CDP Institute

A Dutch court has ruled against Facebook in a suit brought by the advocacy group, Data Privacy Foundation (DPF) and the not-for-profit consumer group, Consumentenbond. They allege the company’s Irish subsidiary processed local user data without consent. Additionally, data was found to have been sold to third parties without consumers’ knowledge.

A Brooklyn resident charged in a class action that Amazon’s New York City Amazon Go stores collected biometric data of customers without sufficient notification, which puts the company in violation of New York’s 2021 Biometric Identifier Information (BII) Law. The law, which came into effect in January 2022, requires companies to notify store customers of scanning or other electronic data collection via prominent in-store signage. Amazon Go stores, which established a track-in-store-pay-later shopping model, had, according to the suit, failed to sufficiently comply.

By unanimous votes in the State House and Senate, Iowa is poised to pass the 6th US state privacy bill, though Consumer Reports and other consumer advocates are urging Iowa’s governor not to sign the Consumer Privacy Act (aka Senate File 262) into law. Concerns are that while the bill seemingly includes key consumer safeguards such as the right to know information companies have collected and the right to have information deleted, the verbiage in the law serves to weaken the protections provided to consumers and strongly favors business.