Privacy News
BVDW Launches IAB Diligence Platform, Powered by SafeGuard Privacy, in Germany with Nexida, Establishing New Standard for GDPR Compliance
Certification-backed and AI-enabled, the IAB Diligence Platform expands to Germany, helping brands, agencies, and ad tech companies manage GDPR compliance efficiently across the EU
2026 IAB Diligence Platform Expansion: A Conversation with Industry Leaders
Michael Hahn, Executive Vice President and General Counsel at IAB and IAB Tech Lab, and Richy Glassberg, Co-Founder and CEO of SafeGuard Privacy, discuss the IAB Diligence Platform updates and their implications for organizations preparing for the next phase of privacy governance.
IAB Diligence Platform Expands for 2026 Regulations with Friction-Free Vendor Participation and AI-assisted RFI completion optimized for our industry
New York, NY – SafeGuard Privacy today announced major updates to the IAB Diligence Platform, including assessments to reflect 2026 regulatory changes and the capability to use AI to [...]
The Collegial Privacy Regulators – Updates from the CLA Summit
We attended the California Lawyers Association Privacy Summit. Here are the highlights as well as some updates about the Disney enforcement settlement.
Join us at the 2026 IAB Public Policy & Legal Summit
This flagship one-day event brings together privacy leaders to tackle the regulatory challenges shaping the future of digital advertising. And don't miss the SafeGuard Privacy fireside chat focused on privacy due diligence.
Enforcement Has Shifted. The Ecosystem Is Now the Target.
2026 opened with a surge in privacy enforcement. These weren’t isolated moves. Regulators are shifting from notice and consent to ecosystem accountability.
Why Data Privacy Is Now Everyone’s Job
Privacy used to sit in the background. Now it shapes how marketing, product, and customer experience actually operate. Richy Glassberg explores why data privacy is no longer someone else’s job.
Why IAB Launched the Authorized Assessor Program
Michael Hahn, EVP and General Counsel at IAB, discusses why the program was launched and how it fits into the broader compliance landscape.
IAB Launches Authorized Assessor Program in Connection with IAB Diligence Platform and FTI Consulting
The IAB Authorized Assessor Program is a new initiative that provides standardized and streamlined diligence services for IAB members.
Turning the Complexity of Data Privacy Into A Competitive Advantage
Insider Interviews host E.B. Moss speaks with Richy Glassberg, Co-founder and CEO of SafeGuard Privacy about the intricacies of privacy compliance and the ever-changing laws that impact digital media and [...]
A Smarter CCPA Risk Assessment: To-Dos and Timing You Can Use Today
The CCPA’s new risk assessment regulations take effect on January 1, 2026. Here’s where to start. In our November Update on the CCPA risk assessment [...]
LinkedIn Live with Jules Polonetsky
SafeGuard Privacy's Richy Glassberg and Andy Hepburn join Jules Polonetsky and Jordan Francis of the Future of Privacy Forum to talk about January 1st's upcoming changes to privacy obligations.
Introducing the IAB Diligence Platform’s New Questionnaire for DOJ Bulk Data Compliance
IAB and SafeGuard Privacy have released a new DOJ Data Security Program (DOJ DSP) questionnaire that provides organizations with an efficient, standardized way to evaluate obligations related to protecting Americans’ bulk-sensitive data from unauthorized foreign access.
The Clock Is Ticking: CCPA Risk Assessments Become Mandatory in 2026
The CCPA’s new risk assessment regulations take effect on January 1, 2026.
SafeGuard Privacy Unveils Privacy Assist™ AI — First Legal-Grade AI for Privacy Compliance at Scale
SafeGuard Privacy, the leading platform for privacy compliance and vendor diligence, today announced the launch of Privacy Assist™ AI, a new intelligent artificial intelligence layer and suite of products designed to address one of the most significant challenges in the industry today: the overload of requests for information and vendor diligence. Privacy Assist™ AI empowers teams to accomplish more tasks in less time while ensuring transparency, accuracy, and complete control.
Florida v. Roku: We’re Not in California Anymore
Florida’s lawsuit against Roku shows that protecting children’s data is now a national enforcement priority. Under Florida’s Digital Bill of Rights, even billion-dollar companies face scrutiny for mishandling minors’ information. As states expand beyond COPPA, businesses must strengthen compliance with new rules governing consent, advertising, and data use for children and teens.
Regulators Accelerate and Deepen Privacy Enforcement in 2025
Enforcement of state privacy laws ramped up in 2025 and regulators are going deeper than inadequate policies and ineffective opt-out mechanisms. In recent cases, they are also focusing on vendor compliance.
SafeGuard Privacy A Best Privacy Technology Finalist for Third Year In A Row – AdExchanger Awards
We're honored to be recognized for Best Privacy Technology!
Top Takeaways from Healthline: Purpose Limitation and Adtech, Compatible?
Jules Polonetsky, Richy Glassberg, Jordan Wrigley, and Andy Hepburn discuss the challenges of the adtech ecosystem and best practices to minimize risk.
How a recent settlement represents a warning and relief for the adtech industry
IAB GC Michael Hahn writes about how Healthline's CCPA fine illustrates the potential pitfalls for misrepresenting opt-out controls and data sharing practices.
Regulators Never Rest. Neither Do We.
The IAB Diligence Platform Updated With New Online Tracking Questionnaire and an Expanded Data Supplier Questionnaire.
Privacy regulators have an action plan. You need one, too. Download our free 30/60/90-Day Action Plan for Privacy Success
Our new free 30/60/90-Day Action Plan for Privacy Success was developed by top industry experts who’ve worked at major Fortune 500 companies.
Becausal Adopts the IAB Diligence Platform and Deepens Global Data Privacy Leadership with Adherence to Both EU’s AI Act and Digital Services Act Focused on Ad Transparency
This strategic move reflects Becausal’s ongoing commitment to privacy, transparency and responsible data practices in today’s complex adtech regulatory environment.
Radiohead And Erasure Have Some Pretty Good Privacy Advice
“We’re now a heavily regulated industry,” says Richy Glassberg, “and if you don’t understand that, it’s a big misconception.” Read more at AdExchanger.
50 States, 19 Privacy Laws, 1 Headache: Managing Vendor Sourcing and Diligence
Join Andy Hepburn, Rachel Glasser, Tim Nagle, and Tony Stein as they share insights from across the digital ad industry at Privacy+Security Spring Academy.
SafeGuard Privacy Associate General Counsel Katy Keohane Nominated for Top Women in Media and Ad Tech
Nominated by AdMonsters and AdExchanger in the Privacy Powerhouse category, Katy has been a key factor in SafeGuard Privacy's growth and industry leadership.
Key Takeaways from the California Lawyer’s Association 2025 Privacy Law Summit
The Multi-State Sensitive Data Assessment consolidates requirements of US States helping companies mitigate high-risk obligations and reduce costs
Advocates Watch Privacy Agency Director Search as AI Rules Form
The California Privacy Protection Agency’s search for a new executive director is drawing attention as it finalizes AI-related privacy rules. With Ashkan Soltani’s departure, industry experts hope the next leader will maintain open communication to help businesses navigate compliance. Read more at Bloomberg Law.
Why Data Minimization Is A Very Big Deal For Ad Tech
Data minimization—collecting only essential data—is reshaping ad tech. As privacy laws tighten, companies must rethink data-heavy practices to stay compliant and build consumer trust. Read more at AdExchanger.
SafeGuard Privacy Unveils the First Comprehensive Multi-State Sensitive Data Assessment
The Multi-State Sensitive Data Assessment consolidates requirements of US States helping companies mitigate high-risk obligations and reduce costs
eMarketer Report – US Privacy Trends 2024
SafeGuard Privacy and the IAB Diligence Platform were featured in eMarketer's 'US Privacy Trends 2024' report as technology solving ad industry privacy issues. (requires subscription)
An Update on How the IAB Diligence Platform is Streamlining Third-Party Risk Management for Digital Advertising
IAB general counsel Michael Hahn provides an update on the IAB Diligence Platform and it's traction in the marketplace.
What do Muskets, Microchips and Ad Privacy Compliance Have in Common?
Advertising simply isn’t used to being a regulated industry, and the industry’s inexperience shows. A lot of companies still don’t even have a line item in the budget for compliance. It’s a cost of doing business, but the cost is not accounted for in most cases.
SafeGuard Privacy is a 2024 AdExchanger Awards Finalist for Best Privacy Technology
For the second year in a row, we are thrilled to be included with the other nominations in the category. Follow the link to see the full list of nominees.
MediaPost: IAB Launches ‘Diligence Platform’ For Privacy Compliance
Learn more about how we built the IAB Diligence Platform and why it's a great choice for vendor diligence in our coverage at MediaPost.
IAB Diligence Platform is Now Available to Streamline Compliance for the Entire Digital Advertising Industry
Powered by SafeGuard Privacy, the Platform Offers Efficient, Scalable, and Industry-Specific Privacy Diligence for the Digital Advertising Industry.
Adweek: Check Out the Pitch Deck Firm SafeGuard Privacy Used to Raise $3.6 Million
The U.S.-based company is expanding its sales and legal teams while developing its AI compliance platform.
SafeGuard Privacy Closes a New $3.6 Million Funding Round
TechOperators, Dynamism Capital, Sidekick Partners, and two other existing investors led the company's new investment round.
TransUnion and SafeGuard Privacy Unite to Help Marketers Navigate Complicated Compliance Conditions
TransUnion and SafeGuard Privacy will help streamline marketers’ vetting for compliance when selecting their third-party audience vendors.
OneTrust Becomes First Company to Integrate with IAB Diligence Platform Powered by SafeGuard Privacy
OneTrust, the market-defining leader for trust intelligence, today announced it is the first company to integrate with the Interactive Advertising Bureau (IAB) Diligence Platform, powered by SafeGuard Privacy.
OneTrust Integrates with the IAB Diligence Platform, Powered by SafeGuard Privacy
OneTrust, the market-defining leader for trust intelligence, today announced it is the first company to integrate with the Interactive Advertising Bureau (IAB) Diligence Platform, powered by SafeGuard Privacy.
The Ad Industry Urgently Needs Consistent Privacy Standards
Advertising is now a regulated industry. And with enforcement coming at the state and federal level, data privacy standardization is an urgent issue. Read more at AdExchanger.
IAB seeks streamlined adtech privacy compliance with Diligence Platform
Richy Glassberg and Michael Hahn discuss evolving privacy legislation and how the IAB Diligence Platform is built to help the digital ad industry for the IAPP.
California Privacy Agency Signals Heightened Regulatory Action
While California Attorney General Rob Bonta emphasizes collaboration with companies for compliance, the CPPA's deputy director of enforcement signals a more assertive stance, indicating a move towards rigorous enforcement. Analysts foresee a shift toward more public enforcement actions, and our Associate General Counsel Katy Keohane, CIPP-US, agrees.
In a World of Evolving and Enforceable Privacy Regulation, Companies Need Smarter Tools
Richy Glassberg highlights the importance of implementing smarter tools for ethical use of consumer data by businesses for the Ethical Tech Project.
CPRA Regulations Immediately Enforceable
The Appeals Court decision, overturning the lower court’s stay of enforcement until March 29, 2024, came during the California Lawyers Association’s Annual Privacy Summit in Los Angeles.
IAB Introduces a Diligence Platform To Help Modernize Privacy Compliance
An Exclusive Q&A with Michael Hahn and Richy Glassberg on complying with the new privacy regulations and the ins and outs of the IAB Diligence Platform.
IAB inks deal with SafeGuard Privacy to help traverse the fragmented regulatory landscape
The IAB used its flagship ALM to unfurl its “Diligence Platform,” an initiative that aims to standardize how publishers and advertisers vet their ad tech supply chain via a partnership with SafeGuard Privacy.
Working Harder Won’t Solve Privacy Diligence. It’s Time to Work Smarter.
The IAB Diligence Platform is a purpose-built compliance solution for the digital advertising industry. It will combine new industry vertical business questions with US state law assessments in one collaborative platform to make the diligence workflow effective and efficient for both sides of the partnership.
How to Move the Privacy Needle Without Really Trying
Privacy compliance gets more complex with every passing day. How can you approach privacy holistically while also seeking to address compliance in every jurisdiction in which you do business? Are you concerned about sensitive data? If you're not, you should be. Read more over at the ANA.
SafeGuard Privacy Wins Best Privacy Technology at the 2023 AdExchanger Awards
It's an honor to be recognized for our team's hard work. See the other award winners over at AdExchanger.
It’s not just HIPAA anymore
Important insights, key takeaways, and why everyone needs to know about Washington’s new My Health My Data Act.
SafeGuard Privacy is a 2023 AdExchanger Awards Finalist for Best Privacy Technology
We're honored to be included with this years awards finalists!
Oregon Sets the Bar: Landmark Consumer Data Privacy Bill Becomes the Strongest in the Nation
It would be easy to ignore the new Oregon Privacy Law in the midst of the recent EU-US transfer accord and stay of the new CPRA Regs. Wayne Matus believes that would be a big mistake. Read more at AdMonsters.
Major Privacy Law Enforcement Announcements by CPPA and California and Colorado Attorneys General
The CPPA regs may be delayed, but enforcement is not. The CPPA and Colorado AGs have laid out their enforcement plans, vendor obligations are a critical issue in several States.
Richy Glassberg Joins the Data Privacy Breakfast Club Podcast
Our Co-Founder, CEO, and Fearless Leader Richy Glassberg got to sit down with Andy Dale and Pedro Pavón to talk ad tech, privacy, and the Beastie Boys. Check out the Data Privacy Breakfast Club Podcast!
If Managing Your Vendor’s Risk Isn’t a Top Priority, It Should Be
What does Moore’s Law have in common with privacy regulation? Vendor risk management is crucial in the face of evolving privacy laws, and just having a contract is no longer enough. Read Richy Glassberg's post at ANA.
SafeGuard Privacy Announces a First-of-Its-Kind Integration with The Institute for Advertising Ethics (IAE)
Advertisers Can Now Automate Assessment and Adherence to the IAE’s Ethics Principles and Practices as Part of Their Vendor-Wide Compliance Demonstrations.
AdExchanger: SafeGuard Privacy Is Helping Advertisers Prove Their Ethics
The IAE announced an integration with SafeGuard Privacy that helps companies manage their own privacy compliance efforts and asses those of their vendors.
How US State Laws Differ: Q&A With SafeGuard Privacy’s Legal Team
Wayne Matus and Katy Keohane shared insights with Street Fight on how privacy laws differ and what marketers need to know this year.
SafeGuard Privacy Partners with BBB National Programs to Certify Customers’ Privacy Bona Fides
StreetFight sits down with SafeGuard Privacy's Richy Glassberg and Wayne Matus to talk compliance.
Richy Glassberg joins Debbie Reynolds on The Data Diva Talks Privacy Podcast
Richy and Debbie discuss the ad industry's need for standards and regulations, the challenges organizations face, and the benefits of creating customer trust through privacy commitments. They also discuss new sophisticated privacy tools and the Twitter pixel issues that companies may now need to deal with.
SafeGuard Privacy Appoints Rachel Walkden and Jared Combs to Key Leadership Roles
The Executive Moves Support the Compliance-Tech Leader’s Global Business and Client Growth Strategy and Growth
SafeGuard Privacy Closes $7M USD Funding Round Led by TechOperators
The multi-million dollar investment was led by TechOperators following two years of hockey stick client and business growth at SafeGuard Privacy.
Check out the pitch deck privacy compliance platform SafeGuard Privacy used to raise $7 million in funding
Check out the pitch deck we used to secure funding over at Business Insider.
You’re Not Ready for the CPRA if Your Vendors Aren’t, But There’s Still Time
Rick Arney, co-author of CCPA and CPRA joins us and Dan Frechtling, CEO of Boltive to discuss the proposed rules and the consequences of failing to perform vendor due diligence and risk assessments in this IAPP Web Conference.
As Demand for Privacy Tech Peaks, SafeGuard Privacy Leads Compliance Talks
As 2023 looms, we will take the stage at the key industry events listed below to help publishers, agencies, brands, data providers and tech platforms to assess, audit and prepare to comply with global privacy compliance laws and requirements.
You’re Not Ready for CPRA If Your Vendors Aren’t
Wayne Matus and Kroll Managing Director Rich Vestuto break down CPRA's new vendor contract rules, the need to audit, and more of what's coming on January 1, 2023.
Are You Making Making False Claims About Anonymized Data?
The FTC's latest blog post has essentially issued a warning: Companies that make false claims about anonymization can expect to hear from the FTC.
Cimplifi™ Launches Security, Privacy, and Compliance Center with SafeGuard Privacy and Calamu
Companies can operationalize and automate data privacy management, reach compliance faster, and mitigate risk associated with data breaches of sensitive data.
The UK left the EU in 2020, today it left the GDPR
The UK has determined to take a risk-based, pro-business approach, at the exact same time the CNIL has doubled down on rejecting risk-based privacy in favor of absolute protection.
Americans could soon be able to sue companies for misusing their data
Consumer-interest groups are advocating for a private right of action. But that could mean huge fines - in the billions - for companies that misstep. Wayne Matus offered some insight [...]
Join the conversation on LinkedIn: When It Comes to Privacy, It’s Time to See the Forest for the Trees
Join the conversation with other privacy pros on Wayne's ANA piece over on LinkedIn.
When It Comes to Privacy, It’s Time to See the Forest for the Trees
Could a federal privacy law break the internet while we're not paying attention? Read Wayne Matus's article published over at the ANA for why it's time to see the forest for the trees.
ADPPA And Why This Is A Blockbuster Of A Bill.. Draft, That Is
Jesse Redness, CEO of Qonsent, takes a look at the new federal privacy bill draft and Wayne Matus offers some perspective on consent.
Talking Privacy at Best of the West
Sheila Colclasure of Kinesso and Fiona Campbell-Webster of MediaMath join our co-founders Richy Glassberg and Wayne Matus this Wednesday, April 27th at Best of the West to chat about privacy [...]
SafeGuard Privacy has partnered with businesses like Habu, CafeMedia, and Publisher’s Clearing House to manage global privacy compliance
Companies Habu, Publishers Clearing House, BusinessOnline, CafeMedia, and Neustar, a TransUnion company have adopted SafeGuard Privacy to audit and manage privacy compliance across their operations.
Meet us the IAPP Global Privacy Summit 2022
Grab your morning coffee and meet us at the Little Big Stage on Tuesday, April 12.
Privacy Shield 2.0: perhaps we should not open the Champagne yet?
While Commission President Ursula von der Leyen and President Biden have announced an "agreement in principle" on a new EU-US data-sharing system, there's a reason to be skeptical. Follow the [...]
California AG Determines Consumers Have the Right to Know Internally Generated Inferences About Them
Wayne Matus explains what this means for businesses. Follow the conversation on LinkedIn.
CCAB Launches California Consumer Privacy Act (CCPA) Compliance Platform
TORONTO, March 1, 2022 /CNW/ - The Canadian Circulation Audit Board (CCAB) - the Canadian division of global assurance provider BPA Worldwide (BPA) - has launched JumpStart, a new program to help [...]
Privacy Enforcement is Ramping Up – Meta/Facebook is Next
It's still only February, and we have a 4th major GDPR decision this year affecting US-EU data transfers. It appears that Facebook/Meta is about to be forced to suspend data transfers to the United States.
Google And IAB Europe Are Losing Data Privacy Lawsuits In The EU, But What Does It Mean?
Legal and court losses are piling up for American ad tech companies – and for Google. Our own Wayne Matus says the solutions are far more complicated than just storing data in the EU.
The Industry Is Still On Tenterhooks About A Universal Opt-Out Signal Under CPRA
Our general counsel, Wayne Matus, has some informative views on Universal Opt-Outs under CPRA over at AdExchanger.
Thoughts on CNIL: Is the solution really this binary?
nyob in response to the CNIL ruling: "Long Term Solution. In the long run, there seem to be two options: Either the US adapts baseline protections for foreigners to support their tech industry, or US providers will have to host foreign data outside of the United States." But is that really the case?
French Authority CNIL determines that the use of Google Analytics in the EU violate the GDPR
The CNIL ordered that a website manager cease using current Google Analytics functionality and only use it if the tool can be reconfigured to stop transfers outside the EU. At the moment, that is not an option. No surprise to anyone who is following Max Schrems, nyob or the Austrian DPA's decision regarding Google Analytics two weeks ago.
Four overlooked critical details in the EU Data Protection Authority decision invalidating IAB Europe’s “Transparency and Consent String”
Wayne breaks down four critical points that were overlooked in the decision. The OpenRTB system in the EU will need to undergo a major overhaul.
A great disturbance in the digital ecosystem: IAB Europe’s Transparency & Consent Framework violates the GDPR
The Litigation Chamber of the Data Protection Authority has determined that the IAB Europe’s Transparency & Consent Framework (“TCF”), which interfaces with the “OpenRTB” system created by the IAB Technology [...]
US-only companies should reconsider whether or not the GDPR or UKGDPR apply to their website
US-only companies without a physical presence in the UK/EU usually answer no, even if they make a few sales to UK/EU. Maybe they should reconsider their answers where they accept foreign currency and use Facebook or Google Analytics for targeted advertising.
Mark Your Calendars: Compliance With CPRA Begins New Year’s Day 2022
In this guest post for AdExchanger, our Co-Founder and CEO Richy Glassberg highlights some of the critical changes coming to CCPA that you should be prepared for.
Ketch and SafeGuard Privacy Announce Partnership
Two industry innovators will join together to offer best-in-breed solutions for Programmatic Privacy™ and program management SAN FRANCISCO, CA — (October 20, 2021) Ketch, the next generation data control platform [...]
Privacy Starts Here! Our free virtual roundtable returns this week
Privacy Thursdays are back! This month, we are joined by special guest, Douglas Wood, Senior Counsel at Reed Smith. No one constituency in an enterprise can [...]
Talking Privacy at Best of the West
Richy Glassberg and Wayne Matus joined Sheila Colclasure, Global Chief Digital Responsibility and Public Policy Officer of Kinesso, and Jules Polonetsky, CEO of Future of Privacy Forum, at Best of the West to share insights on data privacy and compliance.
Am I My Ad Vendor’s Keeper?
Our Co-Founders discuss the implications of the recent fine on Vodafone and what it means for companies that need to manage their vendor's compliance.
Introducing Thirsty Thursdays: Drinking From The Privacy Firehose
Join us for Thirsty Thursdays: Drinking From The Privacy Firehose! Introducing "Thirsty Thursdays: Drinking From The Privacy Firehose", a new monthly “drop-in” virtual meeting where we [...]
IAPP: Apple’s ATT rollout presents uncertain path for adtech
Our Co-Founders, Richy Glassberg and Wayne Matus, share some insights into Apple's App Tracking Transparency (ATT) with the IAPP.
CCPA Vendor Management: Potential Gaps in Your Privacy Compliance Strategy
Both GDPR and CCPA make it clear that an organization is fully responsible for the vendors within their supply chains, and the onus is on those organizations to ensure compliance. Most companies don’t realize the significance of this mandate and have taken little to no steps to ensure compliance.
Privacy and Identity in Digital Marketing-A Conversation with Richy Glassberg
Our Co-Founder & CEO, Richy Glassberg, joined the Plus Up podcast for a conversation about privacy in digital advertising.
The Digital Advertising Sector’s Original Sin, And How We Must Atone
If you’ve been in the digital advertising sphere for a while you know I’m bullish on the internet. As one of the founders of the IAB and early vice chair, I’ve championed the web as the best advertising medium – period. But as I look back on the past 25 years, I’m struck by a harsh reality: We’ve missed the mark.
Two Frequently Asked Questions About California Privacy
Recently, two questions are being asked repeatedly about California Privacy Law compliance. 1) Should I wait for the CCPA Regulations to be final before doing any further work? and 2) Is it worth the additional effort now, considering a new California ballot initiative is going to change the law anyway? Here's what we think.