In a recent decision by the Ninth Circuit in Briskin, the court ruled that e-commerce platform Shopify purposefully directed its conduct toward California because of its nationwide operations, rejecting the need for...more
CPPA launched its first major enforcement action in targeting connected vehicle-maker Honda.
Connected vehicles often collect various kinds of sensitive driver information, including geolocation, biometric and behavioral...more
Key Takeaways: On December 28, 2024, education technology company PowerSchool disclosed a cybersecurity breach impacting 62 million students and 9.5 million educators across the globe. The intrusion, which began on December...more
3/31/2025
/ Cybersecurity ,
Data Breach ,
Data Privacy ,
Data Protection ,
Educational Institutions ,
FERPA ,
Personal Data ,
Privacy Laws ,
Risk Management ,
Sensitive Personal Information ,
Third-Party Risk
2024 marked another significant year for privacy law, with new state legislation and high-stakes litigation reshaping the landscape. Legal battles over tracking technologies, biometric data, and children’s privacy...more
3/18/2025
/ Biometric Information ,
COPPA ,
Data Breach ,
Data Privacy ,
Data Security ,
Department of Health and Human Services (HHS) ,
Enforcement Actions ,
Federal Trade Commission (FTC) ,
OCR ,
Privacy Laws ,
State Privacy Laws
Amazon faces allegations of unauthorized data collection in violation of federal and state privacy laws, including a first-of-its-kind claim under Washington’s My Health My Data Act (“MHMDA”). The MHMDA restricts businesses...more
3/17/2025
/ Amazon ,
Consent ,
Consumer Privacy Rights ,
Data Collection ,
Data Privacy ,
Data Protection ,
Health Insurance Portability and Accountability Act (HIPAA) ,
Personal Data ,
Privacy Laws ,
State Privacy Laws ,
Unfair or Deceptive Trade Practices
Plaintiffs are persistently crafting creative legal theories to target tracking technologies.
One new approach is to characterize tracking technologies as “pen registers” or “trap and trace devices” used in violation of...more
12/10/2024
/ Analytics ,
California ,
CIPA ,
Consent ,
Demurrers ,
Fingerprints ,
Motion to Dismiss ,
Personal Jurisdiction ,
Punitive Damages ,
Software ,
Technology ,
TikTok ,
Tracking Systems
Repurposing old laws to challenge new technologies has become the new normal in the privacy space. Plaintiffs continue to bring a kaleidoscope of privacy claims against companies in the tech age, reviving laws like the...more
9/6/2024
/ CA Supreme Court ,
CIPA ,
Corporate Counsel ,
Eavesdropping ,
Personally Identifiable Information ,
Popular ,
Song-Beverly Credit Card Act ,
TCPA ,
Technology ,
Tracking Systems ,
VPPA ,
Wiretapping
There has been a recent surge of privacy class action lawsuits under the Arizona Telephone, Utility, and Communication Service Records Act targeting the use of common email marketing analytics technologies.
Defendants are...more
While French skincare company L’Occitane (the “Company”) successfully thwarted a mass arbitration effort by plaintiffs’ firm Zimmerman Reed and approximately 3,000 customers (the “Claimants”), the Southern District of...more
In July, Instagram’s parent company Meta Platforms, Inc. (“Meta”) agreed to a $68.5 million class-action biometric privacy settlement in connection with the company’s alleged violation of Illinois’ Biometric Information...more
9/11/2023
/ Big Tech ,
Biometric Information ,
Class Action ,
Data Collection ,
Data Privacy ,
Data Protection ,
Data Storage ,
Facebook ,
Facial Recognition Technology ,
Google ,
Informed Consent ,
Instagram ,
Settlement ,
Snapchat