June marks the start of summer and as the temperatures climb… so do the demands for consumer privacy. From CCPA enforcement to legislative hurdles in Vermont, we’ve gathered a snapshot of what’s been making headlines this month so that you can stay ahead of the curve.
June marks the start of summer and as the temperatures climb… so do the demands for consumer privacy.
From CCPA enforcement to legislative hurdles in Vermont, we’ve gathered a snapshot of what’s been making headlines this month so that you can stay ahead of the curve.
Let’s get into it. ☀️
🛡️ CCPA enforcement is armoring up on children’s data
Game-maker Tilting Point Media is currently under fire for COPPA and CCPA violations linked to their SpongeBob game.
California AG and LA City Attorney allege that the game-makers allegedly didn't obtain (a) parental consent for under 13 users or (b) users' affirmative opt in consent for sharing data of users 13-17.
The bar is getting set higher: California requires mandatory opt-in consent for under 18 users, especially concerning ad trackers. CCPA enforcement is gearing up, and fast.
🚧 Vermont’s data privacy bill is stuck at a crossroads
In last month’s newsletter, we discussed Vermont’s new groundbreaking data privacy law– but it just hit a major roadblock.
Governor Scott recently vetoed the bill that would allow consumers to sue data brokers for the misuse of their personal information, citing concerns over too many lawsuits hitting local businesses in the state.
People now face a heated debate as legislators must weigh the interests of small businesses against the demand for stronger consumer protections in an increasingly data-driven economy.
🎟️ Ticketmaster data breach: What you need to know
Ticketmaster confirmed a recent data breach involving sensitive information stored in a third-party cloud, Snowflake.
The damage doesn’t stop there. Stolen data, including financial details and personal information, surfaced for sale on the dark web post-breach.
The hackers managed to breach accounts through a backdoor: a Belarusian contractor, EPAM Systems. Hackers claim they used data from the firm to access 30 million bank accounts and 28 million credit card numbers.
🚨 75% of Australians prefer data privacy over a personalized experience
Yes, you heard that right. The advertising industry is currently caught in a privacy paradox: With looming legislation tightening, marketing teams are scrambling to decipher the rules of engagement.
This shift is underscored by recent actions against tech giants like Alphabet, as Austrian advocacy group NOYB complains that Google allegedly tracked users of its Chrome Web browser, an issue already on EU antitrust regulators' radar.
As regulations increase, the stakes get higher. Businesses must make the switch from powering their campaigns with third-party data to cultivating honest and consent-driven customer relationships.
Have you noticed our new look? This month, we officially announced the launch of our refreshed brand, inspired by our commitment to safeguarding the human right to privacy. Take a moment to explore our revamped website here. 👀
But that’s not all: DataGrail Consent is here! This week, we officially introduced a new standard for consumer choice. One that lets you start a privacy dialogue with your customers and automate consent compliance for your busy privacy team.
Datagrail Consent is a first-of-its-kind, no-code consent management platform that delivers a dynamic, deeply customizable experience while automatically maintaining compliance with the latest data privacy regulations.
Here’s a word from Daniel Barber, CEO and co-founder of DataGrail:
And be sure to catch up on this conversation with Richard Arney, CPRA co-author, and Tarun Gangwani, Product Manager at DataGrail, to dive into the current state of consent — and what the future will look like. Watch on-demand here:
You can learn more about our new consent management platform in our most recent blog. If you’re interested in learning more, simply respond to this email or request a demo here.
Colorado’s new AI Act is making waves with its robust regulations set to take effect in 2026. Aimed at AI developers and users in sensitive sectors like finance and healthcare, this law demands thorough documentation, impact assessments, and risk management.
The law is designed to prevent discriminatory outcomes and ensure transparency in the decision making process. Whether you’re developing AI software or using it in your business, complying with this act means gearing up for significant responsibilities and potential operational changes.
