Insights

Data Privacy & Broker Regulation

Privacy enforcement and data broker compliance for technology companies.

Scenario

Why this collection exists

Your company collects user data through a SaaS platform, a connected device, or a consumer-facing application. California's Delete Act created a new data broker registration and deletion portal (DROP). The FTC is pursuing enforcement actions against companies that share consumer data without adequate consent, including connected device manufacturers. State privacy laws continue to expand the definition of "data broker" beyond traditional data resellers.

If your product collects location data, biometric data, or behavioral data, you may have obligations under multiple state privacy frameworks even if you do not consider yourself a data broker. The FTC's enforcement posture under PADFAA and its connected device actions signal that the agency views data sharing practices broadly.

This collection covers the privacy enforcement actions, data broker regulations, and compliance requirements that affect technology companies handling consumer data.

Continue

Talk through how these developments affect your company.

Send a short note describing what you are working on. The founding attorney reviews each inquiry personally.

Start a Conversation