Data Privacy & Protection

Whether it’s GDPR, CCPA, or other frameworks, protecting personal data isn’t optional— it’s trust in action. Get consent, safeguard information, and be transparent about what you collect and why.

Data Privacy and Protection Laws

Safeguard individuals' personal information from unauthorized access or misuse. Key regulations like the General Data Protection Regulation (GDPR) in the European Union and California Consumer Privacy Act (CCPA) in the U.S. give people control over their data, requiring companies to obtain consent, secure data, and maintain transparency.

General Data Protection Regulation (GDPR)

A European Union regulation that impacts how personal data is collected and used. Creative professionals working with digital marketing or data-driven advertising must comply with these privacy laws, which have global implications.

California Consumer Privacy Act (CCPA)

A state law that gives California residents more control over their personal information. Mandates transparency about what data is collected and provides users the right to delete or opt out of the sale of their data.

Colorado Privacy Act (CPA)

A state law that gives Colorado Consumers new rights with respect to their personal data, including the right to access, delete, and correct their personal data as well as the right to opt out of the sale of their personal data or its use for targeted advertising or certain kinds of profiling.

Connecticut Data Privacy Act (CTDPA)

A state law that gives important data rights to Connecticut residents and solidifies privacy obligations for businesses..

Delaware Personal Data Privacy Act

A state law that gives Delaware residents rights over their personal data and imposing responsibilities on businesses that collect and process it.

Indiana Consumer Data Protection Act (INCDPA)

A state law that regulates how businesses handle the personal data of Indiana residents.

Iowa Consumer Data Protection Act (IACDPA)

A state law that regulates how businesses handle personal data and gives consumers in Iowa more control by granting certain rights, including the right to opt out of the sale of their personal data and targeted advertising.

Kentucky Consumer Data Protection Act

A state law that grants consumers rights over their personal data and imposes obligations on businesses.

Maryland Online Data Privacy Act (MODPA)

A state law that grants Maryland consumers rights over their personal data, such as access, correction, and deletion, and requires businesses to be more transparent and secure with data.

Minnesota Consumer Data Privacy Act (MCDPA)

A state law that gives Minnesota residents more control over their personal data.

Montana Consumer Data Privacy Act

A state law that grants consumers more control over their personal data, including the right to access, correct, delete, and obtain a copy of their data.

Nebraska Data Privacy Act

A state law that gives Nebraska residents more control over their personal data and imposes data privacy obligations on businesses

New Hampshire Privacy Act

A state law that grants consumers rights over their personal data and imposes obligations on businesses that handle it

New Jersey Data Privacy Act

A state law that grants residents new rights over their personal data and requires businesses to provide greater transparency and security in how they collect, use, and share that information.

Oregon Consumer Privacy Act (OCPA)

A state law that gives consumers more control over their personal data and requiring businesses to implement specific data protection measures

Rhode Island Data Transparency and Privacy Protection Act

A state law that creates comprehensive data privacy rights for Rhode Island residents and impose data protection requirements on businesses.

Tennessee Information Protection Act (TIPA)

A state law that gives Tennessee residents the right to access, correct, and delete their personal data, and imposes certain obligations on businesses that process the data of Tennessee residents.

Texas Data Privacy and Security Act (TDPSA)

A state law that grants Texas residents rights over their personal data and imposing requirements on businesses.

Utah Consumer Privacy Act (UCPA)

A state law that provides rights to consumers and places responsibilities on businesses to protect consumer data and use it compliantly.

Virginia Consumer Data Protection Act (VCDPA)

A state law that provides Virginia residents with rights regarding their personal data and requires businesses to comply with certain data processing and privacy standards.

Other National Privacy Laws, including Brazil (LGPD) & Canada (PIPEDA)

Other countries have implemented privacy laws that impact how advertisers can use consumer data. These laws create challenges for global advertising sales by requiring compliance across multiple jurisdictions.

U.S.-EU Data Privacy Framework (formerly Privacy Shield)

This agreement governs the transfer of personal data between the U.S. and EU, affecting international advertising campaigns that rely on user data for targeting.

Cross-Border Data Flows

Refers to the transfer of data across international borders. These transfers must comply with data protection regulations such as the GDPR in the EU, which restricts the movement of personal data to countries without adequate privacy protections.

Tariffs on Digital Goods and Services

Some countries have implemented tariffs on digital advertising services as part of broader trade disputes.These tariffs could affect the profitability of global ad campaigns and influence how multinational brands allocate their advertising budgets.

Trade Agreements Impacting Digital Advertising

Global trade agreements, such as the Trans-Pacific Partnership (TPP) or European Union-Japan Economic Partnership Agreement, impact how data is handled across borders, including for digital advertising. Advertisers must navigate these agreements when running international campaigns.