...
This standardised digital privacy transparency, records and receipts bring assurance to accountability infrastructure, which has been lacking regulated transparency and consent, up until 2024, when the three required things have happened. 1.
Feb 17, Digital Services Act came into force (consent receipt was originally in that Act),
...
March 7, and the CJEU Ruled on the commercial Transparency and Consent Framework, (
...
I Agree' check boxes and buttons for plain text privacy policies, effectively contracting privacy, without consent.
...
Regulated -
...
Digital Market Act came into force March 8,
All of this is a pre-cursor to the Convention 108+ comes into effect internationally, which is what we have been focused on here in the ANCR WG for quite sometime. 108+ comes into effect as the defacto international adequacy standard legally and baseline for compliance for standards.
\
All of these apply greater legal scope and definition to what has already been defined and understood as notice and consent legally, but ignored by industry.
In terms of international gold standard the Quebec, Canada law came into force and in effect enforcing the requirements to provide a consent receipt, not only when requested but in Quebec.
These regulations started to officially come into force in Aug in the EU with DPA starting to fine companies in 2023.
Regulated -
March 7, 2024 - CJEU Judgment in Case C‑604/22 (IAB TCF)
...
What to expect next:
The case goes back to the Belgian Courts and will almost definitely result in the Belgian DPA's enforcement being upheld and further action against any company that continues to use the TCF system and new actions against the thousands of data brokers behind OpenRTB.
https://sd.iso.org/documents/ui/#!/doc/182c269a-8346-41ec-a4d1-b2bd9ced7a64