A UK citizen living in England sued American ad tech company PubMatic under GDPR. It was the first time such a suit was brought in a U.S. court and, though it was dismissed, it came as some plaintiff attorneys have wanted to explore the viability of bringing class action suits in the U.S., since that is less common in Europe.
A hacker group that has stolen in the past from Microsoft, Mashable and others, claims it is selling data from more than 70 million AT&T customers on the dark web. AT&T, which has seen samples, says they don’t think the data came from their systems.
China passed a strict new privacy law, effective November 1. It specifies collection of personal data must have clear purpose, be minimal in scope, and be obtained by consent. It also includes guidelines on international data transfer.
Procrastinators of the world can throw a party whenever they get around to it: Google has once more pushed back complete third-party cookie deprecation. The new target is “early next year.” Reasons for the delay include concerns expressed by U.K. data regulator Information Commissioner’s Office, an ongoing inquiry by the U.K. Competition and Markets Authority, and widespread discontent in the advertising ecosystem.