Successful Advocacy for You and Your Industry

June 3, 2025

CFPB Withdraws Data Broker Rules That Could Have Clobbered Insights Work

The Consumer Financial Protection Bureau (CFPB) withdrew a regulatory proposal that could have unfairly applied restrictions in the Fair Credit Reporting Act (FCRA) to the work of many insights professionals. It would have been a misguided legal end-run around Congress to create a federal privacy law.

December 18, 2024

2024 State Privacy Legislative Roundup

The insights industry faced comprehensive consumer data privacy legislation in 2024 in dozens of states, with 13 states’ bills defeated and seven states’ ending up in law.

November 11, 2024

KOSA and COPPA 2.0 Pass U.S. House Committee

Minors privacy bills, including one supported by the Insights Association, passed a key House committee, following full Senate passage this past summer.

October 29, 2024

Rise and Fall of Federal Privacy Legislation in 2024

The Insights Association welcomed a comprehensive federal privacy bill in 2024 that recognized the unique importance of market research and audience measurement from the get-go. IA helped to win improvements to the legislation as it advanced, although the bill ultimately foundered.

October 21, 2024

California 2024 Legislative Update

The insights industry had more wins than losses in California in 2024, as legislators took on consumer privacy and data security, artificial intelligence (AI), human resources, antitrust issues, website accessibility litigation, and taxes.

September 30, 2024

California A.B. 1949 Vetoed - Would Have Dramatically Expanded Minors’ Privacy Restrictions

California Governor Gavin Newsom (D) just vetoed A.B. 1949, legislation opposed by the Insights Association that would have required opt in consent for using, disclosing, selling or sharing personal information of anyone under 18 years old, and undermined the “actual knowledge” standard.

September 23, 2024

California Governor Vetoes A.B. 3048 -- Would Have Required Opt Out Preference Signals on Browsers and Mobile OS

California Governor Gavin Newsom vetoed A.B. 3048, legislation that would have required browsers and mobile operating systems to offer (and transmit) opt-out preference signals. The Insights Association opposed the bill.

August 1, 2024

U.S. Senate Passes IA-Supported Kids Privacy Legislation

The U.S. Senate just approved legislation, supported by the Insights Association, that would regulate the design and operations of many for-profit online social platforms if they knowingly interact with minors 16 years of age or younger.

December 20, 2023

State Privacy Bill Roundup 2023

The insights industry faced comprehensive consumer data privacy legislation in 2023 in dozens of states, with 10 states’ bills ending up in law and 10 states’ bills defeated or deferred.

December 20, 2023

Data Broker Registries and Regulations - 2023 Year-End Update

Many in the insights industry are considered “data brokers” by certain state laws and legislation. In 2023, Texas and Oregon passed new laws regulating them and California added a challenging new wrinkle to its law, while we were able to hold off legislation in two other states.

November 15, 2023

California 2023 Legislative Update: Wins, Losses and New Laws

The insights industry had wins and losses in 2023 in California, as legislators have tried to tackle consumer privacy and data security, human resources, and artificial intelligence. July 26, 2023EU-U.S. Data Privacy Framework Finally Live for Trans-Atlantic Data TransfersA new program providing the U.S. insights industry legal certainty for trans-Atlantic data sharing is live, replacing the defunct Privacy Shield.

December 14, 2022

STATE PRIVACY BILL ROUNDUP AT END OF 2022

The insights industry stared down a variety of state comprehensive consumer data privacy legislation this year, with two such bills ending up in law and others defeated in dozens of other states.

November 14, 2022

California 2022 Privacy Legislation Round-up: Wins, Losses and New Laws

As usual, we’ve had some wins in California as legislators have tried to amend the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) in 2022, along with related privacy and data security-related legislation, but a few losses, too. A spate of new laws are coming soon (and not just CPRA, which comes into effect January 1, 2023).

August 23, 2022

Delaware Bill H.B. 262 Dies, Would Have Restricted Insights Companies as Data Brokers

Delaware H.B. 262, legislation that would have instituted a data broker registry and restrict data brokers' behavior (with many insights companies being captured pejoratively as data brokers), died at the end of the state's legislative session.

April 18, 2022

State Comprehensive Consumer Privacy Bills: Spring 2022 Update

The insights industry has faced a variety of state comprehensive consumer data privacy legislation so far in 2022, with one such bill ending up in law and such bills defeated in 16 other states.

March 28, 2022

Oregon Data Broker Bill H.B. 4017 Dies in Committee

The threat from Oregon H.B. 4017, legislation that would have required some insights companies, particularly sample providers, to register as “data brokers” in the state and share significant information about their operations, is over for 2022.

December 31, 2021

State comprehensive consumer data privacy legislation 2021: What passed and what failed

The insights industry faced comprehensive consumer data privacy legislation across the U.S. this year, with two such bills ending up in law and comprehensive privacy legislation defeated or deferred in 25 other states.

OCTOBER 18, 2021

CCPA-CPRA Roundup at End of 2021 Legislative Session

As usual, we’ve had some wins in California as legislators have tried (and in some cases succeeded) to amend the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) in 2021. Bills we opposed were amended or defeated. Let’s survey the new laws and what went down to defeat, at least for now.

JULY 7, 2021

Connecticut Law H.B. 6607 Prohibits Punitive Damages in Data Breach Lawsuits Against ISO-Compliant Companies

Connecticut Governor Ned Lamont (D) signed H.B. 6607 into law on July 7, 2021. The IA-supported law prohibits punitive damages in data breach tort litigation if a breached company abides by the right data security standards, like ISO 27001.

March 17, 2021

New Utah Law Provides Defense Against Data Breaches for ISO-Compliant Organizations

The Utah Cybersecurity Affirmative Defense Act (H.B. 80), provides an affirmative defense against data security breach litigation if a breached company abides by the right data security standards, like ISO 27001. The Insights Association had endorsed H.B. 80 in February.