OAAA Flags California Privacy Laws as Risk Factor for DOOH Data Practices
2026-10-30 · via DailyDOOH
The Out of Home Advertising Association of America (OAAA) is warning its members that a widening patchwork of state privacy laws could reach deeper into digital out of home operations than many in the industry assume. The warning, published on the OAAA blog and picked up by DailyDOOH, matters for anyone running a DOOH network that touches location data, third-party audience data, attribution measurement, or AI-generated content in creative.
According to the OAAA, California remains the pacesetter. The state's 2018 California Consumer Privacy Act (CCPA) created the first comprehensive state privacy framework in the US, and California has since added an enforcement agency, a public data broker registry, and new consumer rights around deletion and data sharing. The OAAA says 23 states now have comprehensive privacy laws on the books, with Alabama, Louisiana, Oklahoma and Vermont joining the list in 2026.
The practical relevance for DOOH operators, per the OAAA, falls into five areas: location and audience data restrictions, rules governing data broker relationships, privacy considerations for campaigns that link OOH exposure to digital attribution, compliance obligations for company websites and digital platforms, and new disclosure rules for AI-generated performers in ads.
That last point is notable. California and Pennsylvania have passed AI-related legislation requiring disclosure when ads use digitally generated voices, actors or other synthetic representations, following a similar law in New York. Any network running programmatic or dynamic creative that incorporates AI-generated talent should expect this to become a live compliance question, not a hypothetical one.
The OAAA also notes where legislation has not advanced. Governor Gavin Newsom vetoed a bill that would have barred CCPA-covered companies from selling or sharing sensitive personal information, citing existing opt-out protections. Other states have gone further than California in some respects: Maryland and New Jersey now prohibit the sale of sensitive personal information even when consumers consent, and several states restrict sale of precise geolocation data specifically, which is directly relevant to any DOOH measurement product built on mobile location signals.
What the announcement does not say is which specific DOOH measurement vendors, data partners or ad tech integrations are affected, or what compliance steps operators should actually take. It is a policy summary and advocacy notice, not a compliance guide. The OAAA frames its own role as monitoring legislative developments and briefing members, and says it expects continued state-level activity on privacy, data use and AI-generated advertising through 2027 as legislatures reconvene.
For operators running location-based measurement, programmatic DOOH buys, or AI-assisted creative pipelines, the takeaway is to treat this as an operational planning item rather than a legal footnote. Multi-state compliance is becoming more fragmented, not less, and the rules differ meaningfully between states like California, Maryland and New Jersey.
The announcement in full
Reproduced from DailyDOOH for reference. Digital Signage Magazine did not write the text below.
California Privacy Laws and Implications For #OOH
As states continue to strengthen consumer privacy protections, California remains at the forefront of legislation shaping how businesses collect, use and manage personal data.
For the out of home (OOH) advertising industry, these developments are important to watch. While OOH operates differently from many digital advertising channels, evolving privacy laws could have implications for how companies use data, measure campaign performance and connect OOH with broader marketing strategies.
As The Human Medium, OOH has a unique relationship with consumers, reaching people in the physical world through shared experiences and real-world connections. As our industry continues to embrace new technologies and more sophisticated measurement capabilities, understanding the evolving privacy landscape is increasingly important.
In 2018, California became the first state to enact a comprehensive consumer privacy law with the California Consumer Privacy Act (CCPA). The state subsequently established an independent regulatory agency to oversee enforcement and expanded its privacy framework through additional legislation.
These measures have strengthened consumer rights, established a public data broker registry and created new mechanisms for individuals to control how their personal information is collected, shared and deleted.
California’s approach has helped shape privacy legislation nationwide. Today, 23 states have enacted comprehensive consumer privacy laws, reflecting a broader movement toward greater transparency, consumer control and accountability in the use of personal data.
In 2026, Alabama, Louisiana, Oklahoma and Vermont joined the growing number of states advancing comprehensive consumer privacy legislation. Other states introduced updates and amendments to existing laws, further expanding the regulatory landscape.
California continued to lead the conversation during its most recent legislative session, with Governor Gavin Newsom signing or vetoing more than 300 bills, including several measures addressing consumer privacy and artificial intelligence (AI).
Among the new laws are additional protections for social media users under the age of 16, including restrictions on how platforms collect and use consumer profile data for targeted advertising.
California and Pennsylvania also enacted new AI-related legislation, including requirements addressing the use of digitally generated performers in advertising. Similar to legislation recently adopted in New York, these measures introduce new disclosure considerations for advertisers using AI-generated voices, actors and other synthetic representations.
Other proposals did not advance. Governor Newsom vetoed legislation that would have prohibited companies subject to the CCPA from selling or sharing sensitive personal information, citing existing consumer opt-out protections and concerns about the proposal’s broad application.
Meanwhile, other states are taking different approaches. Several have restricted the sale of certain categories of sensitive personal information, including precise geolocation data. Maryland and New Jersey have gone further, prohibiting the sale of sensitive personal information even with consumer consent.
Together, these developments underscore the increasingly complex privacy environment facing advertisers and media companies operating across multiple states.
While many of these laws are primarily focused on digital platforms and data-driven advertising, their implications extend to the broader media ecosystem, including OOH.
OOH’s ability to reach consumers in the physical world is one of the qualities that makes it The Human Medium. At the same time, as the industry advances its capabilities in audience measurement, attribution, programmatic advertising and omnichannel integration, data privacy remains an important consideration.
The OAAA says that OOH companies should pay particular attention to how evolving state requirements may affect:
Location and audience data: Restrictions on the collection, sale and use of precise geolocation and other sensitive personal information.
Third-party data partnerships: New requirements governing data brokers and access to consumer information.
Integrated campaigns and measurement: Privacy considerations for campaigns connecting OOH exposure with digital engagement, attribution and other performance metrics.
Digital operations: Compliance obligations related to company websites, consumer data practices and other digital platforms.
AI-generated advertising: Emerging disclosure requirements for synthetic performers and AI-generated creative content.
Although not every new law will directly affect OOH, understanding where legislation intersects with industry practices is essential as the medium continues to evolve.
As privacy legislation continues to evolve, OAAA remains focused on helping members understand the changing regulatory environment and its potential implications for the industry.
Their role here is to monitor legislative and regulatory developments, identify emerging issues and provide members with the information they need to navigate new requirements.
Looking ahead to 2027, the OAAA expect continued attention to consumer privacy, data usage and AI-generated advertising as state legislatures reconvene and regulators implement existing laws.
The OOH medium is rooted in its ability to connect brands and consumers in the real world. As technology expands what our industry can deliver, protecting consumer trust and staying informed about evolving regulations will remain important priorities.
OAAA will continue to monitor these developments, advocate for the industry’s interests and keep members informed as the regulatory landscape evolves.
This article was originally published on the OAAA Blog here .
This entry was posted
on Friday, October 30th, 2026 at 09:54 @454 and is filed under DailyDOOH Update . You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response , or trackback from your own site.About DailyDOOH Editorial Team Technology Team
AdAI: OOH – Conference Series 2023/2024 2025
AdTECH: OOH Conference Series 2016 – 2022 2022. (Our Eight Events) 2023 2024
Past Events CITY BRIEFINGS The DailyDOOH Gala Awards Returns To New York Thought Leadership Summits
The DailyDOOH Gala Awards Returns To New York
The Software Holocron (Digital Signage, Gesture, Kiosk and Touch)
Categories CEO SPOTLIGHT (101) DailyDOOH Update (15,323) DailyDOOH.net (16) Events (706) Guest Contributions (15) Housekeeping (59) Jobs (81) Scuttlebut (10,386) The Hub (5) Vlog (34) Will Work For Love (42)
Recent Entries Tom Martin Becomes Kinly CEO California Privacy Laws and Implications For #OOH Concert Violinist Annabelle Traves Ice Cream Taster Flyby And @YangoAds UAE #MOOH Partnership VIOOH Partners With Adams Outdoor #ISE2027 @SparkExpoShow #SparkExpo #Spark2027 UK Advertising Festive Quarter Forecast Latest PMA Research Flat Panel Tracking Report DAMODA ‘Automated Drone Show’ IPO Plans Lang AG Drone Summit, November 19
California Privacy Laws and Implications For #OOH
Concert Violinist Annabelle Traves Ice Cream Taster
Flyby And @YangoAds UAE #MOOH Partnership
ISE2027 @SparkExpoShow #SparkExpo #Spark2027
Latest PMA Research Flat Panel Tracking Report
Meta Register Log in Valid HTML5 WordPress