Hello all, and happy Thursday!
Google continues to face blows to its digital empire, with a federal judge handing down yet another antitrust decision against the search giant. This makes the third such decision against Google. For those keeping score, Google’s search engine, advertising, and app store businesses have now been deemed illegal monopolies.
It's not going to happen tomorrow, but it seems unlikely that Google will retain control over its various businesses as the years go on.
What does this have to do with data privacy? Well, that’s sort of like asking what the sea has to do with fish. The internet looks the way it does in large part because of Google’s (and other Big Tech company’s) influence—acceptable and unacceptable data management practices alike take place in this context. A lot of current best practices in data privacy are designed to work with Google’s systems. What will data privacy look like when there are more ad tech, app store, and search competitors?
Best,
Arlo
Highlights from Osano
What's New From Osano
Blog: How to Shift Data Privacy Left
You’ve heard of tech debt—but what about privacy debt? As it turns out, shifting privacy management left can be just as transformative as shifting testing and QA left. Find out what it means to shift data privacy left, why do it, and how to go about it here.
Podcast: The Elephant in the Chatroom: Preserving Privacy and Social Connection with Christine Rosen of the American Enterprise Institute
The shift towards virtual third spaces—like social media and online platforms—has transformed how we connect and share personal data. This evolution raises important questions about privacy, community building and the future of human interaction. Christine Rosen, Fellow of The American Enterprise Institute, explores these themes in her work.
In Case You Missed It...
Blog: AI Risk Management Frameworks to Manage Risks in Artificial Intelligence Systems
AI—it's everyone’s favorite shiny new toy, but it doesn’t come without risk. Find out how to identify, minimize, and mitigate AI risk in our blog.
On-Demand: The Privacy Pro Survival Summit
Miss our recent summit? No worries—you can watch the session recordings on demand. If you registered but couldn’t attend, you can access the recordings via your registration email. If you never had the chance to register, use the link below to access the summit recordings.
Upcoming Webinars and Events
Monthly Meet-Up: Out of the Spotlight: Celebrities, Influencers, & Data Privacy
As society grows increasingly aware of the costs of digital exposure, the conversation around data privacy is shifting—raising timely legal and ethical questions about what it means to live in public. This meetup will explore the complex intersection of fame, influence, and data privacy—unpacking what we willingly trade for convenience and connection, and what gets taken without consent.
Save Your Seat | May 14th
Webinar: The Reluctant Privacy Pro: Shortcuts and Tips for Marketing, Security, IT & More
If you are in marketing, IT, HR, or any other function that handles personal or sensitive data, you may find yourself managing data privacy on top of your regular duties. How can you do right by data privacy, reserve the time and energy for your core work, and do it all without losing your mind? Find out how in our upcoming webinar.
Save Your Seat | May 15th
Top Privacy Stories of the Week
Google Is an Online Advertising Monopoly, Judge Rules
Recently, a federal judge in Virginia ruled that Google has illegally built “monopoly power” with its web advertising business. The ruling follows two similar decisions finding Google monopolized its online search and app store, respectively. Taken together, the trio of decisions highlights the breadth of trouble Google faces, raising the prospect of sweeping penalties that could reshape multiple aspects of its business, though ongoing and expected appeals will likely take years to play out.
23andMe Bankruptcy Under Congressional Investigation for Customer Data
The House Committee on Energy and Commerce sent a letter to 23andMe expressing concern that its genetic data is “at risk of being compromised.” The genetic testing company filed for Chapter 11 bankruptcy protection in March, and its assets are up for sale. The congressmen said there are reports that some users have had trouble deleting their data from the company’s site.
Oregonians Register Alarm Around Use of Personal Data, Including by DOGE in First Quarter of 2025
The Oregon Department of Justice’s Privacy Unit is reporting a big spike in the first three months of this year in complaints about the Department of Government Efficiency (DOGE). Specifically, Oregonians are concerned about how government entities are handling their personal information. As of March 31, 2025, the unit had received more than 250 complaints about DOGE.
What Does the DOJ Final Rule on Protecting Americans’ Sensitive Data from Foreign Adversaries Really Mean for Global Business?
The US Department of Justice’s final rule on protecting Americans’ sensitive data from foreign adversaries is now in effect. The rule mixes elements of US sanctions, foreign investment, and cybersecurity and data privacy regulations, but its concepts, definitions and objectives do not always align with those programs. As a result, the final rule is difficult to parse for legal and privacy professionals.
FTC Publishes Amendments to COPPA Rule
On April 22, 2025, the Federal Trade Commission (FTC) published the finalized amendments to the Children’s Online Privacy Protection Rule (COPPA Rule) that would impose additional restrictions on website and online service operators that collect personal information from children under the age of thirteen. The amendments will become effective on June 23, 2025.
Like what you hear from the Privacy Insider newsletter?
There's more to explore:
🎙️The Privacy Insider Podcast
We go deeper into additional privacy topics with incredible guests monthly. Available on Spotify or Apple.
📖 The Privacy Insider: How to Embrace Data Privacy and Join the Next Wave of Trusted Brands
The book inspired by this newsletter: Osano CEO, Arlo Gilbert, covers the history of data privacy and how companies can start building a privacy program from the ground up. More details here.
If you’re interested in working at Osano, check out our Careers page!

Arlo Gilbert
Arlo Gilbert
Arlo Gilbert is the CEO & co-founder of Osano. An Austin, Texas native, he has been building software companies for more than 25 years in categories including telecom, payments, procurement, and compliance. In 2005 Arlo invented voice commerce, he has testified before congress on technology issues, and is a frequent speaker on data privacy rights.