A federal court in Michigan significantly narrowed Michigan Attorney General (AG) Dana Nessel’s privacy and consumer protection case against Roku, Inc. (Roku) dismissing all non-Children’s Online Privacy Protection Act...more
4/8/2026
/ COPPA ,
Data Collection ,
Data Privacy ,
Enforcement Actions ,
Federal Court Litigation ,
Jurisdiction ,
Motion to Dismiss ,
Online Safety for Children ,
Personal Information ,
Roku ,
Standing ,
State Attorneys General ,
State Privacy Laws
Tennessee’s new law prohibits parties that develop or deploy AI systems from advertising or representing to the public that the AI systems can act as a qualified mental health professional.
...more
Key point: If enacted, the bill will require GenAI systems to provide a conspicuous warning that GenAI outputs may be inaccurate.
...more
3/13/2026
/ Algorithms ,
Artificial Intelligence ,
Corporate Counsel ,
Disclosure Requirements ,
Emerging Technologies ,
Enforcement Actions ,
Innovative Technology ,
Machine Learning ,
New York ,
Proposed Legislation ,
Regulatory Agenda ,
Regulatory Oversight ,
Regulatory Requirements ,
State Legislatures
On February 17, 2026, Alabama Governor Kay Ivey signed HB 161 into law. In doing so, Alabama joins Texas, Utah, and Louisiana as states having passed app store laws. California passed a similar-in-concept Digital Age...more
2/19/2026
/ App Store ,
Enforcement Actions ,
Minors ,
Mobile Apps ,
New Legislation ,
Parental Consent ,
Regulatory Reform ,
Regulatory Requirements ,
State and Local Government ,
State Legislatures ,
Unfair or Deceptive Trade Practices ,
Verification Requirements
Key point: The California attorney general announced a $2.75 million fine against a company for CCPA violations for failing to honor requests to opt out of the sale or sharing of personal information across all devices and...more
2/13/2026
/ California ,
California Consumer Privacy Act (CCPA) ,
California Privacy Protection Agency (CPPA) ,
Consumer Privacy Rights ,
Data Privacy ,
Enforcement Actions ,
Opt-Outs ,
Personal Information ,
Privacy Laws ,
Settlement ,
State Attorneys General ,
State Privacy Laws
Key point: The Connecticut Office of the Attorney General issued the third annual enforcement report under the Connecticut Data Privacy Act, focusing on the office’s privacy and security efforts, consumer complaints, data...more
Key point: The law, which went into effect at signing, contains significant design and development requirements, requires independent third-party audits, and can be enforced against officers and employees.
On February 5,...more
2/6/2026
/ COPPA ,
Data Privacy ,
Data Protection ,
Enforcement Actions ,
Minors ,
New Legislation ,
Online Safety for Children ,
Personal Data ,
Regulatory Requirements ,
State Attorneys General ,
State Privacy Laws ,
Unfair or Deceptive Trade Practices
Miss the most recent webinar from the Osano team? Did your question not come up during discussion? Don't worry: We've collated, condensed, and thematically grouped the questions from 2026 Privacy Laws: New Laws, Amendments,...more
2/5/2026
/ California Consumer Privacy Act (CCPA) ,
California Privacy Protection Agency (CPPA) ,
CIPA ,
Consent ,
Cookies ,
Data Management ,
Data Privacy ,
Data Protection ,
Risk Assessment ,
State Privacy Laws ,
Wiretapping
Key point: Kentucky attorney general files a lawsuit against an artificial intelligence chatbot company, eight days after the Kentucky Consumer Data Protection Act went into effect.
On January 8, the Kentucky attorney...more
1/12/2026
/ Artificial Intelligence ,
Bots ,
Consumer Protection Laws ,
COPPA ,
Data Collection ,
Data Privacy ,
Enforcement Actions ,
Minors ,
New Legislation ,
Online Safety for Children ,
Parental Consent ,
State Attorneys General ,
State Privacy Laws ,
Unfair or Deceptive Trade Practices
Key point: Businesses subject to the CCPA now must conduct risk assessments for certain types of processing activities and, starting in 2028, must certify to California regulators that they completed the assessments.
The...more
1/6/2026
/ California ,
California Consumer Privacy Act (CCPA) ,
California Privacy Protection Agency (CPPA) ,
Compliance ,
Corporate Counsel ,
Data Privacy ,
Data Protection ,
Privacy Laws ,
Regulatory Requirements ,
Risk Assessment ,
Risk Management
Key point: Set to take effect on January 1, 2026, court blocks the Texas App Store Accountability Act on constitutional grounds.
A Texas federal district court granted a preliminary injunction enjoining the Texas App...more
12/26/2025
/ App Developers ,
App Store ,
Constitutional Challenges ,
First Amendment ,
Minors ,
Mobile Apps ,
New Legislation ,
Online Platforms ,
Online Safety for Children ,
Preliminary Injunctions ,
State and Local Government ,
State Privacy Laws ,
Texas
The California AG’s fifth CCPA-related enforcement action focuses on the CCPA’s right to opt out of sales/shares and on children’s privacy provisions and, with respect to the right to opt out, it should trigger businesses to...more
11/4/2025
/ California ,
California Consumer Privacy Act (CCPA) ,
Consumer Privacy Rights ,
Cookies ,
Data Privacy ,
Data Protection ,
Data-Sharing ,
Enforcement Actions ,
Mobile Apps ,
Online Safety for Children ,
Opt-Outs ,
State Attorneys General ,
Unfair Competition Law (UCL) ,
Web Tracking
California’s new Digital Age Assurance Act will likely create significant compliance challenges for many businesses....more
10/28/2025
/ California ,
Consent ,
Cooperative Compliance Regime ,
Data Privacy ,
Digital Platforms ,
Internet ,
Mobile Apps ,
Mobile Devices ,
New Legislation ,
Online Safety for Children ,
Operating System Developers ,
Regulatory Reform ,
Regulatory Requirements ,
State Privacy Laws
The rules provide further guidance to controllers subject to the law’s children’s privacy protections.
...more
10/14/2025
/ Colorado ,
Comment Period ,
Consumer Privacy Rights ,
Data Controller ,
Data Privacy ,
Data Protection ,
Final Rules ,
Geolocation ,
Minors ,
Rulemaking Process ,
Sensitive Personal Information ,
State Privacy Laws
A federal district court judge rejected the claim that the disclosure law violates the First Amendment.
...more
10/13/2025
/ Algorithms ,
Automated Decision Systems (ADS) ,
Constitutional Challenges ,
Corporate Counsel ,
Disclosure Requirements ,
First Amendment ,
Goods or Services ,
New York ,
Pricing ,
Retail Market ,
State Attorneys General
The enforcement action alleges that the retailer failed to provide adequate privacy disclosures to website visitors and job applicants, failed to effectuate opt-out requests, including recognizing the Global Privacy Control...more
10/1/2025
/ California ,
California Consumer Privacy Act (CCPA) ,
California Privacy Protection Agency (CPPA) ,
Consumer Privacy Rights ,
Data Privacy ,
Data Protection ,
Enforcement Actions ,
Opt-Outs ,
Regulatory Violations ,
Retailers ,
State Privacy Laws ,
Website Owner Liability ,
Websites
Businesses subject to the CCPA must comply with extensive new regulations....more
9/24/2025
/ Automated Decision Systems (ADS) ,
California ,
California Consumer Privacy Act (CCPA) ,
California Privacy Protection Agency (CPPA) ,
Cyber Insurance ,
Cybersecurity ,
Data Privacy ,
Data Protection ,
New Regulations ,
Office of Administrative Law ,
Risk Assessment ,
Rulemaking Process
Children’s privacy remained a hot topic during the 2025 state legislative session, with multiple states passing laws, adding to the growing patchwork of children’s privacy laws....more
9/18/2025
/ California Consumer Privacy Act (CCPA) ,
COPPA ,
Corporate Counsel ,
Data Privacy ,
Data Protection Impact Assessments (DPIAs) ,
Minors ,
New Legislation ,
New Regulations ,
Online Safety for Children ,
Regulatory Agenda ,
Regulatory Reform ,
State Privacy Laws
Unable to reach an agreement on amending the Colorado AI Act during the special session, the Colorado legislature voted to delay the law’s effective date to June 30, 2026....more