A popular digital ed-tech platform recently paid $17.25M to settle a class action lawsuit filed by Chicago’s Board of Education that alleged it illegally tracked confidential student information through third-party analytics...more
4/14/2026
/ CIPA ,
Class Action ,
Class Members ,
Confidential Information ,
Consent ,
Data Privacy ,
Eavesdropping ,
ECPA ,
Educational Institutions ,
Privacy Laws ,
Private Schools ,
Public Schools ,
School Districts ,
Settlement Agreements ,
Student Privacy ,
Students ,
Wiretapping
Roughly 70% of employers now screen social media profiles as part of the applicant screening process – but manually scrolling through Facebook posts, X feeds, and Instagram photos is time-consuming and inconsistent. Enter...more
2/9/2026
/ Artificial Intelligence ,
Best Practices ,
Bias ,
Biometric Information ,
Consent ,
Data Collection ,
Data Privacy ,
Data Retention ,
Data Security ,
Due Process ,
Employee Privacy Rights ,
Employer Liability Issues ,
Employment Discrimination ,
Fair Credit Reporting Act (FCRA) ,
Hiring & Firing ,
Human Resources Professionals ,
Job Applicants ,
Natural Language Processing ,
Privacy Laws ,
Social Media
Your talent acquisition team just pitched an exciting idea: replace your boring personality tests with AI-powered games that measure soft skills like creativity, resilience, and teamwork. The vendor promises better candidate...more
2/9/2026
/ Artificial Intelligence ,
Bias ,
Consent ,
Data Privacy ,
Disparate Impact ,
Employer Liability Issues ,
Employment Discrimination ,
Equal Employment Opportunity Commission (EEOC) ,
Hiring & Firing ,
Human Resources Professionals ,
Job Applicants ,
Risk Mitigation ,
Title VII ,
Transparency
California’s Attorney General has been taking swift action against businesses that make it difficult for consumers to opt-out of data collection practices. In a lawsuit filed last week, the AG claimed that streaming service...more
11/10/2025
/ Behavioral Advertising ,
California ,
California Consumer Privacy Act (CCPA) ,
Consumer Privacy Rights ,
Cookies ,
Data Collection ,
Data Privacy ,
Data Protection ,
Data Selling ,
Data-Sharing ,
Do Not Sell ,
Enforcement Actions ,
Opt-Outs ,
Personal Information ,
Settlement Agreements ,
State Attorneys General ,
State Privacy Laws ,
Subscription Services ,
Targeted Digital Advertising
A recent privacy rights development could have major implications for any school or non-profit that has a website, as a Michigan federal court gave the greenlight for a video privacy protection lawsuit to proceed against...more
10/24/2025
/ Colleges ,
Consent ,
Consumer Privacy Rights ,
Data Collection ,
Data Privacy ,
Data Protection ,
Educational Institutions ,
Personally Identifiable Information ,
School Districts ,
Social Media ,
Third-Party Service Provider ,
Tracking Systems ,
Universities ,
Video Privacy Protection Act ,
Websites ,
Wiretapping
The California Privacy Protection Agency, the state’s main data privacy regulator, just announced its largest fine yet – a record-setting $1.35 million – against an employer that it found to have violated job applicant and...more
10/1/2025
/ California ,
California Consumer Privacy Act (CCPA) ,
California Privacy Protection Agency (CPPA) ,
Consumer Privacy Rights ,
Data Collection ,
Data Privacy ,
Data-Sharing ,
Employee Privacy Rights ,
Employer Liability Issues ,
Enforcement Actions ,
Hiring & Firing ,
Job Applicants ,
Notice Requirements ,
Opt-Outs ,
Popular ,
Privacy Policy
Starting November 10, federal contractors that perform work with the Department of Defense will need to ensure they comply with a new cybersecurity framework. The Department of Defense (DoD) just amended the Defense Federal...more
9/15/2025
/ Best Practices ,
Controlled Unclassified Information (CUI) ,
Cybersecurity ,
Cybersecurity Maturity Model Certification (CMMC) ,
Data Mapping ,
Data Protection ,
Data Security ,
Defense Contracts ,
Defense Sector ,
Department of Defense (DOD) ,
DFARS ,
Federal Contractors ,
National Security ,
NIST ,
Risk Assessment ,
Subcontractors
When PowerSchool announced in January that it fell victim to a massive data breach at the end of 2024, it assured the thousands of schools and over 50 million students who use the education software that the matter had been...more
The country’s largest provider of cloud-based education software for K-12 schools announced on January 7 that it fell victim to a massive data breach – which may lead to questions about the implications for your school....more
1/13/2025
/ Cyber Attacks ,
Cyber Incident Reporting ,
Cybersecurity ,
Data Breach ,
Data Privacy ,
Data Protection ,
Data Security ,
Hackers ,
Incident Response Plans ,
Notification Requirements ,
Personally Identifiable Information ,
Popular ,
Ransomware ,
School Districts ,
Student Records ,
Teachers
Comprehensive consumer privacy laws are rapidly expanding across the United States, significantly impacting PEOs. Currently, 19 states have enacted privacy laws, with eight already in effect and 11 set to take effect between...more
12/17/2024
/ Consumer Privacy Rights ,
Data Collection ,
Data Privacy ,
Data Protection ,
Data Retention ,
Data Subjects Rights ,
Data Use Policies ,
Data-Sharing ,
Personally Identifiable Information ,
Privacy Laws ,
Privacy Policy ,
Professional Employer Organization
The Colorado attorney general’s office just adopted significant updates to the Colorado Privacy Act (CPA) rules, which will soon introduce new obligations related to biometric data, employee biometrics, children’s privacy,...more
12/13/2024
/ Biometric Information ,
Colorado ,
Consent ,
Corporate Counsel ,
Data Collection ,
Data Privacy ,
Data Protection ,
Data Use Policies ,
New Rules ,
Notice Requirements ,
Opinion Letter ,
Privacy Policy ,
State Privacy Laws
Colorado employers could soon need to comply with the disclosure and consent requirements of the state’s privacy act when they collect biometric identifiers from employees or applicants – which would make Colorado the first...more
10/4/2024
/ Biometric Information ,
Colorado ,
Consent ,
Data Collection ,
Data Privacy ,
Data Protection ,
Disclosure Requirements ,
Employees ,
Hiring & Firing ,
Job Applicants ,
Privacy Policy ,
Proposed Regulation ,
State Privacy Laws
Google no longer plans to remove third-party cookies from its web browser, according to a July 22 announcement. Instead, the tech giant will explore other options that allow users to make informed choices that apply across...more
Artificial intelligence might just be making major inroads into your workday and personal lives over the last few years, but it has long been a key plot point in some of your favorite movies. In fact, some would say that AI...more
A new final rule under HIPAA adds more compliance requirements aimed at supporting reproductive healthcare privacy – so you need to take note if you are a healthcare provider, employer-sponsored group health plan, or other...more
Healthcare data breaches are occurring more frequently and on larger scales than ever before – and while you defend against cyberattacks and other external threats, make sure you do not overlook the critical role your...more
5/22/2024
/ Business Associates ,
Covered Entities ,
Cyber Attacks ,
Cyber Threats ,
Cybersecurity ,
Data Breach ,
Data Privacy ,
Data Protection ,
Data Security ,
Electronic Protected Health Information (ePHI) ,
Employee Training ,
Health Care Providers ,
Health Insurance Portability and Accountability Act (HIPAA) ,
PHI ,
Policies and Procedures ,
Popular
What do a nearly 60-year-old statute on wiretapping and your website have in common? Enough to potentially impose liability on your organization, according to recent lawsuits. We have seen an astronomical increase in...more
4/16/2024
/ CIPA ,
Data Brokers ,
Digital Service Providers ,
Invasion of Privacy ,
Opt-In ,
Opt-Outs ,
Privacy Disclosures ,
Third-Party Risk ,
Vendors ,
Website Owner Liability ,
Websites ,
Wiretapping
California wants to rein in artificial intelligence – and that means employers and businesses need to step up and pay attention. State lawmakers are considering more than 30 AI-related bills across a wide range of topics...more
3/18/2024
/ Access to Information (ATI) ,
Algorithms ,
Artificial Intelligence ,
California ,
Consumer Privacy Rights ,
Deep Fake ,
Election Interference ,
Employee Rights ,
Entertainment Industry ,
Job Applicants ,
Legal Technology ,
Machine Learning ,
Notification Requirements ,
Opt-Outs ,
Physicians ,
Popular ,
Proposed Legislation ,
Proposed Regulation ,
State Agencies