Observed Signal · Mar 3, 2025 · Policy Update · Source: CMSWire · Impact: 3/5 · Sentiment: Neutral
Privacy Laws in 2025: Global Expansion, US Patchwork
As of early 2025, 144 countries have enacted data privacy laws, covering roughly 82% of the global population. The GDPR remains the most influential regulation, while the EU's Digital Services Act (DSA) and Digital Markets Act (DMA) impose new advertising transparency and platform accountability rules. WhatsApp has been designated as a Very Large Online Platform under the DSA. In the US, the federal ADPPA remains stalled, leaving a fragmented state-by-state approach. New state laws took effect in Delaware, Iowa, Nebraska, New Hampshire, and New Jersey in January 2025, with more coming later in the year. These regulations complicate compliance for advertisers and publishers, and increasingly scrutinize AI-driven personalization, pushing businesses to adopt stricter privacy standards and ethical AI practices.
Privacy regulations fundamentally affect advertising targeting and data usage. While this article is a broad overview rather than a single industry-shifting event, it consolidates key 2025 regulatory changes that directly impact AdTech operations and compliance strategies.
Track PwC Signals & Market Shifts in Real-Time
Polaris7 autonomous intelligence agents track regulatory filings, primary sources, executive changes, and deal flow 24/7. Create your free Explorer workspace to monitor these entities.
Key Takeaways & Evidence Grounding
- 82% of the world's population is covered under national data privacy laws across 144 countries.
- The GDPR continues to be the most influential privacy regulation globally.
- The EU DSA and DMA mandate clearer ad labeling, ban targeted ads to children, and curb anti-competitive practices.
- The US ADPPA remains pending, with no federal privacy law enacted as of March 2025.
- Delaware, Iowa, Nebraska, New Hampshire, and New Jersey privacy laws took effect in January 2025.
- WhatsApp was designated as a Very Large Online Platform (VLOP) under the DSA in February 2025.
Connected Companies & Entities
4 Entities mapped“According to PwC's 2024 Voice of the Consumer Survey, 83% of respondents consider data protection a top priority....”
“Cisco's 2024 Consumer Privacy Survey revealed that 67% of consumers have reviewed or updated their privacy settings....”
“A February 2023 Vericast survey highlighted consumer concerns about control over personal data....”
“WhatsApp surpassed the 45-million-user threshold and was designated as a VLOP under the DSA....”
Related Market Signals & Shifts
Recent verified developments and strategic activity across this market segment.
Getting Fired, Risk and Ambition at Changemakers
The Marketing Society's Changemakers conference explored career resilience, ambition, and failure. Speakers included Laura Brown, former InStyle EIC, who discussed her layoff and the importance of personal equity separate from job titles. Sofia Hernandez, ex-TikTok executive, talked about leaving a high-powered role for health reasons and the evaporation of corporate status. Wendy Kula, now CMO of Saucony, took a year off after Nike restructure to combat burnout. Maryam Banikarim, former Hyatt CMO, stepped away at 50 to prioritize family. Sam Tomlinson, CEO of MediaSense, advocated for a 'learn fast' culture and criticized corporate risk elimination over risk management. The event focused on defining success beyond big titles and embracing failure as a growth path.
Anthropic Launches Cyber Mission to Secure Critical Infrastructure
Anthropic has announced the Anthropic Cyber Mission, a long-term initiative to support cybersecurity defenders. The program includes the Critical Infrastructure Defense Program (CIDP), which provides frontier Claude models, on-site engineers, and threat research to partners securing operational technology in power grids, water systems, and transportation. Founding partners include Accenture, Booz Allen, CrowdStrike, Deloitte, Dragos, Hitachi, Insane Cyber, Nozomi Networks, Palo Alto Networks, PwC, and Rockwell Automation. Additionally, Anthropic launched OSS Scanner, a free opt-in service that scans open-source projects for vulnerabilities using its most capable models, offering proof-of-concept exploits and suggested fixes. The initiative builds on lessons from Project Glasswing and expands on the Cyber Verification Program. Anthropic aims to accelerate vulnerability fixes and explore secure coding practices, with a forecast that AI will favor defense within two years.
AI Drives Cyber Spending; Firms See Risks from Autonomous Systems
According to PwC's 2027 Global Digital Trust Insights Survey, 84% of security and finance executives expect their cyber budgets to increase in the next twelve months, up from 78% last year. AI is a top budget priority for 58% of security leaders, yet only 39% have fully formalized continuity plans that address cyber risks. Attacks on AI systems are the top unprepared threat for 50% of respondents, ahead of cloud threats (40%), third-party attacks (34%), and ransomware (33%). Only 22% would allow AI agents to make autonomous decisions in cyber defense, citing reliability, accountability, and skill gaps. Notably, only 47% say cyber risks are regularly on the board agenda. To mitigate, companies are adopting multi-cloud strategies (54%), regional data redundancy (47%), and improved vendor risk management (50%). The survey covers nearly 4,000 executives across 71 countries.
Track Real-Time Market Signals & Shifts
Set up custom watchlists to receive automated, evidence-grounded executive digests whenever material signals or shifts occur across your tracked landscape.