On March 16, the Oklahoma legislature passed SB 546, with Oklahoma Governor Kevin Stitt signing the bill into law on March 20. SB 546 is the twentieth state comprehensive law to be enacted and will take effect on January 1,...more
On March 3, 2026, the California Privacy Protection Agency (CPPA) announced a $1.1 million fine against PlayOn Sports, a youth sports media and technology company that operates the GoFan digital ticketing platform....more
3/20/2026
/ California Consumer Privacy Act (CCPA) ,
California Privacy Protection Agency (CPPA) ,
Civil Monetary Penalty ,
Consent ,
Consumer Privacy Rights ,
Enforcement Actions ,
Opt-Outs ,
Privacy Laws ,
State Privacy Laws ,
Targeted Digital Advertising ,
Web Tracking
On February 11, California Attorney General Rob Bonta’s office (CA AG) announced a $2.75 million settlement—the largest settlement to date under the California Consumer Privacy Act (CCPA)—with the Walt Disney Company...more
3/10/2026
/ California Consumer Privacy Act (CCPA) ,
Consumer Privacy Rights ,
Data Privacy ,
Data Protection ,
Disney ,
Enforcement Actions ,
Opt-Outs ,
Privacy Laws ,
Settlement ,
State Attorneys General ,
State Privacy Laws
2025 marked another year of significant legislative and regulatory advances at the federal and state levels for data privacy and security, in ways that were both expected and unexpected. As was anticipated, a new...more
1/29/2026
/ Cross-Border Transactions ,
Data Privacy ,
Data Security ,
Department of Justice (DOJ) ,
Enforcement Actions ,
Enforcement Priorities ,
Executive Orders ,
Federal Trade Commission (FTC) ,
National Security ,
Popular ,
Sensitive Personal Information ,
State Privacy Laws
In recent years, websites have faced a slew of proposed class action lawsuits over their tracking technologies. To improve user experiences and to tailor marketing, some websites use pixels, strings of code used to gather and...more
10/21/2025
/ Appellate Courts ,
Class Action ,
Consumer Privacy Rights ,
Corporate Counsel ,
Data Privacy ,
Data Protection ,
Internet Marketing ,
Marketing ,
Personally Identifiable Information ,
Privacy Laws ,
Statutory Interpretation ,
Video Privacy Protection Act ,
Web Tracking
On September 30, the California Privacy Protection Agency (“CPPA” or “Agency”) announced a $1.35 million settlement – the largest in the agency’s brief history – with Tractor Supply Company (“Tractor Supply”), a rural...more
10/20/2025
/ California Consumer Privacy Act (CCPA) ,
California Privacy Protection Agency (CPPA) ,
Civil Monetary Penalty ,
Consumer Privacy Rights ,
Data Privacy ,
Data Protection ,
Enforcement Actions ,
Opt-Outs ,
Privacy Policy ,
Settlement ,
State Privacy Laws ,
Third-Party Service Provider
Over the past two years, Texas has established itself as a leader in privacy cybersecurity enforcement activities. In addition to bringing the first-ever lawsuit under a state comprehensive privacy law, the Texas AG has...more
10/10/2025
/ Cybersecurity ,
Data Brokers ,
Data Privacy ,
Data Protection ,
Data Security ,
Enforcement Actions ,
Enforcement Priorities ,
New Legislation ,
Online Safety for Children ,
Pending Litigation ,
Privacy Laws ,
Regulatory Oversight ,
State Attorneys General ,
State Privacy Laws
On June 20, 2025, the Texas governor signed two bills amending the Texas Data Broker Act (also the “Act”) into law (SB 2121 and SB 1343). Both bills went into effect on September 1, 2025. ...more
On June 22, 2025, the Texas governor signed the Texas Responsible Artificial Intelligence Governance Act (TRAIGA or the Act) into law, making Texas the second state to pass comprehensive artificial intelligence (AI)...more
7/22/2025
/ Artificial Intelligence ,
Biometric Information ,
Consumer Protection Laws ,
Covered Entities ,
Data Privacy ,
Disclosure Requirements ,
Government Agencies ,
Governor Abbott ,
New Legislation ,
Regulatory Requirements ,
State Privacy Laws
On July 1, the California Attorney General (CA AG) announced a $1.55 million settlement – the largest penalty issued under the California Consumer Privacy Act (CCPA) to date – with Healthline, an online health and wellness...more
7/8/2025
/ Advertising ,
California Consumer Privacy Act (CCPA) ,
Civil Monetary Penalty ,
Consumer Privacy Rights ,
Data Privacy ,
Enforcement Actions ,
Location Data ,
Online Platforms ,
Penalties ,
Privacy Laws ,
Settlement ,
State Attorneys General ,
Third-Party Service Provider
On June 2, 2025, the New Jersey Division of Consumer Affairs (the “Division”), alongside the Office of the Attorney General, announced proposed rules (the “Proposed Rules”) to implement the New Jersey Data Privacy Act...more
6/25/2025
/ Comment Period ,
Consumer Privacy Rights ,
Data Controller ,
Data Protection ,
Data Subject Access Requests ,
Disclosure Requirements ,
Notice Requirements ,
Personal Data ,
Privacy Laws ,
Proposed Rules ,
State Privacy Laws
On April 21, 2025, Arkansas Governor Sarah Huckabee Sanders signed HB 1717 into law. HB 1717, which will take effect on July 1, 2026, prohibits operators of online services “directed at children” or operators with “actual...more
While most state legislatures are wrapping up their legislative sessions with little fanfare, Massachusetts appears to just be getting started. On May 12, 2025, the Bay State introduced the Massachusetts Data Privacy Act (S...more
5/20/2025
/ Consumer Privacy Rights ,
Corporate Counsel ,
Data Brokers ,
Data Collection ,
Data Controller ,
Data Privacy ,
Pending Legislation ,
Privacy Laws ,
Proposed Legislation ,
Sensitive Personal Information ,
State Privacy Laws
As we approach the end of many states’ legislative sessions, we’re seeing more action in committees and fewer introductions of new proposals. There are no new comprehensive privacy law proposals to cover since our last update...more
On March 24, Virginia Governor Glenn Youngkin signed SB 754 into law. SB 754, which will take effect on July 1, 2025, amends the Virginia Consumer Protection Act (VCPA) to prohibit certain entities from, in connection with a...more
While March featured a flurry of newly introduced comprehensive privacy bills, state legislatures now appear to be primarily focused on pushing existing proposals through the chambers. ...more
4/21/2025
/ Consumer Privacy Rights ,
Corporate Counsel ,
Data Privacy ,
Data Protection ,
New Legislation ,
Personal Data ,
Personal Information ,
Privacy Laws ,
Proposed Amendments ,
Proposed Legislation ,
Regulatory Requirements ,
State Privacy Laws
One of the main risks for a company in the event of a data breach is the threat of litigation. Data breach litigation continued to proliferate in 2024, as it has in prior years....more
4/9/2025
/ Appellate Courts ,
Article III ,
Attorney-Client Privilege ,
Common Law Claims ,
Corporate Counsel ,
Damages ,
Data Breach ,
Injury-in-Fact ,
Negligence ,
Standing ,
TransUnion LLC v Ramirez
The states bounced back from a somewhat quiet previous biweekly update with several noteworthy developments in the last two weeks. A total of five new state comprehensive privacy bills were introduced in Maine (LD 1224),...more
4/8/2025
/ Consumer Privacy Rights ,
Corporate Counsel ,
Data Privacy ,
Data Protection ,
Enforcement Authority ,
New Legislation ,
Privacy Laws ,
Proposed Legislation ,
Regulatory Requirements ,
State Attorneys General ,
State Privacy Laws
The Telephone Consumer Protection Act is a major source of consumer privacy litigation against companies that engage in telemarketing. This past year, there was little change in the status quo of what constitutes an...more
4/4/2025
/ Advertising ,
Auto-Dialed Calls ,
Class Action ,
Consumer Privacy Rights ,
Facebook Inc v Duguid ,
Faxes ,
FCC ,
McLaughlin Chiropractic Associates Inc v McKesson Corporation ,
Robocalling ,
SCOTUS ,
TCPA ,
Telemarketing ,
Unsolicited Advertisements ,
Unsolicited Faxes
In a press release on March 10, 2025, California Attorney General (“California AG”) Rob Bonta announced an investigative sweep focusing on California Consumer Protection Act (“CCPA”) compliance within the location data...more
3/27/2025
/ California Consumer Privacy Act (CCPA) ,
Cookies ,
Data Collection ,
Enforcement Actions ,
Enforcement Priorities ,
Honda ,
Location Data ,
Opt-In ,
Opt-Outs ,
Privacy Laws ,
State Attorneys General ,
State Privacy Laws
As we progress deeper into the 2025 legislative season, comprehensive privacy law proposals continue to progress through the legislative process. In the weeks since our last update, Kentucky amended its comprehensive data...more
3/24/2025
/ Consumer Privacy Rights ,
Consumer Protection Laws ,
Data Privacy ,
Data Protection ,
Enforcement Actions ,
New Legislation ,
Privacy Laws ,
Proposed Amendments ,
Proposed Legislation ,
Sensitive Personal Information ,
State Privacy Laws
On February 20, the Virginia legislature passed the High-Risk Artificial Intelligence Developer and Deployer Act (HB 2094), a bill that aims to prevent algorithmic discrimination by imposing requirements on businesses that...more
As the legislative season continues, some states, like Georgia and Oklahoma, have continued to progress in the efforts to establish a comprehensive data privacy law while others, such as Alabama, Illinois, and Massachusetts,...more
3/10/2025
/ Artificial Intelligence ,
Consumer Privacy Rights ,
Cybersecurity ,
Data Privacy ,
Data Protection ,
Fair Credit Reporting Act (FCRA) ,
FERPA ,
GLBA Privacy ,
Health Insurance Portability and Accountability Act (HIPAA) ,
Personal Data ,
Privacy Laws ,
State Privacy Laws
Generative AI continued to be a hot topic for privacy-related litigation in 2024. In the US, companies using and deploying this technology saw themselves subject to lawsuits under various state and federal theories of...more
3/7/2025
/ Artificial Intelligence ,
CIPA ,
Consumer Privacy Rights ,
Consumer Protection Laws ,
Corporate Counsel ,
Data Privacy ,
Federal Trade Commission (FTC) ,
Machine Learning ,
Pending Litigation ,
Privacy Laws ,
State Attorneys General ,
State Privacy Laws ,
Unfair or Deceptive Trade Practices ,
Wiretapping
In 2024, plaintiffs across the United States filed various class action cases related to web tracking technology employed by companies to enhance user experience on their websites and to improve the efficacy of their...more
2/26/2025
/ Advertising ,
Bots ,
California Consumer Privacy Act (CCPA) ,
CIPA ,
Class Action ,
Consumer Privacy Rights ,
Cybersecurity ,
Data Collection ,
Data Privacy ,
Legal History ,
Privacy Laws ,
State Privacy Laws ,
Web Tracking ,
Wiretap Act