Happy April, folks. ✨

The past month has been a whirlwind of updates in data privacy, from legislative shifts to exciting new tools and features designed to simplify compliance. As the landscape continues to evolve, staying informed and prepared is more important than ever. 

Let’s dive into the latest news, insights, and product innovation shaping the future of privacy.👇

Consent management remains a cornerstone of privacy compliance. But for industries like retail, healthcare, and finance—where information is sensitive, compliance is mission-critical and brand reputation is on the line—many Consent Management Platforms (CMPs) fall short:

• Entry-level tools lack the depth required for true compliance.
• Advanced CMPs demand heavy coding and dev resources.
• Legacy platforms require constant manual upkeep by large teams.

Whether you’re a legal pro looking to create a custom banner without code, a privacy manager needing to ensure full cookie lifecycle control, or a web developer wanting more flexible deployment options, our latest DataGrail Consent launch has something for you. 

Join us for a webinar on May 21st at 11am PT as we sit down with Jacob Van Dyke, GRC Manager at Sportsman’s Warehouse, to learn how his team uses DataGrail Consent to meet increasingly large and complex privacy demands with fewer resources and more confidence. 

We’ll explore:

• Current consent challenges and how they impact lean privacy teams.
• How Sportsman’s Warehouse uses DataGrail to collect, process, and enforce data consent preferences at scale.
• A live demo of DataGrail Consent, including brand new features that give busy privacy teams even more power to ensure proactive consent compliance.

The first 50 people to register will receive a box of actual cookies (*webinar attendance required).

Here’s all the data privacy news you need to know from April. 👇

🗺️ Policymakers look to state laws for federal data privacy law

• The House Committee on Energy and Commerce is once again working on a federal data privacy bill that will consider input from stakeholders and assess the multitude of existing state data privacy laws. Read more here.

🚧 Europe’s GDPR privacy law is headed for red tape bonfire within ‘weeks’

• The European Commission plans to present a proposal to cut back the General Data Protection Regulation, or GDPR for short, in the next couple of weeks.
• Slashing regulation is a key focus for Commission President Ursula von der Leyen, as part of an attempt to make businesses in Europe more competitive with rivals in the United States, China and elsewhere. Read more here.

🛒 Shopify Must Face Data Privacy Lawsuit in US, Court Rules

• In a 10-1 decision, the 9th U.S. Circuit Court of Appeals in San Francisco said the Canadian e-commerce company can be sued in California for collecting personal identifying data from people who make purchases on websites of retailers from that state. Read more here. 

🧬 Lawmakers push DNA privacy after 23andMe bankruptcy

• Pennsylvania lawmakers plan to introduce legislation aimed at protecting consumers' genetic data as 23andMe's bankruptcy sends shockwaves through the biotech world. Read more here.

The last month brought DataGrail Consent Embedded Deployment, Phone Verification, Guided Support Access, new risk insights notifications, and more!

🔍 What’s New?

• New DataGrail Consent features including a no-code banner editor, prebuilt global templates, and embedded deployment with no GTM needed.
• DataGrail Privacy Request Center customers now have the option to add automated phone number verification to the intake process. Phone verification works as an additional layer of security to email verification and can be used as a primary identifier. 
• For Live Data Map customers, the weekly “new systems added” email will now include any new personal data categories detected via Responsible Data Discovery—ensuring you never miss a new potential risk.
• Okta and OneLogin SSO users now have beta access to Inbound Assessments. This handy new feature enables anyone in your organization, including non-DataGrail users, to create a risk assessment via a self-service link.

Check out our monthly product release blog here.

The 2024 Gartner® Best Practices For Automating Subjects Rights Requests

• Gartner’s latest research reveals the growing importance of automating Subjects Rights Request (SRR) workflows to avoid the costly consequences of poorly managed processes.

Announcing the 2025 Data Privacy Hero Awards

• Last year, we launched the inaugural Data Privacy Hero Awards to spotlight the unsung heroes behind today’s most impactful privacy programs—those who go above and beyond to champion consumer trust, drive innovation, and shape the future of data privacy. This year, we’re thrilled to bring the awards back for the second year.

• Nominations will be opening up soon! Sign up here to be the first to be notified when submissions open up this June.

Are you passionate about privacy, legal, or security issues? Want to connect with like-minded professionals and stay ahead in a rapidly evolving landscape?

Become a member of our Privacy Community!

We’ve got everything from privacy law updates to career tips, monthly privacy huddles, and exclusive resources tailored for the privacy community. Don’t miss out on the chance to be part of a vibrant network committed to advancing data privacy.

See you next time! 👋

Colleen

This was sent to your email. If you do not wish to receive news and product updates in this format, please manage your preferences below.

© 2024 DataGrail, Inc. and/or its affiliates. All rights reserved.
Various trademarks held by their respective owners.