Happy (belated) November, everyone. 🍂

As we return to our desks and head into the final stretch of 2025, the privacy landscape continues to accelerate. This month, we share resources on AI governance, risk management, and modern compliance frameworks, and DataGrail product innovation.

Before we dive in, we’re thrilled to share a major milestone: DataGrail has been named a Leader in the 2025 IDC MarketScape for Worldwide Data Privacy Compliance Software, reflecting our continued commitment to helping businesses manage, automate, and scale their privacy programs with confidence. 🎉

👉 Read the announcement here

More below on what’s new from our product team, plus the latest reads from DataGrail.

Here’s what you need to know from November's data privacy news. 👇

🚨 California AG Announces $1.4M CCPA Enforcement Action

• The California Attorney General issued a $1.4 million enforcement action against a mobile gaming app developer for failing to provide a compliant CCPA opt-out mechanism and for improperly selling or sharing teens’ data. The case reinforces California’s growing focus on mobile app compliance — especially around minors’ data and cross-app tracking practices. Read more here

🛡️ California Privacy Agency Proposes New Whistleblower Protections

• The California Privacy Protection Agency has proposed new whistleblower protections designed to support employees who report privacy violations or misconduct. The proposal aims to strengthen internal accountability and reinforce compliance with CCPA and CPRA requirements. Read more here

🇪🇺 Critics Warn EU May Weaken GDPR Under Pressure From Tech Giants

• Privacy advocates are sounding the alarm that proposed revisions to the GDPR could weaken important protections and benefit large technology companies. Critics argue that such changes could undermine the strength of Europe’s privacy framework and reduce consumer control over personal data. Read more here

👀 Looking ahead: What are the effective dates of the US state privacy laws?

What’s New from DataGrail — October Product Release 

This month’s product updates focus on deeper automation, expanded visibility, and improved coverage across privacy operations. From new intelligence capabilities to workflow optimizations, this release continues our work to streamline compliance processes and deliver more actionable insights for our customers.

👉 Read the release blog here

Introducing Risk Register: Centralized, AI-Powered Privacy Risk Management

We also launched Risk Register, a new centralized hub for managing privacy risks across systems, vendors, and workflows. Powered by AI, Risk Register surfaces emerging risks, prioritizes them based on real business impact, and helps teams document and demonstrate compliance readiness at scale.

 👉 Explore Risk Register

The Delete Act and DROP: What You Need to Know

• California’s Delete Act and new DROP program introduce sweeping requirements for data brokers with major implications for compliance, data governance, and consumer transparency.

Not a Data Broker? California May Disagree

• As enforcement accelerates, many companies may be classified as data brokers without realizing it. Kenneth Vignali (Founder, Signature Peace of Mind Advisors) and Dwight Turner (Compliance Analyst, SimSpace) explain why — and what to do next.

Preparing for the Kentucky Consumer Data Privacy Act (KCDPA): What You Need to Know Before January 1, 2026

• Kansas joins the growing roster of states enacting comprehensive privacy laws. This breakdown walks through scope, consumer rights, business obligations, and how it aligns with other state laws.

What You Need To Know About Indiana’s New Privacy Law

• Indiana’s statewide privacy regulation brings new requirements for data minimization, consumer rights, and sensitive data handling. Here’s what organizations should prepare for.

What You Need To Know About Rhode Island’s New Privacy Law

• Rhode Island has officially entered the privacy arena with a new framework for data rights and business responsibilities. This guide covers the essentials.

Are you passionate about privacy, legal, or security issues? Want to connect with like-minded professionals and stay ahead in a rapidly evolving landscape?

Become a member of our Privacy Community!

We’ve got everything from privacy law updates to career tips, monthly privacy huddles, and exclusive resources tailored for the privacy community. Don’t miss out on the chance to be part of a vibrant network committed to advancing data privacy.

See you next time! 👋

DataGrail

This was sent to your email. If you do not wish to receive news and product updates in this format, please manage your preferences below.

© 2024 DataGrail, Inc. and/or its affiliates. All rights reserved.
Various trademarks held by their respective owners.