Hello all, and happy Juneteenth!
It’s June 19th, the date marking the end of slavery in the US way back in 1865. To celebrate, the Osano staff is out of the office today. I've still got a jam-packed privacy newsletter for you, but I'll leave this intro light and breezy—just like this (hopefully) beautiful June day.
Best,
Arlo
Highlights from Osano
New From Osano
On-Demand: Privacy for Risk Management: Bridge the Business, Technology and Compliance Gaps
If you're in risk management, you sit at the intersection of privacy, security, and compliance. It's a juggling act, and data privacy is just one ball in the air. Learn how you can make data privacy management a cornerstone of your risk management strategy and one less thing to worry about in our on-demand webinar.
In Case You Missed It...
Podcast: TAKE IT DOWN: Online Abuse and Harassment with Carrie Goldberg of C.A. Goldberg, PLLC
Victims’ rights activist and attorney Carrie Goldberg sits down with Osano CEO Arlo Gilbert on this episode of the Privacy Insider Podcast. In this episode, they talk about the gap between current legislation and the harms associated with privacy violations like revenge porn, doxxing, online harassment, and more.
Upcoming Webinars and Events
In-Person Event: Women in Security & Risk Dinner
Will you be in the Dallas area this June 25th? Are you a woman in security, risk, or who has otherwise had privacy dropped on your plate? This in-person event is a chance to scoot privacy over and have some delicious food dropped on your plate instead. Don’t miss this exclusive opportunity to connect with other women pursuing the same professional mission you are.
Save Your Seat | June 25th, Dallas, TX
Top Privacy Stories of the Week
Colorado’s New Biometrics Rules Go into Effect July 1
As part of a package of Colorado Privacy Act (CPA) amendments enacted earlier this year, businesses subject to the CPA will have to adopt a written policy relating to biometrics, including a retention schedule, an incident response plan, and deletion requirements. With certain exceptions, businesses must make this written policy available to the public.
California AI Working Group Releases the California Report on Frontier AI Policy
Recently, Governor Newsom released a new report from a group of world-leading AI academics and experts, convened at the Governor’s request last September to offer a policy framework for the responsible, ethical, and safe use of AI.
EU Strikes Deal to Facilitate Cross-Border GDPR Enforcement
The European Parliament and the Council of the European Union reached a provisional agreement on a long-awaited regulation aimed at improving cooperation between national-level data protection authorities when enforcing cross-border cases under the General Data Protection Regulation. The agreement also includes clarification of relevant procedures and rights as well as "fleshing out of earlier provisions" related to cooperation and dispute resolution procedures.
California Senate Unanimously Passes Bill That Would Limit CIPA Data Privacy
Recently, the California Senate unanimously passed Senate Bill 690 (SB 690), which would amend the California Invasion of Privacy Act (CIPA). The bill would provide a “commercial business purpose” exception to CIPA and would change the landscape of data privacy litigation in the state, preventing what many consider to be “abusive lawsuits.” CIPA was originally intended to prevent unauthorized wiretapping, but it has since been repurposed to file lawsuits against businesses using digital technologies like session replay, chatbots, cookies, and pixels.
US Officials Question 23andMe's Ability to Navigate Data Protection During Bankruptcy
Genetic testing company 23andMe's bankruptcy has unsettled users and officials, raising crucial concerns about what will happen to the sensitive biometric data collected by the company. Despite recently announcing biotech company Regeneron would purchase 23andMe, the company pulled back its bid after 23andMe co-founder and former CEO Anne Wojcicki’s nonprofit TTAM Research Institute offered USD305 million. Meanwhile, critics continue to express concern over the fate of the company’s trove of sensitive data.
Like what you hear from the Privacy Insider newsletter?
There's more to explore:
🎙️The Privacy Insider Podcast
We go deeper into additional privacy topics with incredible guests monthly. Available on Spotify or Apple.
📖 The Privacy Insider: How to Embrace Data Privacy and Join the Next Wave of Trusted Brands
The book inspired by this newsletter: Osano CEO, Arlo Gilbert, covers the history of data privacy and how companies can start building a privacy program from the ground up. More details here.
If you’re interested in working at Osano, check out our Careers page!

Arlo Gilbert
Arlo Gilbert
Arlo Gilbert is the CIO & co-founder of Osano. An Austin, Texas native, he has been building software companies for more than 25 years in categories including telecom, payments, procurement, and compliance. In 2005 Arlo invented voice commerce, he has testified before congress on technology issues, and is a frequent speaker on data privacy rights.