Organizations may incorrectly believe they can avoid compliance with state data privacy laws by de-identifying data or running it through so-called “data clean rooms” (DCRs), according to the speakers at a program dissecting the results of the 2025 State Privacy Law Survey by the Interactive Advertising Bureau (IAB). In addition to DCRs and de-identification, the survey also assessed privacy professionals’ views on, and experiences with, inferring sensitive PI, private suits under wiretapping statutes, treatment of minors’ data, data minimization, issues involving consent and disclosures, and third-party due diligence. This article synthesizes the associated survey findings and insights from industry experts at Frankfurt Kurnit Klein & Selz, IAB, Kelley Drye & Warren, and Ketch. See “Measures for Complying With 19 (and Counting) State Privacy Laws” (Jun. 26, 2024).