Last Update: 08/01/2026 at 1:34 PM EST

Mid-day Briefing: Privacy

Friday, July 17, 2026 · 11:49 AM EDT

Key developments

ABC7 NEWS

California data-broker deletions begin after August deadline

ABC7 News's Luz Pena reported that more than 300,000 Californians are expected to have personal data deleted as California's Delete Act reaches its first enforcement deadline on Aug. 1. Nearly 600 data brokers were required to disclose their registries and collected data types, and brokers must delete newly collected information every 45 days after the initial round. Enforcement sits with the California Privacy Protection Agency and the state attorney general, with no cap on fines for violations.

Why it matters

The deadline turns California's broker-deletion regime from a rights framework into an operational compliance test for hundreds of data brokers.

Sources & driving stories

ABC7 NEWS · Luz Pena

ABC7 News coverage
TECHCRUNCH

Mozilla finds Stardust sharing reproductive health data

TechCrunch's Zack Whittaker reported that Mozilla research found period-tracking app Stardust shared sensitive health information with analytics firm RudderStack. The data included birthdates, birth control type, reproductive goals and specific symptoms, tied to a unique identifier rather than a direct name. Stardust said RudderStack is contractually barred from selling or using the data for its own purposes, but TechCrunch noted both companies are U.S.-based and could face law-enforcement demands.

Why it matters

The finding underscores the privacy risk of routing reproductive health data through analytics vendors even when companies rely on pseudonymous identifiers and contractual limits.

Sources & driving stories

TECHCRUNCH · Zack Whittaker

TechCrunch coverage
KSU ALPRS

KSU Flock cameras and microphones detailed

KSU ALPRs reported that Kennesaw State University Police Department has deployed at least 49 Flock Safety automated license plate reader cameras across campus. The system reportedly gives KSU police immediate, warrantless access to at least 30 days of vehicle-location data and allows queries across Flock-connected agencies, including departments more than 2,000 miles away. The same report says KSU has also installed Flock Safety Raven AI microphones on both campuses, devices originally marketed as gunshot detectors and later expanded into distress-detection tools with voice-recognition capabilities.

Why it matters

The reporting points to a campus surveillance system combining vehicle-location tracking, interagency data access and AI-enabled audio monitoring with limited public explanation.

Sources & driving stories

Worth noting

WORTH NOTING

Healthcare breach fallout widens

WPRI reported that the J. Arthur Trudeau Memorial Center disclosed theft of files containing PII and PHI, while Claim Depot's Nicole Aljets reported a $549,000 DATS breach settlement and Data Breach Rights reported a Casper Orthopedics ransomware-linked patient-record exposure.

WORTH NOTING

South Korea eyes tougher privacy penalties

Korea JoongAng Daily reported that President Lee Jae Myung called for substantially higher penalties for personal-information leaks or misuse and discussed AI-generated-content labels and deepfake-crime countermeasures at a July 16 Seoul briefing.

WORTH NOTING

Google Vids adds selfie voice avatars

CNET's Aaron Pruner reported that Google Vids is adding personal avatars generated from a submitted selfie and voice recording, with invisible SynthID watermarking and account-linked regional 18-plus limits.

Still unclear

OPEN QUESTION

Can California enforce deletion beyond registered brokers?

ABC7 News reported that nearly 600 brokers disclosed registries, but experts noted California's approach may reach brokers that do not register in the state.

OPEN QUESTION

How auditable are cross-agency ALPR searches?

The KSU reporting describes broad Flock-network access and limited public explanation, making query oversight, sharing boundaries and misuse detection central unresolved issues.