A consumer advocacy group that sponsored the California Delete Act offered a mostly positive assessment of the California Privacy Protection Agency’s latest draft of rules for implementing a data deletion mechanism. Concerns linger that data brokers may try to shirk the requirements, said Emory Roane, Privacy Rights Clearinghouse associate director of policy, in an email to Privacy Daily. However, the CPPA’s new draft answers key questions about ensuring the Delete Request and Opt-Out Platform (DROP) will work effectively when it opens to consumers Jan. 1 and data brokers on Aug. 1, 2026.
The California Privacy Protection Agency won't make further significant changes to proposed rules in a controversial rulemaking on automated decision-making technology (ADMT) and other subjects, according to a draft released Tuesday. Meanwhile, in a proceeding on creating a data-deletion mechanism, the agency proposed several clarifications on data broker responsibilities. The CPPA posted those and other materials ahead of Thursday’s scheduled board meeting (see 2507110055).
Texas investigated data practices of more than 200 companies and issued “dozens of privacy violation notices” under the Texas Data Privacy and Security Act during the past year, said Attorney General Ken Paxton (R) in a Monday press release touting his office’s privacy accomplishments.
A proposed change to the California Consumer Privacy Act (CCPA) about publicly available information hit a temporary roadblock Wednesday in the Assembly Privacy Committee. Sen. Aisha Wahab (D) said she planned to work with California businesses over the summer to refine SB-435, which failed to clear the committee but is still alive. “We are deeply committed [to] working with industry.”
The U.K. Information Commissioner's Office's (ICO) endorsement of a mechanism that processes requests for deleting personal data across the advertising supply chain "is an important moment for accountability and interoperability," Interactive Advertising Bureau (IAB) Tech Lab CEO Anthony Katsur said Tuesday in a press release.
Privacy Daily is providing readers with the top stories from last week, in case you missed them. All articles can be found by searching the title or clicking on the hyperlinked reference number.
The California Privacy Protection Agency Board might act later this month on pending proceedings related to automated decision-making technology (ADMT) and establishing a data deletion mechanism.
Despite a modest fine, a settlement this week between Connecticut and online marketplace TicketNetwork over potential violations of the state's Data Privacy Act (CTDPA) (see 2507080010) includes significant takeaways, privacy professionals said. However, a consumer advocate said the $85,000 penalty -- the first under the CTDPA -- also shows how comprehensive privacy laws based on Connecticut's model don't do enough to protect consumers.
Some state lawmakers are looking to pass legislation regulating the data broker industry in the wake of the shooting deaths last month of former Minnesota House Speaker Melissa Hortman (D) and her husband and the attempted killing of John Hoffman (D), a Minnesota senator, and his wife.
Responding to a suit against New York over a state law requiring that retailers disclose when they are using algorithmic pricing, privacy lawyer Heidi Saas argued that the First Amendment does not protect surveillance pricing.