism that processes requests for deleting personal data across the advertising supply chain "is an important moment for accountability and interoperability," Interactive Advertising Bureau (IAB) Tech Lab CEO Anthony Katsur said Tuesday in a press release.
Data Brokers and Delete Acts
Data brokers aggregate and sell personal data—often without clear user awareness. In response, many U.S. states are passing “delete acts” and other laws to increase transparency, require registration and give users control over data sales. These laws will reshape compliance and collection practices for brokers and companies relying on third-party data. This page tracks legislation, rulemaking and enforcement trends affecting the data brokerage industry.
Privacy Daily is providing readers with the top stories from last week, in case you missed them. All articles can be found by searching the title or clicking on the hyperlinked reference number.
The California Privacy Protection Agency Board might act later this month on pending proceedings related to automated decision-making technology (ADMT) and establishing a data deletion mechanism.
Despite a modest fine, a settlement this week between Connecticut and online marketplace TicketNetwork over potential violations of the state's Data Privacy Act (CTDPA) (see 2507080010) includes significant takeaways, privacy professionals said. However, a consumer advocate said the $85,000 penalty -- the first under the CTDPA -- also shows how comprehensive privacy laws based on Connecticut's model don't do enough to protect consumers.
Some state lawmakers are looking to pass legislation regulating the data broker industry in the wake of the shooting deaths last month of former Minnesota House Speaker Melissa Hortman (D) and her husband and the attempted killing of John Hoffman (D), a Minnesota senator, and his wife.
Responding to a suit against New York over a state law requiring that retailers disclose when they are using algorithmic pricing, privacy lawyer Heidi Saas argued that the First Amendment does not protect surveillance pricing.
Recent enforcement against Honda and Healthline in California and FTC action against data brokers show that companies must understand data flow and consent, an executive with the Interactive Advertising Bureau (IAB) said in an interview Monday.
A California privacy enforcer’s first use of a purpose-limitation requirement under the California Consumer Privacy Act (CCPA) makes this week’s record $1.55 million settlement with Healthline a significant enforcement action for companies in many sectors, privacy experts told Privacy Daily this week. Also significant was the highly technical, in-depth investigation that the office of Attorney General Rob Bonta (D) conducted, they said. Signs point to increased privacy enforcement ahead.
Privacy Daily is providing readers with the top stories from last week, in case you missed them. All articles can be found by searching the title or clicking on the hyperlinked reference number.
A consolidated case involving a New Jersey statute protecting certain public servants’ personal information can continue, Judge Harvey Bartle ruled on Friday, denying various motions to dismiss. The plaintiff, Atlas Privacy, has brought suits against data brokers -- the defendants -- under Daniel’s Law, which the brokers argue is unconstitutional in a case at the U.S. District Court for New Jersey.