Key developments
California data-broker deletions begin after August deadline
ABC7 News's Luz Pena reported that more than 300,000 Californians are expected to have personal data deleted as California's Delete Act reaches its first enforcement deadline on Aug. 1. Nearly 600 data brokers were required to disclose their registries and collected data types, and brokers must delete newly collected information every 45 days after the initial round. Enforcement sits with the California Privacy Protection Agency and the state attorney general, with no cap on fines for violations.
Why it matters
The deadline turns California's broker-deletion regime from a rights framework into an operational compliance test for hundreds of data brokers.
Sources & driving stories
ABC7 NEWS · Luz Pena
ABC7 News coverageMozilla finds Stardust sharing reproductive health data
TechCrunch's Zack Whittaker reported that Mozilla research found period-tracking app Stardust shared sensitive health information with analytics firm RudderStack. The data included birthdates, birth control type, reproductive goals and specific symptoms, tied to a unique identifier rather than a direct name. Stardust said RudderStack is contractually barred from selling or using the data for its own purposes, but TechCrunch noted both companies are U.S.-based and could face law-enforcement demands.
Why it matters
The finding underscores the privacy risk of routing reproductive health data through analytics vendors even when companies rely on pseudonymous identifiers and contractual limits.
Sources & driving stories
TECHCRUNCH · Zack Whittaker
TechCrunch coverageKSU Flock cameras and microphones detailed
KSU ALPRs reported that Kennesaw State University Police Department has deployed at least 49 Flock Safety automated license plate reader cameras across campus. The system reportedly gives KSU police immediate, warrantless access to at least 30 days of vehicle-location data and allows queries across Flock-connected agencies, including departments more than 2,000 miles away. The same report says KSU has also installed Flock Safety Raven AI microphones on both campuses, devices originally marketed as gunshot detectors and later expanded into distress-detection tools with voice-recognition capabilities.
Why it matters
The reporting points to a campus surveillance system combining vehicle-location tracking, interagency data access and AI-enabled audio monitoring with limited public explanation.
Sources & driving stories
KSU ALPRS
KSU ALPRs coverageWorth noting
WORTH NOTING
Healthcare breach fallout widens
WPRI reported that the J. Arthur Trudeau Memorial Center disclosed theft of files containing PII and PHI, while Claim Depot's Nicole Aljets reported a $549,000 DATS breach settlement and Data Breach Rights reported a Casper Orthopedics ransomware-linked patient-record exposure.
WORTH NOTING
South Korea eyes tougher privacy penalties
Korea JoongAng Daily reported that President Lee Jae Myung called for substantially higher penalties for personal-information leaks or misuse and discussed AI-generated-content labels and deepfake-crime countermeasures at a July 16 Seoul briefing.
WORTH NOTING
Google Vids adds selfie voice avatars
CNET's Aaron Pruner reported that Google Vids is adding personal avatars generated from a submitted selfie and voice recording, with invisible SynthID watermarking and account-linked regional 18-plus limits.
Still unclear
OPEN QUESTION
Can California enforce deletion beyond registered brokers?
ABC7 News reported that nearly 600 brokers disclosed registries, but experts noted California's approach may reach brokers that do not register in the state.
OPEN QUESTION
How auditable are cross-agency ALPR searches?
The KSU reporting describes broad Flock-network access and limited public explanation, making query oversight, sharing boundaries and misuse detection central unresolved issues.
