Oregon’s data broker law has gone into effect, making it the fourth state after Vermont, California and Texas, to have special requirements for the data broker industry. This and the recently passed Texas law require data brokers to register with the state – and businesses that process data they’ve not collected directly from individual subjects should check the laws to see if they’re covered.
Good if you said yes above, since Consumer Reports found as many as 7,000 companies, including LiveRamp, Acxiom, Epsilon, Home Depot and Amazon, are monitoring activities of individual Facebook users. This to help Meta understand what you do when you’re not on the their platform – and to enable them to target you with ads. Out of more than 700 participants who volunteered to have their data looked at, on average each had their data sent to Facebook by more than 2,200 companies.
ISACA, a global association focused on security, governance, risk and privacy education surveyed more than 1,300 data privacy professionals on how their company was handling staffing and support for privacy. Key findings were that demand for technical roles is likely to increase, board prioritization of privacy is expected to hold steady, though more than half surveyed expected privacy budgets to decrease this year. Also consistent with last year is expert-level privacy professionals are the most difficult to hire.
CDP mParticle is being acquired by ecommerce platform Rokt for a price of $300 million. It’s the third acquisition of a leading independent CDP in a little over one month, following Uniphore’s purchase of ActionIQ and Contentstack’s purchase of Lytics. All three buyers offer some type of customer-facing technology; apparently they’ve decided that adding real-time profiles from CDP will give them a competitive edge. (See this blog post for more analysis.)