Avi Chai Outmezguine is CEO of Becausal, powering next-generation audience intelligence through causal AI-driven data innovation.
The industry is celebrating the end of the cookie wars. It should be preparing for something far worse: Regulators are coming for the AI models themselves, and those models can’t answer the questions they’re about to be asked.
The adtech industry may feel like the crisis of privacy has passed. The cookie wars are over. Clean rooms are booming. Retail media is surging. Everyone has a privacy-first strategy. Panels promise privacy-safe personalization at scale. The crisis hasn’t passed, though; it has shapeshifted.
While the industry focused on cookies, privacy regulation hardened. More than 20 U.S. states now have comprehensive consumer privacy laws. Amendments are tightening definitions, expanding enforcement and removing grace periods.
California has expanded accountability for companies that sell or share consumer data, including new disclosure obligations around sensitive data and AI-related data flows. Colorado now requires opt-in consent before processing minors’ data for advertising, sale or profiling, alongside formal risk assessment requirements. Maryland goes further, prohibiting the processing of sensitive data unless it is strictly necessary for the requested service. Enforcement budgets are growing, and regulators are moving from data collection to model accountability.
