CDP Institute

No and no. The European Commission has sent Meta results of its preliminary findings, and they are the company’s “Pay or Consent” ad model fails the Digital Markets Act (DMA) on two big counts. These are that “Pay or Consent” 1) does not allow users to opt for a service that uses less of their personal data, and 2) that the mechanism does not allow users to exercise their right to freely consent to the combination of their personal data, so they violate DMA Article 5(2).

The IAB Tech Lab convened senior leaders from 65 companies to evaluate Google Chrome Privacy Sandbox’s performance in 44 constructed critical advertising use cases to determine feasibility within a Protected Audience auction. Its result, published as the Privacy Sandbox Use Case Analysis, found the Privacy Sandbox “falls well short of what is needed to support a robust open web” in providing ad utility for brands against media companies’ ability to maximize revenue.

Implode. Collapse. Scrap. Near-fatal blow. Hate when this happens for privacy…. In an 11th-hour about-face, the US House Energy and Commerce Committee triggered by GOP House leadership resistance, cancelled major markups for the American Privacy Rights Act and the Kids Online Safety Act – prompted use of these sad words and more. The bills had been moving ahead with bipartisan support. Now, it’s virtually ensured neither bill can be agreed on this year. Way to go, privacy adversaries!

If you’re a U.S. business, it’s virtually certain, according to the ISMS.Online State of Information Security report which found 100% of their survey respondents in the US reporting they’d been fined for data breaches or violation of data protection rules. The survey, which polled 1,500 security professionals from the US, as well as the UK and Australia found 38% of respondents said managing third-party and vendor risk was their biggest challenge. Managing compliance come in a close second at 33%.

When sea sponges are violating privacy, it’s bad! California’s Attorney General has agreed to a settlement with Tilting Point Media LLC following an investigation into their mobile game, “SpongeBob: Krusty Cook-Off” that found it violated the California Consumer Privacy Act (CCPA) and the Children’s Online Privacy Protection Act (COPPA). This because the company used an age screen that didn’t ask for age in a “neutral manner,” so encouraged children to enter an older age. The company will pay $500,000 in civil penalties and will be prohibited from selling and sharing... Read More >

Possible you can opt out depending on where you live, but not much protection for US users (who don’t have federal privacy protection – see above).

The attack impacted about 200 federal and regional government agencies.