Apple AirTag 2nd‑Gen Hits $24 on Prime Day – Privacy Implications for Consumer Tracking Devices
What Happened — Apple’s second‑generation AirTag is being sold for $24 each (or $89 for a 4‑pack) during Amazon Prime Day 2026, a $5‑$10 discount from the regular price. The device adds UWB and a louder speaker, improving precision finding for iOS users.
Why It Matters for Compliance & Audit Readiness —
- The AirTag continuously broadcasts Bluetooth identifiers that can be linked to a user’s Apple ID, creating a de‑facto location‑tracking dataset subject to GDPR, CCPA, and SOC 2 CC6 (Confidentiality) requirements.
- Organizations that issue AirTags to employees or customers must document consent, define data‑retention policies, and have incident‑response procedures ready to satisfy audit evidence needs.
- Verisq’s CookiePLUS privacy capability can map consent flows, generate DSAR‑ready records, and provide continuous, audit‑ready proof of privacy‑by‑design controls.
Who Is Affected — Consumer‑electronics retailers, enterprises that provision AirTags for asset or employee tracking, and any organization handling location‑tracking data.
Recommended Actions —
- Conduct a privacy impact assessment (PIA) for AirTag use within your environment.
- Update data‑processing agreements to cover Bluetooth identifier collection and storage.
- Leverage continuous consent‑tracking tools to capture and retain user consent for location data.
Technical Notes — AirTag uses Apple’s Find My network, UWB, and Bluetooth LE; no known CVEs are disclosed in the article. The device does not store personal data locally but transmits identifiers that can be correlated with Apple’s cloud services. Source: ZDNet article