California Attorney General (AG) Rob Bonta announced a $1.4 million settlement with mobile game developer Jam City Inc. on Nov. 21, 2025, resolving allegations that the company violated the California Consumer Privacy Act...more
11/26/2025
/ App Developers ,
California Consumer Privacy Act (CCPA) ,
Children's Online Games ,
Consumer Privacy Rights ,
Data Privacy ,
Enforcement Actions ,
Opt-Outs ,
Personal Information ,
Settlement ,
Software Developers ,
State Attorneys General ,
State Privacy Laws ,
Statutory Violations ,
Unfair Competition Law (UCL)
Florida follows Michigan's lead in targeting streaming platforms for children's privacy violations, alleging in a new complaint that Roku willfully collects and sells children's personal data, including sensitive information...more
10/24/2025
/ Consent ,
Consumer Privacy Rights ,
COPPA ,
Data Brokers ,
Data Privacy ,
Enforcement Actions ,
Geolocation ,
Minors ,
Online Platforms ,
Parental Consent ,
Privacy Laws ,
Roku ,
Sensitive Personal Information ,
State Attorneys General ,
State Privacy Laws
The California Privacy Protection Agency (CPPA) announced on Sept. 30, 2025, that it had entered into a Stipulated Final Order (the Order) imposing a $1.35 million administrative fine on retailer Tractor Supply Co. The...more
10/6/2025
/ Administrative Fines ,
California Consumer Privacy Act (CCPA) ,
California Privacy Protection Agency (CPPA) ,
Consent Order ,
Consumer Privacy Rights ,
Data Privacy ,
Data Protection ,
Enforcement Actions ,
Notice Requirements ,
Opt-Outs ,
Personal Information ,
Privacy Laws ,
Retailers ,
State Privacy Laws
California Attorney General Rob Bonta has settled claims against Healthline Media (Healthline) for violations of the California Privacy Protection Act (CCPA) related to the company's sharing of personal information and...more
7/11/2025
/ Advertising ,
California Privacy Protection Agency (CPPA) ,
Civil Monetary Penalty ,
Data Privacy ,
Data-Sharing ,
Enforcement Actions ,
Opt-Outs ,
Penalties ,
Personal Information ,
Privacy Policy ,
Sensitive Personal Information ,
Settlement ,
State Attorneys General ,
Third-Party
Google is so ubiquitous it's both a noun and a verb, and nearly everyone's search engine of choice. As a result, the landmark antitrust case brought by the U.S. Department of Justice and several states (collectively, the...more
4/16/2025
/ Abuse of Dominance ,
Antitrust Litigation ,
Antitrust Violations ,
Commercial Contracts ,
Competition ,
Consumer Privacy Rights ,
Contract Terms ,
Data Privacy ,
Data-Sharing ,
Department of Justice (DOJ) ,
Google ,
Monopolization ,
Personally Identifiable Information ,
Remedies ,
Search Engines
Since early September 2024, the U.S. Department of Justice (DOJ) presented its case-in-chief against Google in a lawsuit accusing the company of anti-competitive and monopolistic practices in the complex digital advertising...more
The Colorado legislature passed the Colorado Artificial Intelligence Act (SB 205 or the Act) on May 8, 2024. If approved by Gov. Jared Polis, it will be the first law in the U.S. to impose specific requirements intended to...more
5/20/2024
/ Artificial Intelligence ,
Disclosure Requirements ,
Discrimination ,
Duty of Care ,
Enforcement ,
Governor Polis ,
Impact Assessments ,
Pending Legislation ,
Regulatory Authority ,
Risk Management ,
Rulemaking Process ,
State Attorneys General ,
Technology Sector
The Washington My Health My Data Act (the MHMD Act) was signed into law on April 27, 2023, creating new restrictions on the collection and disclosure of "consumer health data" by companies in Washington or that is related to...more
5/3/2023
/ Biometric Information ,
California Consumer Privacy Act (CCPA) ,
Consent ,
Covered Entities ,
Data Collection ,
Data Protection ,
Health Insurance Portability and Accountability Act (HIPAA) ,
Mobile Apps ,
Mobile Health Apps ,
New Legislation ,
Pending Legislation ,
Personal Data ,
Pharmacies ,
PHI ,
VPPA
Iowa became the sixth state to enact a comprehensive consumer privacy law after Gov. Kim Reynolds signed SF 262 into law on March 28, 2023. The Act Relating to Consumer Data Protection uses similar language as the Virginia...more
The Federal Trade Commission (FTC) is on a roll in its efforts to signal to the digital health industry that data privacy must be a priority. The FTC announced a consent decree with BetterHelp on March 2, 2023, to settle...more
3/7/2023
/ Advertising ,
Consent Decrees ,
Consumer Privacy Rights ,
Cookies ,
Digital Health ,
Enforcement Actions ,
Federal Trade Commission (FTC) ,
Health Care Providers ,
Health Insurance Portability and Accountability Act (HIPAA) ,
Marketing ,
Mental Health ,
Telehealth ,
Unfair or Deceptive Trade Practices
The Colorado Department of Law filed a set of proposed rules to implement the Colorado Privacy Act (Draft CO Rules) on Sept. 29, 2022, foreshadowing additional compliance obligations that businesses will have to strive to...more
The newly formed California Privacy Protection Agency (the Agency) quietly released a preliminary draft of its proposed regulations on May 27, 2022, implementing the California Consumer Privacy Act (CCPA) as amended by the...more
Connecticut has positioned itself to become the fifth state to implement comprehensive consumer privacy legislation, after both chambers of the state legislature approved draft bill SB 6 on April 22, 2022, and April 28, 2022,...more