Read the press release from the Oregon DOJ: www.doj.state.or.us/media-home/n...

Also “informed” - but not necessarily “meaningful”

2/ NY AG's stance is clear: "Do what you say, say what you do." Generic privacy policy templates from software providers can make you a target. Customize your policies to match actual practices.

1/ Avoid absolute statements in privacy policies. A major company claimed phone numbers were "only for security" but used them differently. Follow industry trends and stick to what you actually do.

Managing vendor contracts is challenging. #IAB aworking on standardization through #MSPA. Meanwhile, map your data flows and understand downstream pixel implications.

#PrivacyOps #DataManagement

Cross-context behavioral advertising needs careful third-party tracking disclosure. Get ahead by reaching out to vendors now about listing them as third parties. Some may push back - plan accordingly. #AdTech #StatePrivacy

Different states = different requirements. #HomeDepot initially aimed for uniform rights across states but had to adapt some state-specific approaches. One size doesn't fit all in privacy compliance.

Oregon's privacy law requires specific third-party disclosure lists, not just categories. 45 days to respond to access requests. Consider blackout periods (like holidays) in your compliance planning.