Blog
CPPA Settles With Unregistered Data Brokers
November 18, 2024
Want to receive these privacy recaps that matter to consent management, adtech and martech in your inbox? Sign up for our privacy newsletter, A Little Privacy, Please.
USA
CPPA Settles With Unregistered Data Brokers
Following an investigative sweep of unregistered data brokers, the California Privacy Protection Agency (CPPA) announced its settlement with two data brokers, Growbots and Uplead, for $34,400 and $35,400, respectively, plus attorneys fees and costs, for failing to register under the Delete Act. Growbots and Uplead are both providers of sales prospecting software tools.
TAKEAWAY
Although only two settlements were announced, the CPPA’s data broker registry has seen an approximately 5% increase in new registrations over the last two months after a lack of any new registrations in the several months before that, according to snapshots from The Wayback Machine, indicating potential results from CPPA pressure. The only current consequence of registering as a data broker is an obligation to comply with certain disclosure requirements and to pay annual fees, but starting in 2026, data brokers will be required to comply with user deletion requests submitted through a universal deletion mechanism offered by the CPPA, which, depending on the mechanism’s popularity, could be a significant strain on data broker resources and have a significant impact on data broker business models.
Norway Parliament Adopts Changes to Cookie Consent Obligations
After three years in public consultation, the Norway Parliament adopted a new Electronic Communications Act which, among many other changes, includes changes to rules regarding consent to cookies, requiring that consent for cookies align with consent requirements under GDPR, including that consent be as easy as rejection.
TAKEAWAY
The obligation that the use of non-essential cookies be as easy to reject as to accept is one that has been adopted across several other jurisdictions in the EEA and has resulted in enforcement sweeps in Germany, UK, Greece and France, among others. The new Norway Act is expected to enter into force without delay.
To learn more about Sourcepoint support for the Norwegian market, watch this client webinar on-demand.
Want more of the privacy highlights that matter for consent management, adtech and martech? Sign up for our privacy newsletter, A Little Privacy, Please.
A Little Privacy, Please weekly recaps are provided for general, informational purposes only, do not constitute legal advice, and should not be relied upon for legal decision-making. Please consult an attorney to determine how legal updates may impact you or your business.
Latest Blog Posts
FTC and Sensitive Location Data; New Pen Register Class Actions
December 9, 2024FTC takes action against the sale of sensitive data...
California CPPA Issues Notice of Proposed Rulemaking
November 25, 2024News out of California this week. The CPPA moved...
Mitigating risk under the Video Privacy Protection Act (VPPA)
November 23, 2024Because VPPA is just one of many tools being...
Latest White Papers
E-book: Enterprise Guide To Cookie management & Tracker List Curation
July 1, 2024How to review the tracking tech on your websites...
Benchmark Report: US Privacy Compliance
August 19, 2022The current state of publisher compliance with CCPA, and...
Keep in touch
Sign up for our newsletter to keep up with privacy news for adtech and martech,
plus occasional company news.