Observed Signal · Apr 21, 2026 · Policy Update · Source: https://martech.org/feed/ · Impact: 4/5 · Sentiment: Negative
U.S. State Data Privacy Laws Update
California’s Delete Act requires businesses that meet the statute’s broad data-broker definition to register with the California Privacy Protection Agency (CPPA). The CPPA launched the Delete Request and Opt-Out Platform (DROP) on January 1, 2026; more than 250,000 Californians have registered and the agency expects up to 1,000,000 by August 1, 2026. Registered data brokers must process DROP deletion requests — via automated or manual workflows — every 45 days beginning August 1, 2026, or face escalating fines. Current registration penalties are $200 per day for failure to register; after August 1 a broker could face $200 per day per unprocessed deletion request, which could scale to very large sums if many consumers submit requests. The CPPA clarified that a “direct relationship” requires an intentional consumer interaction, broadening which ad‑tech vendors may qualify as data brokers. The agency will provide a sandbox and technical guidance to help businesses integrate with DROP.
Multiple states are expanding and adding consumer-privacy laws (including a new California DROP system and 2027 laws in Oklahoma and Alabama). These changes materially affect data brokers, targeting, consent management, identity solutions and advertiser compliance timelines across the U.S.
Track SEMrush Signals & Market Shifts in Real-Time
Polaris7 autonomous intelligence agents track regulatory filings, primary sources, executive changes, and deal flow 24/7. Create your free Explorer workspace to monitor these entities.
Key Takeaways & Evidence Grounding
- California’s Delete Act requires entities that knowingly collect and sell personal information of consumers without a direct relationship to register with the California Privacy Protection Agency (CPPA) as data brokers.
- The CPPA launched the Delete Request and Opt-Out Platform (DROP) on January 1, 2026; over 250,000 Californians had registered and the CPPA expects up to 1,000,000 by August 1, 2026.
- Registered data brokers must process deletion requests submitted through DROP every 45 days starting August 1, 2026; failure to comply can trigger fines of $200 per day per unprocessed deletion request.
- CPPA can already impose $200 per day fines for failing to register under the Delete Act; the agency will offer a sandbox and technical implementation guidance for broker integrations with DROP.
- CPPA clarified that a ‘direct relationship’ requires an intentional consumer interaction, meaning many ad‑tech vendors instrumenting third‑party pixels may be considered data brokers.
Connected Companies & Entities
1 Entity mappedOntology Mapping & Concepts
Related Market Signals & Shifts
Recent verified developments and strategic activity across this market segment.
California Delete Act and DROP Raise Broker Risk
AdExchanger reports that new U.S. privacy rules and enforcement are placing a renewed regulatory spotlight on companies that collect and sell consumer data. California’s Delete Act takes effect August 1 and introduces DROP, a centralized Delete Request and Opt‑Out Platform that allows residents to send one deletion request to all registered data brokers. Registered brokers must check DROP at least every 45 days and comply with deletion requests within 90 days; failures can trigger fines of $200 per request per day. Connecticut’s SB 4 (effective October 1 if signed) creates a separate data‑broker registry and defines “brokered personal data,” potentially sweeping in firms that buy, organize and resell third‑party information. Industry counsel warn companies cannot rely on informal self‑assessments (“I don’t think I’m a data broker”) and should reassess practices to avoid significant enforcement risk from CalPrivacy and state regulators.
Search Engines Outpace AI Chatbots by 20x
An analysis by data provider OneLittleWeb of traffic across 10,171 websites in June 2026 shows that search engines still dominate website visits, drawing 162.19 billion visits (57.2% of tracked traffic) compared to just 8.26 billion for AI chatbots (2.9%). This makes search engines nearly 20 times more popular than all AI chatbots combined. Google alone recorded 98.19 billion visits, while ChatGPT had 5.32 billion, holding 64% of the chatbot segment. Both categories saw declines from the previous month, with chatbots dropping faster. The study, based on browser visits estimated from Semrush and Ahrefs, excludes app usage, which may undercount AI assistant usage. As Google integrates AI features into search, the line between search and chat continues to blur, but search engines remain the primary gateway to the web.
Digiday Technology Awards 2026 Honor AI and AdTech Innovators
The 2026 Digiday Technology Awards recognized companies across various categories, including AI, personalization, and ad tech. Notable winners include PolyAI for Best AI Tool, with SafeRide Health deploying its AI agent 'Steven' to manage over 80% of inbound calls. Taboola's CEO Adam Singolda was named Technology Founder of the Year for launching DeeperDive, a conversational AI platform for publishers. Contentful and Docusign won Best Personalization & A/B Testing Platform, which enabled Docusign to personalize homepages for 20 audience segments. Other winners include Seedtag and Qatar Tourism for alternative ID, Viant for best buy-side platform, and Semrush (an Adobe company) for SEO. The awards highlight industry trends toward AI, agentic tools, privacy-first identity, and integrated measurement.
Track Real-Time Market Signals & Shifts
Set up custom watchlists to receive automated, evidence-grounded executive digests whenever material signals or shifts occur across your tracked landscape.