CDP Institute

The Norwegian Data Protection Authority (NDPA) fined the gay dating app $7.16 million for violating EU privacy laws, saying it sent personal data to advertisers without user consent. This is the highest fine Norway has issued to date against the company.

The US and Australia are partnering to combat cybercrime under an extension of the U.S.’s Clarifying Lawful Overseas Use of Data (CLOUD) Act. The law, originally passed in 2018 enables law enforcement collaboration to combat crimes, including terrorism and ransomware attacks, via electronic data.

Adalytics discovered internet users in Europe who specifically express “privacy choices” using a platform that allows for control over tracking and personalization, may in fact be having their preferences ignored. This is due to mislabeling and failure by companies to use IP address geo-location checking for GDPR applicability.

US survey of 1,000 consumers finds 71% don’t know about data laws like CCPA, despite the huge increases in data breaches (incidences were up 141% between 2019-2020) and their desire for data protection. Thirty-nine  percent of those surveyed said they want more government regulation – but in terms of best practice, 71% admitted they never, or only occasionally, read data sharing disclosures that are provided to tell them how their data is being used.

Global ad company Perion found in a recent survey that 74% of consumers would like a visible privacy protection seal with a guarantee that the brand’s ad is not tracking them. Further, 87% of the 1,000 consumers surveyed reported that they notice when ads follow them around – and 41% said they found that creepy.

A survey of 200 risk and compliance executives conducted by Compliance Week indicated that companies that lack integration of their risk, compliance and audit data are impeded when It comes to detecting and responding to data threats. Fifty-six percent said their organizational data was stored across multiple internal and external platforms with only 16% saying their data resides in a single, centralized place.

The US Federal Trade Commission (FTC) has charged real-time bidding platform OpenX Technologies $2 million for violating the Children’s Online Privacy Protection Act (COPPA). Violations include sharing of geodata and collecting information on children under age 13.

The regulator said the company’s data scraping practices are in violation of EU regulations.

By offering affordable, self-service tools, Pixalate’s new Ad Trust and Safety API suite provides tools that had been out of reach cost-wise for many small companies and independent developers.

Despite its highly publicized privacy control claims, Apple may in fact be allowing user-level data access, according to The Financial Times. The publication alleges a handful of big tech developers claim they can obtain signals via a cohort-focused approach rather than from individual iPhones, so long as data is anonymized and aggregated.

A survey by Ebiquity and Cookiebot CPM tracked nearly 200,000 3rd party marketing cookies (3PMCs) conducted from an IP in the EU and found more than 32% were fired prior to site visitors granting consent. This poses a major concern in the context of international data transfer regulations, since more than 70% of all 3PMCs transfer to non-EU territories, so is in violation of GDPR.

A German court has ruled sharing IP addresses with US-based servers for cookie consent is unlawful under Schrems II. The Wielsbaden Administrative Court found that a German university using a cookie preference service that shared IP addresses of end users with a company headquartered in the US was in violation because users could be identified by using the IP addresses and a key that is stored in the user’s browser.