In the US, California, Colorado, and a few other states have passed similar privacy laws. What’s super-unclear is just how thoroughly it’ll be enforced. A whole lot of GDPR compliance is cargo-cult law; do what others seem to be doing and hope it’s enough. For ad biz, it’s appear to do what you think others are doing, and hope it’s enough, while still mostly business as usual.
There have been a number of fines issued, as you say, and I don’t know of any big ones actually paid. There’s a lot of arguing and appealing before we really know what’s a hard requirement, what’s a requirement only if you’re in the crosshairs, and what’s a pretty flexible guideline that won’t matter unless you’re both big enough to notice AND egregious enough in violation.
In the US, California, Colorado, and a few other states have passed similar privacy laws. What’s super-unclear is just how thoroughly it’ll be enforced. A whole lot of GDPR compliance is cargo-cult law; do what others seem to be doing and hope it’s enough. For ad biz, it’s appear to do what you think others are doing, and hope it’s enough, while still mostly business as usual.
There have been a number of fines issued, as you say, and I don’t know of any big ones actually paid. There’s a lot of arguing and appealing before we really know what’s a hard requirement, what’s a requirement only if you’re in the crosshairs, and what’s a pretty flexible guideline that won’t matter unless you’re both big enough to notice AND egregious enough in violation.
I’d bet on the industry surviving.