CDP Institute

The European Data Protection Board (EDPB) will soon determine if Meta should be allowed to continue to allow Instagram and Facebook users to pay an annual privacy fee of €251/yr. (US $270) to not be tracked. If the EDPB decides the “Pay” or “Okay” (to track) option is legitimate, many other companies are expected to follow Meta’s lead. This is being challenged by Max Schremms’ noyb and 27 other NGOs.

A California appeals court ruled new state privacy regulations can proceed immediately rather than at the end of March, so companies should move quickly if they’re not already prepared to comply. Here are 7 steps to proceed.

Customer engagement is a fine dance and companies that lead by knowing their customers’ evolving preferences can make sure they don’t misstep. Marigold, the relationship marketing company, released their annual research poll results of 10,000 consumers from around the world, showing which interactions and offers are most and least welcome.

Tech industry group NetChoice has succeeded in getting a temporary block on an Ohio law meant to protect children. The law, which a federal judge has ruled unconstitutional, would require social media companies to get parental consent when children under age 16 wanted to create a new social media accounts. This is similar to blocks on laws in Arkansas and California.

Google’s shareholders have won a settlement of $350 million brought against the company for a breach of Google+ data that occurred between 2015-2018, and which had allowed outside developers access to the personal data of hundreds of thousands of Google+ users. Google+ shut down in 2019.

Mozilla Monitor’s new Plus subscription service now allows its more than 10 million users to run automatic scans of 190 data broker sites to check if personal information has been leaked. If so, the system provides tools to make the information private again. Subscribers can also take back their exposed data, so the brokers can’t sell it.

Oman is adding new privacy regulations. These include the requirement to obtain a permit before processing personal data, new procedures for handling data breaches, more stringent rules for managing children’s data, and increasing controls with regard to data controllers and processors.

Zero-party data, a.k.a. the data consumers give you by choice, can out-perform first-party data in garnering consumer trust, according to the Zero Party Data Revolution report from survey company, Attest. Consumers are increasingly weary of sharing data and distrustful of brands, with 85% reporting they sometimes opt-out of being added to mailing lists, and 58% doing so habitually. When it comes to sharing via first-party data collection with permission, the report says there’s variation by age category, and particular segment websites have significant opt-outs, including social media sites (47%), travel... Read More >

Datatilsynet, Denmark’s data protection agency, has ordered 53 municipalities throughout the country to change their data processing process to stop transferring student data to Google unless there’s a legal basis. Data of primary students which had been sent to Google previously had been used for commercial purposes in violation of Denmark’s and GDPR’s privacy laws.

Apple has not confirmed this, but officials in Beijing claim they can access information including email addresses and phone numbers. Security researchers have also claimed the encryption codes Apple uses for AirDrop aren’t sufficiently secure.

Streaming app developers and device sellers are being notified they may be in violation of the California Consumer Privacy Act (CCPA), if they don’t offer a proper, easy-to-use, opt-out mechanism. The state attorney general issued the warning, announced an investigative sweep, and would like to see a type of “Do Not Sell my PI” via click.