CDP Institute

Unions including the American Federation of Teachers and the National Federation of Federal Employees, and a military veterans’ group attempted to stop the Trump administration’s Department of Government Efficiency (DOGE) access to Social Security numbers and other sensitive data but lost on appeal.

China has drawn a red line with its new Data Sovereignty Law reducing foreign access to its data – especially with regards to the US. Declaring data an essential national resource that should be closely held and monitored, China is rejecting cross-border data sharing and open-access frameworks.

Regardless of how old you are, YouTube will vet you based on what AI concludes from your viewing behavior. And, if it decides your behavior has been, well, juvenile, you may have to provide ID evidence that you are an adult. Other criteria such as longevity of your account will also be taken into consideration, but this is part of broader trends of automating age verification, banning young people from social media, and prompting privacy concerns over using data models to analyze user viewing behaviors.

This disallowed NetChoice’s request to block the law.

A federal judge invalidated California’s Defending Democracy from Deepfake Deception Act, passed in 2024 to disallow deep fakes in political ads. Responding to a suit brought by Elon Musk’s X, the judge deferred to the Communications Decency Act’s Section 230, which since 1996 has provided tech platforms immunity from liability for user content, even if speech is deceptive or hateful. The Deepfake Deception Act was intended to block deceptive content, including falsely showing candidates saying things they hadn’t. Freedom!

The California jury in the Flo Health data class action ruled Meta violated the California Invasion of Privacy Act by collecting user private health data without consent and using it for ad tracking. Meta, which took the case to court in contrast with Google and others that opted to settle, plans to appeal the decision. This is considered a big loss for Meta and a decision that should serve as a warning to other companies on duty of care for sensitive health data.

New Zealand’s Biometric Processing Privacy Code will go into effect in November, though companies will have until next August to adapt to the rules. The law has four key obligations: effectiveness and proportionality, safeguards, transparency and safe limits.

While it’s important to choose friends wisely, ChatGPT, which is popular with teens, is looking untrustworthy and even dangerous to have as a friend. Associated Press, which published findings of a study done by the Center for Countering Digital Hate (CCDH), reported ChatGPT prepared to tell adolescents very scary things, including how to get drunk or high, how to conceal eating disorders, and even worse – how to compose a suicide letter to parents. The advocacy group found little keeping ChatGPT from engaging with young people about harmful subjects and... Read More >

Advertisers that haven’t switched to using Google Consent Mode v2 on their website have been receiving a warning from Google saying they are not in compliance with the EU’s user consent policy. This impacts ad targeting and conversions, so it’s important to tune in and transition appropriately.

Sounding positively euphoric, the US government announced a partnership with Google, OpenAI, Amazon, Anthropic, and Apple to share citizen health data en masse to create a comprehensive digital health ecosystem. Certain we’ll love its efficiency, ease of use and transparency; they have no apparent concern about our health data privacy – but that’s often the case.