Privacy Compliance News

Privacy opt-outs and email unsubscribes may appear similar on the surface, but mixing the two up can cost your business marketing opportunities. Read more.

Global Privacy Control is making advertising opt-outs easier than ever for consumers, and failure to implement it on your website may lead to fines.

Lots of businesses have relationships with data brokers, but it may create some complications down the road for privacy compliance. Read the key takeaways.

Websites use cookies by the dozens, but most businesses don’t understand the privacy implications of this technology. Learn the key facts and requirements.

Most data processing is now done by outside vendors, but businesses are still responsible for disclosing it. Learn how this fits into privacy compliance.

Starting January 1, California's SB 923 requires online-only brands to offer a web form for privacy requests, and deletion requests now cover data brands got about a customer from outside sources like visitor-ID and enrichment tools.

‍Enforcement of California's Delete Request and Opt-Out Platform (DROP) began August 1. Data brokers now face fines of $200 per request, per day. The first thing to figure out is whether California considers you one.

Connecticut doesn't wait around. The state has already updated its privacy law twice since 2023 with another round of changes landing soon.

Explore what GM's $12.75M CCPA fine reveals about California privacy enforcement priorities, regulator expectations, and compliance risks for businesses.

A national consumer brand just paid $5 million because their website ran tracking pixels the way almost every website runs tracking pixels. Learn more.

Learn how long businesses can retain personal data under privacy laws and how to set defensible retention periods based on purpose, risk, and legal duties.

With the increasing number of privacy laws added every year, it can be difficult to know which apply to your business. Learn about each law's criteria.

U.S. state legislatures have been busy passing privacy laws. Check the exact date when each of the new laws go into effect. See what companies should know.

The amount of time allowed to respond to privacy requests varies by jurisdiction and request type. Use this reference chart to keep it all straight.

Data privacy laws are multiplying rapidly in the United States and elsewhere. Complying with all of these laws at once will take some planning. Learn more.

Lyft paid $1.8M after making signed-in riders sign in again to opt out of ad targeting. What that means for stores that know who their shoppers are, plus a five-step test for your own opt-out.

California's new SB 690 wipes out the "pen register" claims that fueled the recent wave of CIPA lawsuits, and it applies retroactively to suits filed after January 1, 2025. But the rest of CIPA still stands, so plaintiffs can pivot back to wiretapping claims against chat widgets and trackers, and opt-in consent still matters.

Delaware's HB 380 takes effect January 1, 2027. Here's what to check before the deadline.

If you run an ecommerce site, the tools you use every day, like ad pixels, session replay, chat widgets, even your search bar, are the same tools fueling a wave of lawsuits in California right now.

Privacy laws have been moving quickly this year. Vermont became the fourth state in 2026 to pass a comprehensive privacy law, joining Oklahoma, Alabama, and Louisiana.

If you're already complying with another comprehensive state privacy law, the LDPA won't introduce many surprises. Most of the requirements will look familiar, with a few Louisiana-specific additions like the required notices and standalone revenue threshold.

Many U.S. states are enacting their own data privacy law, forming a complicated patchwork of rules. Compare the different laws' requirements. Learn more.

TrueVault automates more than 99% of Aerosoles' privacy requests, leaving one person to handle the remaining work in a single weekly block.

TrueVault helped P.F. Candle Co identify hidden gaps, automate GPC opt-out requests, and keep workflows current as vendors, tracking tools, and privacy requirements continued changing.

TrueVault helped Tommy John centralize privacy requests, reduce manual coordination, and move beyond single-person dependency.

[solidcore] built its brand on customer trust. TrueVault helps the company maintain that trust through privacy operations that continue working as the business grows.