CDP Institute

Kids are prime targets for advertisers, and it can be easy to get their data thanks to privacy policies that often ask for broad permissions and are often complicated or confusing for children and adults. Greenlight, which says it doesn’t currently sell data of kids to advertisers, still collects a lot – including locations and behavioral profiles – and reserves the right to share and deliver “tailored content” in the future.

Dual announcements about data cloud company, Snowflake this week. The first is from Securiti, which  announced a partnership that will enable it to bring its functionality to operate natively inside Snowflake, and the second announcement is from Snowflake which will allow the company’s customers to activate audiences on any platform that has adopted Unified ID 2.0. Read More – Securiti Read More – Snowflake – Unified ID

The Tripwire survey asked 300+ security professionals at companies with 100+ employees about their public cloud infrastructure and security practices, and also about how consumers perceive that security. It found 73% of organizations operated in a multicloud environment; 98% reported that relying on multiple providers created additional security challenges; and 98% want more security improvements from cloud providers and assurance of compliance with security frameworks.

Jebbit’s 5th Consumer Data Trust Index surveying 100 top traditional and D2C companies found consumers want personalization, data transparency and personal offers in return for sharing their data. Use of first-party data was a trend found to build trust as was using interactive tools, like quizzes for engagement.

Connecticut enacts new legislation expanding protection of patient and medical data and incentivizing businesses to adopt cybersecurity safeguards that conform to industry standards.

The central bank in South Asia has directed Mastercard to notify all card-issuing banks and non-banks that it can no longer issue credit, debit or prepaid cards to new customers. Mastercard is the third, following American Express and Diners Club, found noncompliant with India’s data storage rules.

The Washington Post and 16 media partners report Israeli NSO Group’s Pegasus military-grade spyware was used to hack smartphones of select journalists, rights activists and business executives. The story, which NSO Group disputes, says these were included on a list of 50,000+ numbers concentrated in countries that surveil private citizens.

A new 36-state plus DC suit filed against Google in California continues the antitrust fight against Big Tech, despite a DC court’s recent Facebook suit dismissal. This challenges Google’s plan to force app developers who use Google Play Store to pay a high commission on sales. It also follows two other multi-state suits filed last October and December against Google.

Nine Android apps and their developers were kicked off Google Play after tricking Android users into using their Facebook credentials to log into a Facebook form that had been populated with malware.

South Africa’s Personal Protection of Information Act (POPIA) came into effect July 1st. The law provides South African citizens with the right to access, correct and delete their personal data held by businesses. Organizations are required to obtain appropriate consent and comply with the law or they may face fines up to R10M (U.S. $764,000). Read More – South Africa Legislation

The Colorado Privacy Act (CPA) was signed into law, making it the third state to pass a privacy law following California and Virginia. Consumers there can now ask companies not to sell their data. They also have rights to have data deleted, and companies will be required to request consent when they want to collect sensitive data, such as Social Security numbers and drivers’ license numbers. Read More – Colorado Legislation

Stating Big Tech platforms gather too much personal information, President Biden wants the Federal Trade Commission (FTC) to set new rules on surveillance and accumulation of data.