CDP Institute

With the clock ticking down to the “later this year” moment when Google flips the switch on Chrome and we all go into cookieless freefall, there are still many questions. Google’s product manager just answered a batch of them at the AdExchanger Programatic IO NYC event.

Germany’s antitrust watchdog succeeded in getting Google to agree to changes to give users better choice on how their data is used when it is shared between companies. That means Google will have to get informed and unambiguous consent from users for processing their data.

Connecticut passed an amendment to its new Connecticut Data Privacy Act (CDPA), to add obligations and restrictions on how health data is shared that go beyond the US federal Health Insurance Portability and Accountability Act (HIPAA). This includes requiring opt-in consent for many use cases and is similar to new laws enacted in Washington State and Nevada. California's governor has also just signed legislation to protect its citizen reproductive health data.

The Children’s Advertising Review Board (CARU) released new “guardrails” to help advertisers and agencies that target children make careful choices when using new technologies such as AI chatbots, and as they engage in the metaverse. The intent is to add onto the protections outlined in the dated US federal law, the Children’s Online Privacy Protection Act (COPPA).

The Information Commissioner’s Office (ICO) has warned it may close down Snapchats My AI feature because the tool lets users message a computer which mimics human conversation. This has prompted concern for the 21 million young Snapchat users in the UK.

This simple, free, powerful app that gives individuals an efficient way to notify companies to delete their personal information.

The US Federal Communications Commission (FCC) wants to broaden its oversight of Internet Service Providers (ISPs) to give itself the power to prohibit ISPs from blocking or throttling internet traffic and to stop their collecting data for advertising.

Serve Robotics, a company delivering food to Uber Eats customers has been found to be providing far more than just take out meals. In fact, the robots roaming the streets of Los Angeles, which are always filming where they are and where they are going, have just been found to have helped the city’s police department by providing film that was used in a criminal case.

Australia’s Attorney General agrees with 38 recommendations that would grant individuals rights to sue for serious privacy breaches and increase protection of children’s data. These are the first of more than a hundred and more are under advisement for legislative changes in 2024.

Education has recently been ranked 5th as an industry targeted for cyberattacks, according to Nord, a security firm. And, cyber breaches there extend far beyond school walls. Students are directly affected by breaches, which not only can disrupt classes while school systems are fixed, but their data and that of their parents is both very valuable to criminals and easily at risk. This can include family financial data and children’s ID, behavioral and academic data.

The case is being brought under charges of the Racketeer Influenced and Corrupt Organizations Act (RICO), which is more often used against organized crime.

Poland’s Office for Personal Data Protection (UODO) is accusing ChatGPT creator, OpenAI of numerous violations of GDPR, including processing data in an unlawful, unreliable manner and not being transparent. This is in response to accusations brought by a privacy and security researcher.  While the regulator anticipates it will be a difficult investigation, the regulator is moving it along very rapidly.