February 18: State AGs ramp up privacy enforcement as COPPA nears
February 18: State AGs ramp up privacy enforcement as COPPA nears
https://meyka.com/blog/february-18-state-ags-ramp-up-privacy-enforcement-as-coppa-nears-1802/
Publish Date: 2026-02-18 06:05:00
Source Domain: meyka.com
On 18 February, we see data privacy regulations tighten in the United States as state attorneys general step up actions ahead of the 22 April COPPA compliance deadline. Strict state laws, including Maryland’s MODPA and Rhode Island’s no‑cure approach, now move into active enforcement. For Australian portfolios with exposure to ad‑tech, gaming, health media, and data brokers, we expect higher compliance costs and disclosure updates. We will track how data privacy regulations change guidance, margins, and legal reserves in 1H 2026.
Why US privacy enforcement matters for Australia
The 22 April COPPA compliance deadline focuses attention on child data, in‑app consent, and ad targeting. State attorneys general are increasing probes and settlements across a patchwork of US state privacy laws. Recent legal analyses show more states finalising rules and moving to penalties, which raises cross‑border risk for Australian firms with US users source.
We see near‑term legal and cost risk for ad‑tech, gaming, health media, and data brokers. Australian companies that collect minors’ data, sensitive health data, or location data will need tighter controls to meet data privacy regulations. Expect updates to privacy notices, consent flows, and vendor contracts. Watch for slower product rollouts as teams prioritise audits, retention limits, and appeal processes.
Key laws to watch in 2026
Maryland MODPA enforcement targets sensitive data, youth protections, and limits on targeted advertising. Companies must justify data collection and apply strong data minimisation. We expect firms to expand data maps, age‑gating, and opt‑out signals. For investors, Maryland MODPA enforcement may lift operating costs in 1H 2026 and increase the chance of consent orders if controls lag data privacy regulations.
Rhode Island’s privacy law includes no cure period before enforcement, which can speed penalties for violations. This raises stakes for firms that rely on ad signals…
