Consumer Reports Finds Widespread Non-Compliance with Data Privacy Laws

A recent analysis by Consumer Reports has revealed that many companies are not complying with data privacy opt-out requests mandated by laws in states like California and Colorado. Testers used a browser tool to send automatic data opt-out signals while browsing 40 popular websites. Despite these legal requests, the testers observed continued targeted ads, suggesting companies such as Ford, Macy’s, and American Eagle may still be selling or sharing personal data. While some companies claim compliance, strong evidence indicates widespread non-adherence. The research highlights significant flaws in current privacy laws, which are often shaped by corporate lobbying, making them hard to enforce. State attorneys general are tasked with enforcement, but few actions have been taken. Consumer Reports advocates for stronger, more enforceable privacy laws, such as Illinois’s biometric law and Maryland’s 2024 law restricting data collection and targeted ads to minors. Despite limitations in the findings, the report emphasizes the importance of exercising one’s legal privacy rights to encourage policy enforcement and reform.​

Source: Consumer Reports – New Report: Many Companies May Be Ignoring Opt-Out Requests Under State Privacy Laws