CDP Institute

Apple, which has been held up as a company leading the way in privacy transparency, is being questioned again about whether its efforts also rig the system in its own favor by limiting information access to outside developers. In this case, Germany’s competition regulator, Bundeskartellamt, is looking into whether a recently added privacy setting that requires developers to get user consent to access “Identifier for Advertisers” on an app-by-app basis gives Apple unfair advantage, since it can access information directly as first-party data.

Privacy Affairs’ annual Dark Web Price Index shows more vendors selling data, more types of items available, and cost for private data going down. Email dump volume is also up and cost is down.

The California Age-Appropriate Design Code bill, modeled on the UK’s AADC, and the state’s Social Media Duty Not to Addict Act passed the State House unanimously and are headed to the State Senate. On the federal level, The Kids Online Safety Act (KOSA), which would require companies to create tools for parents to monitor or curtail screen time, and two more bills, the Children and Teens’ Online Privacy Protection Act and the Protecting the Information of our Vulnerable Children and Youth Act look to broaden protections covered by COPPA.  While... Read More >

If the claimants prevail, Google could be found in violation of California law and federal law.

The browser feature only allows trackers to see behavior on individual sites, rather than across sites.  It was previously available but users had to turn it on.

MediaMath’s customers will get pre-bid access to inventory segments on sites that meet their privacy standards, based on Sourcepoint’s Privacy Lens website ratings.

A bipartisan anti-trust bill that looks like it may have sufficient Senate votes to move on to Congress could prevent Amazon, Apple, Facebook, Google and other major technology companies from favoring their own platforms to keep smaller companies from being able to compete. Big Tech companies have countered that it will be harder for them to ensure privacy and security…but, given their records, maybe it can be cause to improve.

Leading privacy vendor OneTrust, in a surprise announcement, said it will be laying off 950 workers, which is 25% of its workforce. This comes despite a statement last month that the company had record growth quarters and was seeing increased customer demand. However, the company’s announcement indicates they decided it best to scale back in response to a potentially tightening market.

Maryland adds strict guidelines to business requirements following security breaches. An amendment to the state’s Personal Information Protection Act going into effect this fall specifies that businesses must inform data owners or licensees of within 10 days of a breach, and companies must also notify major media within the geographic region where individuals are likely to reside.

New GIACT report looks at identity theft in 2021, including who is most effected, what areas are most vulnerable – and speed to rectify, according to consumers. In many cases, it took institutions months, not days or weeks to resolve the problem, resulting in large opportunity cost to fraud victims.

While Google and Apple may be more transparent sharing how apps handle data, they don’t tell the public whether those apps target children under age 13 – or whether the app is COPPA compliant. But, now Pixalate by way of an AI-enabled compliance toolkit is automating the process of assessing whether all apps in the Apple App and Google Play stores are compliant. This, coupled with the company’s newly-formed Trust and Safety Advisory Board of qualified educators, provides a public source to help privacy advocates, regulators, parents and ad-tech companies... Read More >

The companies are pulling servers out of the country in response to India’s new data retention law, which will begin requiring cloud storage services, VPNs and data centers to turn over data when the government deems it useful in fighting cybercrime.