Data protection law, enforcement, platform policy and what it means for your data.
The FTC ordered Delta, United, JetBlue, Lyft, Uber, DoorDash, Instacart, Target and Walmart to explain whether personal data or loyalty status shapes the prices they charge and the pay workers receive.
Google's privacy policy, effective October 16, now says Gmail, Drive and Photos content can personalize ads if users connect those apps to services such as Search through Personal Intelligence.
The Eleventh Circuit vacated an injunction against Georgia's SB 351, letting the state enforce age checks, parental consent for under-16 accounts and limits on ad targeting while the case continues.
Norway's data protection authority fined Xandr NOK 92 million for relaying Grindr users' data, including sexual orientation, through ad auctions without valid consent. It is the regulator's largest fine.
Connecticut's SB 4 amendments took effect October 1, banning sales of precise geolocation data, adding facial recognition signage rules and setting up a data broker registry due in 2027.
