Ep. 95 - What Regulators Are Saying Now (IAPP Privacy Summit 2026)

Frictionless opt-outs keep coming up. Now we’re hearing what that actually means in practice. In this week’s Privacy Huddle, Maxwell Anderson joins Colleen Barry live from the Ketch booth at IAPP to break down what’s coming directly from regulators and recent enforcement conversations. The headline isn’t new. The expectations are just getting more specific. Regulators are focused on how opt-outs are implemented, not just whether they exist. And that’s where things start to break down. Frictionless doesn’t mean “easier UX.” It means removing barriers entirely: ✔️ One-click opt-outs, not multi-step flows ✔️ No unnecessary data collection to process a request ✔️ No redirect loops or buried links ✔️ No conflicting paths between banners, forms, and systems Because if the process introduces friction, it introduces risk. There’s also a broader signal behind all of this: responsibility sits with the business, not the vendor. If your implementation doesn’t hold up, it’s your name on the investigation. We also got into a recurring source of confusion across teams: this isn’t a cookie banner problem. It’s about how clearly you present “Do Not Sell or Share,” and whether that choice is actually enforced across your environment.