The Oregon Consumer Privacy Act has passed the House and Senate and goes to the governor to sign. Four years in the making, the bill imposes specific obligations over businesses and nonprofits, and would grant consumers protections including rights to correct, delete, and opt out. It also would protect sensitive data and youth data.
Privacy and human rights activists were surprised and alarmed by Ireland’s proposed amendment to Ireland’s Data Protection act that would effectively silence critics of Big Tech and of the Irish Data Protection Commission (DPC) itself. The amendment Section 26A would “prohibit the disclosure of confidential information” revealed during a complainant’s interaction with the DPC.
A lawsuit that may evolve into a class action accuses Google of encouraging Android app developers to miscategorize apps, labeling them for all or mixed ages, to allow for data collection without privacy controls for minors. The suit was brought by six minors and their adult guardians in California, Florida, and New York and makes its claims under various state privacy and consumer protection laws.
After years of thinking they were in the business of selling things to people, retailers have realized they’re actually in the business of selling people to advertisers. Retail media networks are the most obvious result, but why stop at ads sold directly by the retailer? Walmart has hooked up with Disney Advertising to test letting advertisers on Disney+, Hulu, and other Disney outlets use Walmart audience information to improve targeting and measure results.