On April 29, Michigan Attorney General (AG) Dana Nessel filed a lawsuit against Roku, Inc. (Roku), the smart TV and device provider and streaming service, alleging that Roku collects and monetizes personal data from children...more
6/9/2025
/ COPPA ,
Data Collection ,
Data Privacy ,
Enforcement Actions ,
Internet Streaming ,
Online Safety for Children ,
Personal Data ,
Privacy Concerns ,
Regulatory Violations ,
Roku ,
State Attorneys General ,
VPPA
Join us for a special crossover episode of The Consumer Finance Podcast and Regulatory Oversight, where Chris Willis, Kim Phan, and Gene Fishel delve into the evolving world of state AI legislation. As AI becomes a pivotal...more
Join us for a special crossover episode of The Consumer Finance Podcast and Regulatory Oversight, where Chris Willis, Kim Phan, and Gene Fishel delve into the evolving world of state AI legislation. As AI becomes a pivotal...more
Several state attorneys general (AGs) and the Federal Trade Commission (FTC) have begun scrutinizing ancestry tracking company 23andMe following its recent announcement that it has filed for Chapter 11 bankruptcy. As part of...more
4/7/2025
/ 23andMe ,
Bankruptcy Court ,
Biometric Information ,
Chapter 11 ,
Commercial Bankruptcy ,
Consumer Privacy Rights ,
Data Breach ,
Data Privacy ,
Data Protection ,
DNA ,
Federal Trade Commission (FTC) ,
Genetic Materials ,
Popular ,
Privacy Concerns ,
Privacy Laws ,
State Attorneys General ,
State Privacy Laws
Our company experienced a cybersecurity incident. It seemed pretty minor — just a few suspicious emails and an employee’s account being locked. To my dismay, we’re now hearing from our IT team that the issue is more serious....more
On February 4, the Office of the Minnesota Attorney General (AG) released its second Report on Emerging Technology and Its Effect on Youth Well-Being, outlining the effects young Minnesota residents allegedly experience from...more
2/27/2025
/ Artificial Intelligence ,
Consumer Privacy Rights ,
Data Privacy ,
Data Security ,
Emerging Technologies ,
Innovative Technology ,
Machine Learning ,
Minors ,
Online Safety for Children ,
Social Media ,
State Attorneys General
State attorneys general (AGs) continue to play a pivotal role as innovators, shaping the regulatory environment by leveraging their expertise and resources to influence policy and practice. The public-facing nature of AG...more
1/30/2025
/ Advertising ,
Artificial Intelligence ,
Cybersecurity ,
Data Privacy ,
Enforcement Actions ,
Environmental Policies ,
Federal Contractors ,
Healthcare ,
Marketing ,
Pharmaceutical Industry ,
Regulatory Violations ,
State Attorneys General ,
Technology Sector
As one of her last acts in office, on December 24, 2024, Oregon Attorney General (AG) Ellen Rosenblum issued guidance for businesses deploying artificial intelligence (AI) technologies. The guidance highlights the risks...more
1/13/2025
/ Artificial Intelligence ,
Bias ,
Consumer Privacy Rights ,
Cybersecurity ,
Data Privacy ,
Data Protection ,
Discrimination ,
Machine Learning ,
Oregon ,
Privacy Laws ,
State Attorneys General ,
State Privacy Laws
Since the passage of the California Consumer Privacy Act (CCPA) in 2018, and in the absence of a comprehensive data privacy law at the federal level, states have increasingly sought to enact their own privacy...more
On September 4, Texas Attorney General (AG) Ken Paxton filed a lawsuit against the Department of Health and Human Services (HHS) Office for Civil Rights (OCR), challenging two key Health Insurance Portability and...more
9/13/2024
/ Data Privacy ,
Department of Health and Human Services (HHS) ,
Health Insurance Portability and Accountability Act (HIPAA) ,
Healthcare ,
HIPAA Privacy Rule ,
OCR ,
PHI ,
State and Local Government ,
State Attorneys General ,
State Privacy Laws ,
Statutory Authority ,
Texas
“Dear Mary” is Troutman Pepper’s Incidents + Investigations team’s advice column. Here, you will find Mary’s answers to questions about anything and everything cyber-related — data breaches, forensic investigations, how to...more
“Dear Mary” is Troutman Pepper’s Incidents + Investigations team’s advice column. Here, you will find Mary’s answers to questions about anything and everything cyber-related — data breaches, forensic investigations, how to...more
Each of the 50 states has its own definition of what constitutes a reportable data breach. For some, it requires “unauthorized access” to personal information. For others, it requires “unauthorized acquisition.” And then,...more
7/25/2024
/ Cybersecurity ,
Data Breach ,
Data Collection ,
Data Privacy ,
Data Protection ,
Data Security ,
Data Theft ,
Identity Theft ,
Personal Data ,
Personally Identifiable Information ,
Unauthorized Access
In an unusual move, attorneys general (AG) from 30 states and the District of Columbia filed a bipartisan amicus brief in the Ninth Circuit supporting efforts to revive a proposed class action against payment processor...more
7/25/2024
/ Amicus Briefs ,
Class Action ,
Data Collection ,
Data Privacy ,
Data Protection ,
Financial Services Industry ,
Internet Retailers ,
Payment Processors ,
Personal Jurisdiction ,
Personally Identifiable Information ,
Shopify ,
State Attorneys General ,
Unfair Competition Law (UCL)
In 2024, the landscape of state attorneys general (AGs) is poised for significant change, with numerous elections and regulatory actions reshaping priorities and enforcement strategies. This dynamic environment reflects the...more
7/23/2024
/ Advertising ,
Algorithms ,
Artificial Intelligence ,
California Consumer Privacy Act (CCPA) ,
Data Privacy ,
Department of Health and Human Services (HHS) ,
Energy Policy ,
Environmental Policies ,
Environmental Protection Agency (EPA) ,
Federal Trade Commission (FTC) ,
Financial Services Industry ,
Healthcare ,
Machine Learning ,
Marketing ,
Personal Data ,
Pharmaceutical Industry ,
Proposed Rules ,
Regulatory Agenda ,
Regulatory Authority ,
Social Media ,
State Attorneys General ,
State Privacy Laws
‘Dear Mary,’ is Troutman Pepper’s Incidents + Investigations team’s advice column. Here, you will find Mary’s answers to questions about anything and everything cyber-related – data breaches, forensic investigations, how to...more
On Tuesday, Texas Attorney General (AG) Ken Paxton announced the creation of a team dedicated solely to the prosecution and enforcement of Texas’ privacy laws. The team will focus on handling cases under at least seven...more
‘Dear Mary,’ is Troutman Pepper’s Incidents + Investigations team’s advice column. Here, you will find Mary’s answers to questions about anything and everything cyber-related – data breaches, forensic investigations, how to...more
In the latest episode of Regulatory Oversight, Troutman Pepper attorneys Gene Fishel and Joel Lutz welcome guests Aurelia Lewis and Beth Saunders of Lewis Media Partners to discuss evolving privacy laws and their impact on...more
On May 8, attorneys general (AG) from 14 states and the District of Columbia sent a letter to Congressional leadership opposing provisions of the recently proposed federal American Privacy Rights Act (APRA). In addition to...more
In a recent alert, we reported that California Attorney General (AG) Rob Bonta announced a settlement with DoorDash over allegations that the company violated the California Consumer Privacy Act (CCPA) and the California...more
3/5/2024
/ California ,
California Consumer Privacy Act (CCPA) ,
CalOPPA ,
Data Privacy ,
DoorDash ,
Marketing ,
Mobile Apps ,
Personal Information ,
State and Local Government ,
State Attorneys General ,
Statutory Violations
In the second settlement under the California Consumer Privacy Act (CCPA), California Attorney General (AG) Rob Bonta announced a settlement over allegations that DoorDash sold consumers' personal information in a manner that...more
3/4/2024
/ California ,
California Consumer Privacy Act (CCPA) ,
CalOPPA ,
Data Privacy ,
DoorDash ,
Marketing ,
Mobile Apps ,
Personal Information ,
State and Local Government ,
State Attorneys General ,
Statutory Violations
In a recent speech at Oxford University, U.S. Deputy Attorney General (AG) Lisa Monaco announced that the U.S. Department of Justice (DOJ) will now seek stiffer penalties for crimes involving, and aided by, artificial...more
In the latest episode of Regulatory Oversight, Troutman Pepper Partner Judy Jagdmann and Counsel Gene Fishel are joined by Sam Kaplan, assistant general counsel for public policy for Palo Alto Networks. They engage in an...more
As we discussed in part three of this series, “Navigating the Complexities of Regulatory Data Incident Investigations,” when an organization is the subject of regulatory data incident investigations, it must navigate a...more
2/19/2024
/ Consumer Privacy Rights ,
Cybersecurity ,
Data Breach ,
Data Privacy ,
Data Protection ,
Data Security ,
Incident Response Plans ,
Investigations ,
NIST ,
Personal Data ,
Personally Identifiable Information ,
Privacy Laws ,
Regulatory Oversight ,
Regulatory Reform ,
Regulatory Requirements ,
Settlement