Lucid Privacy Group

Trusted Global Privacy Specialists for Data-Driven Companies

[Lucid Privacy Group @LucidPrivacy]

In this issue:
📌 The ICO proposes a new path for a lower-risk online ad ecosystem
📌 Louisiana moves closer to a comprehensive privacy law.
📌 The Supreme Court weighs privacy limits on geofence warrants
https://t.co/GOOKKJL07H

[Lucid Privacy Group @LucidPrivacy]

Marketing pixels are becoming eight-figure liabilities. Forbes agreed to pay $10M to settle a California class action over LinkedIn and Microsoft trackers on https://t.co/JsfSibNZuc. Website operators: this is your wake-up call — audit your sites. #Privacy

[Lucid Privacy Group @LucidPrivacy]

The EU has fast-tracked a ban on AI “nudifier” tools. It’s a clear moral line, but also smart positioning: even as Brussels softens parts of the AI Act, banning synthetic abuse tools by end of 2026 helps preserve its ethical high ground.
https://t.co/DNP8oSb7ob

[Lucid Privacy Group @LucidPrivacy]

Vibe-coding is creating real corporate liability. If you don't establish security standards, your corporate data & IP is essentially public property. Contact your friendly Lucid Rep today to secure your AI AUP strategy!
https://t.co/RLwm2oDOFv

[Lucid Privacy Group @LucidPrivacy]

The EU has signalled a strategic pivot on AI, shifting from aggressive policing to an innovation-first strategy. By easing parts of the AI Act and pushing “high-risk” rules to late 2027, Brussels is trying not to fall behind in the global AI race. #AI #TechPolicy

[Lucid Privacy Group @LucidPrivacy]

The NOYB v. LinkedIn fight is shaping up to be a major GDPR Art. 15 test. Can a platform deny access requests over “third-party rights” while selling that same profile-visitor data to Premium users? Privacy rights shouldn’t be a paid feature. #GDPR
https://t.co/s2qndHKRsZ

[Lucid Privacy Group @LucidPrivacy]

Google’s upcoming “simplification” of data controls may create a cleaner flow, but it also creates real liability for publishers. The era of “set & forget” Consent Mode is over. Publishers: audit your implementations now (or ask Lucid to do it for you).
https://t.co/6NUSUj6PwS

[Lucid Privacy Group @LucidPrivacy]

(2/2) Check out Lucid’s breakdown here. The FTC’s stance in the Kochava settlement suggests standard practices like implied (opt-out) consent or relying on Apple’s ATT prompts are insufficient for handling sensitive location data.
https://t.co/V4OsfVPHU9

[Lucid Privacy Group @LucidPrivacy]

CA’s Delete Request & Opt-Out Platform (DROP) is where that fantasy starts meeting production infrastructure. It’s not a magic delete button. It’s handing brokers recurring lists of consumer instructions and expecting their databases to obey them. (1/2)

[Lucid Privacy Group @LucidPrivacy]

In this issue:
☑️ What CA’s DROP API means for data brokers, identity graphs, and deletion
☑️ Google’s Analytics “simplification” shifts more consent risk onto publishers
☑️ Forbes’ $10M tracker settlement shows CIPA pixel claims are no longer theoretical https://t.co/kcBnx1MqUe

[Lucid Privacy Group @LucidPrivacy]

Google’s defense in recent ad tech suits? The Statute of Limitations. Big G says the conduct is old news; plaintiffs argue the system is still shaping the market today. If the court agrees it’s ongoing, the case survives. If not, the clock may save them. #adtech

[Lucid Privacy Group @LucidPrivacy]

InMobi is back in court over claims its SDK ignored user opt-outs. The big risk: are your adtech vendors actually honoring your CMP signals? Don’t let a “technical error” become your liability. Audit your data flows. #privacy #adtech

[Lucid Privacy Group @LucidPrivacy]

US courts seem to be finally setting a line on car data privacy. The distinction? Continuity.
Acceptable: Controllable, limited tracking / Unacceptable: "Always-on," embedded collection https://t.co/dBYFk2UbDQ

[Lucid Privacy Group @LucidPrivacy]

In this issue:
✦ Google leans on timing in ad tech cases, but plaintiffs say the conduct continues
✦ The UK ICO sharpens tracking rules as exemption questions remain
✦ Car data cases diverge as data flows shape what sticks https://t.co/QIRbGPAKMa

[Lucid Privacy Group @LucidPrivacy]

The SECURE Data Act is the latest federal privacy push—but lacks the credibility of ADPPA/APRA. It appears to allow broad PI collection (including AI model training) while preempting state laws.

[Lucid Privacy Group @LucidPrivacy]

Happy 21st! Alabama is the latest state to pass a comp privacy law. In line with VA and CT laws, it gives residents rights to access, delete, & opt out of certain data uses, while requiring companies to be more deliberate about how they handle personal & sensitive information.

[Lucid Privacy Group @LucidPrivacy]

CA, CO, NY and other states have enacted AI laws creating a complex patchwork of obligations. Unlike privacy law where states converged on the VA model, AI laws vary significantly in definitions, & thresholds, making a one-size compliance program nearly impossible.

[Lucid Privacy Group @LucidPrivacy]

In this issue:
☞ Meta’s “Name Tag” idea runs into a very public line in the sand
☞ AI rules are piling onto an already crowded privacy map
☞ Federal privacy resurfaces, unresolved as ever
https://t.co/D3AgdfsrwB

[Lucid Privacy Group @LucidPrivacy]

Are pixels just plumbing or potential wiretaps exposure?
Judges are questioning whether “everyday tracking” falls outside the law.

https://t.co/1BrWPIkrs8

[Lucid Privacy Group @LucidPrivacy]

Hot take: Browser “telemetry” is going too far?
New lawsuits claim LinkedIn tracked users’ extensions + device data via scripts beyond routine checks and led to stealth collection.

Unusual behavior? Doubt it.
https://t.co/dxgBNhNf3M