Gov't argued: you turned on Location History, so you forfeited any privacy in it. SCOTUS: No. Pulling that data is a Fourth Amendment search, even though Google held it. Kagan puts your cloud email, photos and calendar in the same sentence.supremecourt.gov/opinions/25…
The UK could order Apple to build a backdoor into encrypted iCloud data, gag Apple from confirming it exists, as well as reaching US citizens' data too. therecord.media/apple-uk-tcn…
NJ just made it illegal for grocers to price your food based on data pulled from cameras and sensors watching you shop. Following NY, CT, and MD. "Personalized pricing" was always just a surveillance overstep. insideprivacy.com/state-priv…
Same question, three opposite answers: who should verify a kid's age and hold the data? New York says the platform. Illinois says the phone. Congress can't decide. Our money is on the one that scares us most 🧵
Full breakdown linkedin.com/pulse/hot-potat…
KOSA cleared the Senate committee again. The"duty of care” clause pushes platforms toward ID checks and biometrics for everyone, not just minors.
In this issue:
👉 3 kids'-safety laws playing hot potato with who verifies a minor's age.
👉 CalPrivacy's all-CA fortnight: a double broker fine, a fee hike, a deletion platform going live.
👉 Four fights over who holds the data and who can reach in.
linkedin.com/pulse/hot-potat…
Blaming the algorithm won't save employers anymore - under CTs new CART Act, companies using AI in hiring can no longer escape discrimination liability by blaming third-party vendor software. knowledge.dlapiper.com/dlapi…
In this issue:
🪝 Brussels moves the AI Act deadline and quietly swaps its target
🪝 Meta's year-old Flo verdict turns into a multibillion-dollar bill
🪝 Illinois makes AI bring its own auditor
linkedin.com/pulse/off-clock…
UK’s Ofcom is investigating whether TikTok's age-inference tools are missing underage users with possible fines of up to 10% of global revenue. Can platforms actually tell a 12-year-old from a 17-year-old?
ofcom.org.uk/online-safety/p…
IAB wants tiered consent for teen ad targeting. Parental consent under 13, opt-in w/ parental notice for 13-15, self-consent at 16-17. Clearer age bands, but still doesn't solve the core problem: verifying age without collecting more data. mediapost.com/publications/a…
The EU wants a bloc-wide "start date" for social media ban for under-13s - unless supervised or proven teen-safe. The hard part remains: age checks without verification & a new trove of ID data. therecord.media/eu-proposed-…
IAB Europe has appointed a Governance Board to oversee TCF compliance after a 2025 Belgian ruling found it a joint controller. Members include Google, Amazon, Criteo, WPP, Publicis & Samsung. Will tougher self-regulation change anything?
iabeurope.eu/iab-europe-anno…
In this issue:
✔️ What happens when AI governance lands in the DPO’s inbox
✔️ Europe starts drawing lines around social media
✔️ Adtech’s teen-targeting rules run into the age-check problem
linkedin.com/pulse/loose-end…
House passed a kids' online safety bill, but Senate path looks shaky. By omitting the Senate's "duty-of-care" rule while adding AI & age verification, the bill proves everyone wants to protect kids, but no one agrees on how. Link here: us.list-manage.com/mo0iZJ35l…
A judge ruled Veradigm must face class action alleging its patient portals sent health data to Google without consent. Patient portals & 3Ps face rising legal scrutiny. Link Here: us.list-manage.com/188RjxGkx…
New Jersey has added a costly law to privacy patchwork. Banning sensitive data sales & a new data broker registration with $$$ fees. Link here: us.list-manage.com/3DRd7PK2D…
The SC’s ruling in Trump v. Slaughter has reopened questions about FTC’s independence, giving noyb a new basis to challenge the DPF. Companies relying on the DPF should be watching closely.
Link Here noyb.eu/en/us-supreme-court-…
