Regulatory
- 🆕 NEW - FTC to ban Kochava and subsidiary from selling sensitive location data without affirmative consent - Federal Trade Commission
- 💡 The proposed order is a practical map for location-data governance: sensitive-location inventories, supplier consent checks, consumer opt-outs, incident reporting, and retention schedules are now explicit FTC expectations for data brokers and downstream buyers.
Industry
- 🆕 NEW - U.S. state health insurance marketplaces shared citizenship, race, and other application data with ad-tech platforms - TechCrunch
- 💡 Pixel governance is still failing in high-sensitivity environments. DG teams should treat public-sector and healthcare web analytics tags as regulated data flows, not marketing plumbing.
Discourse
- 🆕 NEW - EU AI Act reform talks stall as high-risk compliance deadline approaches - IAPP
- 💡 If the delay holds, some Annex III high-risk AI systems may still face the original August 2026 compliance timeline, raising the cost of waiting on model inventories, risk classification, and evidence trails.
Tools & Vendors
- 🆕 NEW - Google Cloud and Collibra deepen partnership to push business context and governed metadata into Knowledge Catalog - PR Newswire
- 💡 Metadata synchronization is becoming an AI-readiness control: lineage, ownership, definitions, quality, and policy context need to travel with data inside the cloud fabric.
- 🆕 NEW - SAP agrees to acquire Dremio to unify SAP and non-SAP data for agentic AI - PR Newswire
- 💡 The pitch is not just lakehouse performance; it is governed access, open catalogs, business context, lineage, and regulatory classifications as infrastructure for enterprise AI agents.
This week ahead
- This week’s pattern is clear: regulators are forcing sharper consent and retention controls for sensitive data, while enterprise vendors are racing to make metadata, lineage, and business context native to AI platforms. DG teams should pressure-test two things now: where sensitive data leaves controlled environments, and whether AI/catalog tooling can prove context and policy inheritance instead of merely promising it.
Accuracy check: 5 links checked with non-Tavily fallback web tools; 5 source claims manually verified; Tavily credits used: 0.0. 5 items need your attention this week: