Ad Tech Privacy Watch

• Irish DPA fines Google €403 million for processing location data via Web & App Activity, Location History, and Location Accuracy without valid basis...

South Carolina AG Alan Wilson is demanding answers from Flock Safety on AI use, data access limits, and retention policies under state deceptive...

An analysis of Australia's draft Privacy Act reforms found 31 of 32 common marketing activities would become more costly, less effective, or...

California's SB 690 removes the private right of action for CIPA pen-register claims under §638.51 for website tracking, leaving enforcement to the...

OpenAI's dismissal of three employees who had flagged issues with consumer data use in AI research—while accusing them of sharing infrastructure...

PIPEDA stands out for requiring knowledge and consent upfront for most commercial processing, with express consent expected for sensitive data, unlike...

MLCommons' draft Agent Privacy Risk Taxonomy offers organizations a ready-made checklist for assessing agentic AI systems that access email,...

The second edition of Advertising Law In Europe And North America delivers updated case law and regulatory changes on digital advertising and data...

Apple and Google are lobbying states to embed exclusive AG enforcement and bar private rights of action in age-verification and kids' safety laws,...

The June 15, 2026 Data Manager API migration ends legacy UploadClickConversions for new adopters, requiring B2B advertisers to adopt hashed...

Enterprise DLP best practices prioritize highest-value data flows first, then apply proportionate responses—monitor, warn, justify or block—based on...

ApiWay’s DPA automatically binds on feature use without signature, assigning Customer as controller (or processor) and ApiWay as processor (or...

• IAB Diligence Platform now serves as the shared standard for privacy vendor assessments, replacing ad-hoc spreadsheets with auditable, scalable...

Apple's iOS 27 Safari now blocks domains used for addressable ID matching, including ID5's id5-sync.com and eu-1-id5-sync.com, preventing publishers...

Accessory Power’s updated policy stands out for its strict segregation of marketplace buyer data from its Shopify store and analytics.

• Disclosure...

Compliance teams can validate cookie consent by testing which cookies and requests fire before consent, after acceptance, and after rejection while...

• Northeastern/Consumer Reports study of 21 U.S. vehicles (2022-2025) found cars and companion apps transmitting location, VIN, and behavioral data to...

California's new law, effective January 1, 2027, eliminates the private right of action for online pen register and trap-and-trace claims.

Third-party cookies survived but fragmented across browsers, forcing ad-tech firms to rethink deterministic and probabilistic matching for compliance...

At the October 2026 IAPP conference, privacy and AI counsel should prioritize two sessions on the convergence of product counseling and governance.
-...