Hello all, and happy Thursday!
For those of you who attended last week’s Global Privacy Summit (GPS) in DC, I hope you’re all recovering and resting and digesting all the excellent takeaways and knowledge. The Osano team certainly is!
While everyone was hobnobbing in DC, it would have been easy to miss an intriguing pattern taking shape on the opposite side of the country—the California Privacy Protection Agency (CPPA) is hard at work making friends.
The agency recently announced a collaboration with the UK Information Commissioner’s Office (ICO), which follows similar announcements for the Republic of Korea’s Personal Information Protection Commission (PIPC) and the French Commission Nationale de l’Informatique et des Libertés (CNIL). These international buddies are supplemented by the CPPA’s take on the Justice League—the Consortium of Privacy Regulators, which consists of US privacy regulators.
What is the CPPA going to do with all these friends? Could it be that the agency is setting its sights on international organizations with complex data transfer practices? Is it learning and implementing the best regulatory and investigatory practices that the world has to offer? Is it just looking for somebody to chat with from time to time?
Whatever the overarching purpose, it doesn’t look like the CPPA plans to work in a silo.
Best,
Arlo
Highlights from Osano
In Case You Missed It...
Blog: How to Shift Data Privacy Left
You’ve heard of tech debt—but what about privacy debt? As it turns out, shifting privacy management left can be just as transformative as shifting testing and QA left. Find out what it means to shift data privacy left, why do it, and how to go about it here.
Podcast: The Elephant in the Chatroom: Preserving Privacy and Social Connection with Christine Rosen of the American Enterprise Institute
The shift towards virtual third spaces—like social media and online platforms—has transformed how we connect and share personal data. This evolution raises important questions about privacy, community building and the future of human interaction. Christine Rosen, Fellow of The American Enterprise Institute, explores these themes in her work.
Upcoming Webinars and Events
Monthly Meet-Up: Out of the Spotlight: Celebrities, Influencers, & Data Privacy
As society grows increasingly aware of the costs of digital exposure, the conversation around data privacy is shifting—raising timely legal and ethical questions about what it means to live in public. This meetup will explore the complex intersection of fame, influence, and data privacy—unpacking what we willingly trade for convenience and connection, and what gets taken without consent.
Save Your Seat | May 14th
Webinar: The Reluctant Privacy Pro: Shortcuts and Tips for Marketing, Security, IT & More
If you are in marketing, IT, HR, or any other function that handles personal or sensitive data, you may find yourself managing data privacy on top of your regular duties. How can you do right by data privacy, reserve the time and energy for your core work, and do it all without losing your mind? Find out how in our upcoming webinar.
Save Your Seat | May 15th
Webinar: The Strategic Privacy Pro: How to Be a Partner, not a Blocker
Legal and compliance experts are used to being advisors—but modern privacy compliance doesn’t just require you to understand and keep up with regulations (even though that’s a full-time job in and of itself). It requires you to provide guidance on how to translate that regulatory knowledge into practice. Join this webinar to learn how to avoid being a bottleneck and become a valuable business and privacy enabler.
Save Your Seat | May 29th
Top Privacy Stories of the Week
Perplexity CEO Says Its Browser Will Track Everything Users Do Online to Sell ‘Hyper Personalized’ Ads
On a recent podcast interview, Perplexity CEO Aravind Srinivas said that one reason Perplexity is building its own browser is to collect data on everything users do outside of its own app so it can sell premium ads. Most people use the Perplexity AI chatbot for work-related queries. A browser that tracks user behavior will enable greater tracking and ad-targeting in a broader context.
The CPPA and UK ICO Sign Declaration of Cooperation to Enhance Privacy Protections
The California Privacy Protection Agency (CPPA) and the UK Information Commissioner's Office (ICO) have signed a declaration of cooperation. This declaration allows the agencies to facilitate joint research and education; share best practices, knowledge, and investigative methods; convene meetings with staff members; share relevant experiences; and develop appropriate mechanisms for mutual collaboration.
Meta Launches a Stand-Alone AI App to Compete with ChatGPT
After integrating Meta AI into WhatsApp, Instagram, Facebook, and Messenger, Meta is rolling out a stand-alone AI app. The app is trained on years of data from users on Facebook and Instagram. Furthermore, users can opt in to permit the app to share AI queries publicly.
CIPA Reform Bill Introduced
California State Senator Anna M. Caballero recently introduced Senate Bill 690 (S.B. 690), which aims to curb “abusive lawsuits” under the California Invasion of Privacy Act (CIPA) based on the use of cookies and other online technologies. Over the past few years, the plaintiffs’ bar has leveraged CIPA to sue businesses based on their use of tracking technologies on their websites. If enacted, S.B. 690 would exempt online technologies used for a “commercial business purpose” from wiretapping and pen register/trap-and-trace liability.
Podcast: Global Privacy Summit (GPS) Takeaways from Nilay Patel and FTC commissioners Rebecca Slaughter and Alvaro Bedoya
At last week’s GPS event, Nilay Patel of the Verge’s Decoder podcast interviewed US FTC Commissioners Alvaro Bedoya and Rebecca Slaughter, who were recently removed from the FTC. The conversation centered around the legality of their removal as well as current FTC actions.
Like what you hear from the Privacy Insider newsletter?
There's more to explore:
🎙️The Privacy Insider Podcast
We go deeper into additional privacy topics with incredible guests monthly. Available on Spotify or Apple.
📖 The Privacy Insider: How to Embrace Data Privacy and Join the Next Wave of Trusted Brands
The book inspired by this newsletter: Osano CEO, Arlo Gilbert, covers the history of data privacy and how companies can start building a privacy program from the ground up. More details here.
If you’re interested in working at Osano, check out our Careers page!

Arlo Gilbert
Arlo Gilbert
Arlo Gilbert is the CEO & co-founder of Osano. An Austin, Texas native, he has been building software companies for more than 25 years in categories including telecom, payments, procurement, and compliance. In 2005 Arlo invented voice commerce, he has testified before congress on technology issues, and is a frequent speaker on data privacy rights.