These articles track the state and federal privacy laws that affect how consumer data is bought and used, including rules for health and location data. Each one explains what changed, who it applies to and what a buyer should ask a supplier. They are general information, not legal advice.
Buyer-facing explainer of California's Delete Act DROP platform: consumer request timing, broker 45-day processing from August 1, 2026, penalties, suppression ledgers, and diligence questions for data vendors.
, 12 min read
How 2021 EU Standard Contractual Clauses, UK IDTA, and Schrems II supplementary measures apply when data brokers act as exporters or importers, with ties to GDPR Article 14 notice and enterprise transfer diligence.
, 12 min read
What Cal. Civ. Code §1798.99.85 requires data brokers to publish by July 1: request metrics, zero-request reporting, privacy-policy links, and how enterprise buyers should verify broker disclosures in 2026 diligence.
, 12 min read
Why Wiretap Act litigation over tracking pixels and session replay reaches data brokers and ad-tech partners, and how consent alignment, sublicense controls, and RoPA-style mapping reduce class-action and contractual exposure.
, 12 min read
What the DOJ bulk sensitive personal data rule means for geolocation brokers: 1,000-device thresholds, countries of concern, and contract clauses federal buyers now expect.
, 12 min read
BIPA's biometric rules, why face-geometry templates are not "just photos," and how data vendors should purge or block Illinois biometric identifiers.
, 12 min read
Why COPPA still matters for MAID graphs and mobility panels, how actual-knowledge standards fail in practice, and exclusion rules vendors should document for buyers.
, 12 min read
The Protecting Americans' Data from Foreign Adversaries Act bans selling sensitive US person data to foreign-adversary countries: what brokers, buyers, and platforms must screen before licensing feeds.
, 12 min read
How the EU AI Act reaches B2B data suppliers whose feeds train or score models in the EU: risk tiers, GPAI duties, logging, and documentation buyers should demand in 2026 RFPs.
, 12 min read
Why IAB TCF strings from publisher apps do not replace broker transparency, how indirect vendors should document consent chains, and the legal questions procurement should ask before licensing bidstream or panel data.
, 12 min read
SB 26-189 reaches upstream data suppliers as ADMT developers: training-data documentation, limitation disclosures, and contract clauses buyers should demand before 2027-01-01.
, 12 min read
Why B2B data brokers cannot rely only on partner CMPs for transparency, what GDPR Art. 14 requires within one month, and how EDPB-style broker scrutiny maps to buyer diligence.
, 12 min read
How the FTC treats precise geolocation after X-Mode, InMarket, and Mobilewalla orders, what the ~1,850-foot coarse-location line means, and how buyers should test mobility feeds before activation.
, 12 min read
What enterprise buyers should verify on California, Vermont, Texas, and Oregon data-broker registrations before licensing commercial data.
, 12 min read
When you license data from a non-EU controller, Article 27 representatives, subprocessors, and cross-border transfer mechanics belong in the same diligence thread.
, 12 min read
Healthcare-related alternative data is valuable and compliance-heavy: the operator-grade question is where claims-adjacent patterns, mobility aggregates, and condition-level sentiment produce real signal, and where HIPAA and FTC HBNR bound what buyers can license.
, 12 min read
Healthcare analytics buyers need signals that hold up under HIPAA and state privacy regimes. Here's the durable architecture: de-identified behavioral data, POI-matched visits with sensitive-category exclusions, and consent-first mobility feeds.
, 12 min read
With comprehensive privacy laws now active in over 20 U.S. states, data strategy must be built on a compliance-first foundation. A practical guide to navigating the patchwork.
, 12 min read
Relationship disclosure: X-Mode and its successor Outlogic, InMarket, and Mobilewalla are referenced here as subjects of FTC consent orders finalized in 2024 and 2025. GSDSI has no supplier, partner, or reseller relationship with any of them.
To scope any of this against your own data, talk to our team.
✓ Opt-Out Request Honored via Global Privacy Control
