Aaron Mak has a rather sensational story on Slate, “The
big change coming to just about every website on New Year’s Day: Thanks, California”.I had linked to Ian Corzine’s video on
this with a Dec. 4 post.
Well, it’s probably overhyped to say every
website. It’s those that earn more than
$25 million gross, collect data for more than 50000 people, or earn more than 50%
of their revenue from selling data they collect. This appears to be an annual
threshold (not all time, which would seem to be unenforceable it it were.)
The article maintains that US businesses may spend up
to $55 billion to comply.
Sara Morrison of Vox Recode has an article Dec. 30 that explains the law from the viewpoint of the consumer. Vox doesn't require login to view articles and doesn't have a paywall, so I would wonder where their exposure comes from (they have a detailed privacy policy), presumably mostly from large scale sponsoring advertisers. (My browser sometimes tells me that it is waiting on "outbrain", which could be a clue.)
Vice (Alex Bode, Jan. 2) suggests that enforcement won't start until summer 2020.
Sara Morrison of Vox Recode has an article Dec. 30 that explains the law from the viewpoint of the consumer. Vox doesn't require login to view articles and doesn't have a paywall, so I would wonder where their exposure comes from (they have a detailed privacy policy), presumably mostly from large scale sponsoring advertisers. (My browser sometimes tells me that it is waiting on "outbrain", which could be a clue.)
Vice (Alex Bode, Jan. 2) suggests that enforcement won't start until summer 2020.
Corzine had said that you have to be concerned if you
collect, even through hidden cookies, more than 137 items of personal info a
day in a year, but the law (when read) seems to refer to number of households
or persons unduplicated.
I wrote an “official post” on my notes blog about the
issue today, link.
YouTube channels are apparently regarded as “sites” in
the law (in a manner similar to COPPA). But YouTube would normally supply
visitors with the necessary option buttons.
As pf now, Blogger has not yet said anything new on
the work platforms for users, as it had done for the similar EU GDPR.
Some commentators say this legislation was mostly inspired
by Facebook’s Cambridge Analytica scandal, but it is fairly easy for a company
the size of Facebook to comply technically now.
YouTube channels and particularly hosted websites that
have individual corporate advertisers as sponsors will have to be careful how
they comply if the advertisers provide them material.
Websites should be careful with third party widgets
that generate dynamic url’s on their own domains. I will investigate this problem with services
often used (like PR Newswire). I suspect there are programmers (some of whom I probably know) who have thought of this. A lot of them may be making big $$$ this winter between COPPA and CCPA solving all these problems and connecting the dots. Good for college tech major kids on gap years.
No comments:
Post a Comment