CDP Institute

Google has released its Legislative Framework to Protect Children and Teens Online, which outlines its principles for laws that can keep children safer using the Internet. And, while it cautions lawmakers to take care not to hurt corporations, it alludes to the value of legislative models of age-appropriate design principles and priorities stressed by child rights advocacy groups.

The bot automatically identifies and removes PII in interaction data.

The company’s products focus on ensuring that people really are who they claim to be across the user journey, eliminating the gaps that attackers exploit.

Perhaps not the clearest transition, given the alliteration and nearly identical words, but Google is paving the way for a transition soon to Passkeys (aka biometric scans of your finger or face – or if you prefer to stick with P you can swap your password for a PIN. Aside from questions about privacy, rest assured this should be 40% faster than how you currently log in.

Take heed and act if your site uses third-party cookies because as you know, Chrome will disable them by Q3 2024. So before then, you should be completely settled into the Privacy Sandbox. How to do that? Google offers the Cookie Countdown series first steps.

California’s governor has signed the Delete Act (SB 362) into law expanding the California Consumer Privacy Act (CCPA) to require that all data brokers in the state honor delete requests made through a single mechanism that California’s Privacy Protection Agency (CPPA) will create. This is despite objections from business groups and the ad industry. It also requires data brokers to notify CCPA if they hold sensitive data.

What’s even more private than your name, email address, and hand and face prints? Your genetic code, which is why several little-known laws are getting more attention – the first is in Illinois, home of the famous Biometric Information Privacy Act (BIPA), but less well known is that Montana and California also have GIPAs – Genetic Information Privacy Acts. These protect information gathered via genetic testing from sites such as 23andMe, which has just had a purported hack of data on Ashkenazi Jews.

AI tool, PimEyes has facial recognition technology even Google didn’t want to use. The website offers reverse image searching using face photo scans and finds matches across the web. While the company claims it’s used for helping people monitor their web presence, it’s also collected many images of children and adds dead people to its database.  Where will we decide to draw the line??

Industry lawsuits in California, Arkansas and Texas have been used to block recent laws meant to protect children.

With the clock ticking down to the “later this year” moment when Google flips the switch on Chrome and we all go into cookieless freefall, there are still many questions. Google’s product manager just answered a batch of them at the AdExchanger Programatic IO NYC event.

Germany’s antitrust watchdog succeeded in getting Google to agree to changes to give users better choice on how their data is used when it is shared between companies. That means Google will have to get informed and unambiguous consent from users for processing their data.

Connecticut passed an amendment to its new Connecticut Data Privacy Act (CDPA), to add obligations and restrictions on how health data is shared that go beyond the US federal Health Insurance Portability and Accountability Act (HIPAA). This includes requiring opt-in consent for many use cases and is similar to new laws enacted in Washington State and Nevada. California's governor has also just signed legislation to protect its citizen reproductive health data.