YouTube Video and Spotify Episode. Find us on Apple Podcasts!

DPP Install in 2024

• One episode per month
• Pickup where we left off in 2023 with CIPT series
• Have a few guests on the show

2023 lookback at my predictions

Prediction 1: State-level laws will slow down while they wait for a federal law to “set the tone.”
Result: Swing and miss

Prediction 2: The role of the data governance arm of an organization will increase in importance.
Result: I hit a double, maybe even a triple

Prediction 3: Cyber insurance premiums will continue to rise.
Result: As expected, insurance premiums rose again.

Prediction 4: Data transfers between the EU and US will improve.
Result: Hit a triple

Prediction 5: Privacy as a service will be more sought after.
Result: Hit a single

Prediction 6: More websites making customers/visitors aware of their privacy notice when users go to their site.
Result: Hit a double on this one

2023 biggest privacy news

• We saw 7 states pass privacy laws (DE, IN, IA, MT, OR, TN, TX)
• We saw 5 state privacy laws become effective (CA, CT, UT, VA, CO)
• EU-US DPF on July 10, 2023
• Privacy teams grew by 33% across all industries, per IAPP & EY research
• Washington introduced the My Health My Data Act, a state-equivalent to HIPAA. Nevada followed soon after.
• Children’s online privacy became a bigger topic after the FTC proposed changes to COPPA are disclosure restrictions and further limit org access to child data.

2024 predictions

1) The privacy function of the organization will continue to grow more and more as data becomes increasingly prevalent in the organization’s daily operations. Yesterday, the data scientist was the main source of insights from data. Tomorrow, the individual in the purchasing department will be able to come to the same conclusions as the data scientist because of automation and AI.

2) As AI continues to be a developing technology, and companies continue to adopt AI and automation, regulation around responsible AI use and data governance will become increasingly important. Although there won’t be much scrutiny until court cases set the precedent. To combat this, a federal data privacy law will be introduced. It will need to go through several updates, but its introduction to the house will happen and be passed to the Senate. The likeliest candidate is the American Data Privacy and Protection Act.

3) Children’s and teen’s privacy will be center stage regarding data privacy and data governance discussions across congress. The FTC sought to enhance protections provided by COPPA and Facebook is currently under scrutiny by the FTC for violations back in 2012. Many consumers under the age of 13 use Facebook, which is specifically where COPPA applies. In tandem with this, data brokers, in general, will need to provide more protection over the data they collect. Other ongoing cases include Ring, Kochava (data broker), and Epic Games. These cases only add to the framework for what is considered a “violation” and how much the violation will cost.

4) Now that several laws will go into effect in 2024, we’ll see more actions taken against organizations as precedent gets set. We’ll see Texas, Oregon, and Montana join the party and will need to see how other states, like Virginia and Connecticut, rule against violations.