PrivacySignal
News

With new data privacy, security laws in 21 states, dealers target compliance buildout

Auto Finance News · · International · Privacy Law

Twenty-one states now have data privacy or security laws on the books, and auto dealers are moving to build out compliance programs in response. The wave of state-level legislation is creating a patchwork of requirements that dealers operating across multiple states must now navigate.

Why this matters: Car dealers collect a lot about you. Income, credit history, insurance, driving habits, sometimes your Social Security number. For years, the rules around what they could do with that data were loose. Now 21 states have something on the books, and dealers are being pushed to actually build systems that protect it. The catch is that patchwork state laws create uneven protection depending on where you live. Someone in one state gets real rights over their data. Someone in the next state over may not. That gap is a problem worth watching.

Who should care: Lawyers · Compliance · General readers · Privacy officers · Policy

This summary is AI-assisted and may contain errors. It is an original briefing to help you gauge significance quickly — not a reproduction of the source. Always read the linked original before relying on it. See our methodology.

Analysis

All analysis →

Weekly Editorial Analysis from Experts and Editors

Deep Signal · Part I of III

The Algorithm Said So

Federal rulemakers are deciding what to do when artificial intelligence produces the kind of conclusion that once required an expert. They disagree about how to regulate it. They also disagree about whether the problem has arrived.

· 10 min read Read →

Related stories

News
Inside Privacy (Covington) · · International

CISA Submits Final CIRCIA Rule for OMB Review

On October 1, 2026, the U.S. Cybersecurity and Infrastructure Security Agency (“CISA”) submitted a draft of the Final Rule implementing the Cyber Incident Reporting for Critical Infrastructure Act of 2022 (“CIRCIA”) to the Office of Information and Regulatory Affairs (“OIRA”) for interagency review, marking one of the final steps before the Final Rule will be... Continue Reading…

Who should care: Lawyers · Compliance

#regulation Read original →
News
WIRED — AI · · International

Inside Elon Musk’s Midterm Spending Spree

This week on “Uncanny Valley,” we discuss where Elon Musk’s PAC is spending millions, the latest ideology Trump claims is dangerous, and the backlash against the designer behind Muse’s logo.

News
EFF — Deeplinks · · International

When No ID Means No Internet: Age Verification and the Right to Access Information

This post was co-authored by Sheila B. Lalwani, a doctorate student and recent COMPASS Fellow hosted by EFF. Age verification proposals are often presented as a simple tradeoff: sacrifice a little privacy to better safeguard children online. But that framing overlooks a more fundamental question. What happens to people who cannot verify their age at all? This is particularly a problem when users are required to prove their age with identity documents. Age-related restrictions are developing quickly around the world. While they differ radically across jurisdictions, in the past year, we’ve wit…

Who should care: General readers · Privacy officers · Policy