New Jersey’s Senate Commerce Committee on Monday passed legislation that would exempt insurance entities and national securities agencies from certain disclosure requirements in the state’s comprehensive privacy law.
Data Brokers and Delete Acts
Data brokers aggregate and sell personal data—often without clear user awareness. In response, many U.S. states are passing “delete acts” and other laws to increase transparency, require registration and give users control over data sales. These laws will reshape compliance and collection practices for brokers and companies relying on third-party data. This page tracks legislation, rulemaking and enforcement trends affecting the data brokerage industry.
Kochava must change its business practices as part of a settlement resolving claims the data broker sold location information of app users. A federal judge approved the final settlement Wednesday.
Though the FTC is supposed to ensure “transparency and accountability,” it has fallen short during President Donald Trump’s second term, ex-Commissioner Rebecca Kelly Slaughter said during a "people's oversight" hearing hosted Wednesday by Public Knowledge. Another former FTC official during Trump's first term, Bilal Sayyed, said the agency's decline began during the Biden administration and has continued.
Delete Request and Opt-Out Platform (DROP) rules will take effect Jan. 1, the same day that the accessible deletion platform goes live, the California Privacy Protection Agency announced at the CalPrivacy Board’s meeting Friday. Also at the meeting, CalPrivacy General Counsel Philip Laird walked the board through a presentation on how consumers and data brokers will interact with DROP.
California Privacy Protection Agency legislative staff is closely watching potential preemption efforts on Capitol Hill while developing possible bills to tighten the California Consumer Privacy Act in its home state’s legislature, said an agency official during the CalPrivacy Board’s meeting Friday. The proposed bills would add whistleblower protections, require alternative methods for submitting consumer privacy requests and expand California’s deletion right to cover all personal information collected about a consumer.
CHICAGO -- Work in the House on a national privacy bill has continued even during the government shutdown, Venable’s Michael Signorelli said during a panel Tuesday at the Association of National Advertisers (ANA) ad law conference. But with a year to go until the 2026 midterm elections, timing could be a problem, the privacy and advertising attorney said. “The calendar is no one’s friend right now.”
SAN DIEGO -- The right to delete seems simple, maybe deceptively so, though California's new Deletion Request and Opt-Out Platform (DROP) is attempting to reduce complications, panelists said during IAPP's privacy and security conference Friday.
SAN DIEGO -- States, especially those with consumer privacy laws coming online soon, are bolstering their privacy and consumer protection enforcement by beginning to onboard additional attorneys and technologists, experts said during a panel at IAPP's privacy and security conference Friday.
SAN DIEGO – “Privacy should be easy” for businesses to implement and consumers to effectuate, said Tom Kemp, executive director of the California Privacy Protection Agency (CPPA), during the closing keynote at IAPP's privacy and security conference Friday. At a panel Thursday, other CPPA employees spoke about regulations aimed at making privacy and privacy rights easier.
The right to cure in Oregon's comprehensive privacy law sunsets -- and a universal opt-out requirement dawns -- in two months, Oregon DOJ warned businesses in an October enforcement report released Wednesday.