Traditional and non-traditional “data brokers” have seen increased legislative attention at both the state and federal levels over the last year. These laws seek to cover participants in the ad tech ecosystem, as well as others who build consumer profiles based on online and offline behavior. Companies are evaluating their status as data brokers in light of the broad definition of that term under some laws. Likewise, many companies are examining their risk posture, registration obligations, and due diligence requirements. This panel will discuss:
- The current legal requirements at both federal and state levels in relation to data brokers;
- How do data brokers handle varying registration requirements under the state laws;
- The privacy requirements under certain state laws, such as the California Deletion Act;
- Practical solutions to satisfy the requirements under the Protecting Americans’ Data from Foreign Adversaries Act of 2024; and
- Applicable takeaways from enforcement actions.