News & Analysis as of July 15, 2025

Enforcement Actions

+ Follow

Follow this channel for advisories on one of the biggest threats to businesses today. Read a morning brief of fresh guidance and commentary by leading lawyers on security, privacy, risk... more +

Follow this channel for advisories on one of the biggest threats to businesses today. Read a morning brief of fresh guidance and commentary by leading lawyers on security, privacy, risk management, global regulations, data protection, leaks, hacking, cyber insurance, compliance, HIPAA, and every other aspect of cybersecurity of import to corporate readers right now. less -

UK Data Protection Regulator Fines 23andMe ~$3.1 Million Following Credential Stuffing Attack

Alston & Bird on 7/3/2025

On June 5, 2025, the UK’s Information Commissioner’s Office (ICO) fined 23andMe £2.31 million (~$3.1 million). The fine was for failing to implement adequate security measures to protect the personal data of over 155,000 UK...more

Privacy, Data and Cybersecurity Quick Clicks | Issue 30

Katten Muchin Rosenman LLP on 6/27/2025

Katten's Privacy, Data and Cybersecurity Quick Clicks is a monthly newsletter highlighting the latest news and legal developments involving privacy, data and cybersecurity issues across the globe....more

China Monthly Data Protection Update: June 2025

Dacheng on 6/23/2025

This monthly report outlines key developments in China’s data protection sector for June. TC260 Two Cybersecurity Practice Guidelines on Personal Information Protection Compliance Audits: On May 19, 2025, TC260 issued two...more

Right To Know - June 2025, Vol. 30

Clark Hill PLC on 6/19/2025

Cyber, Privacy, and Technology Report - Welcome to your monthly rundown of all things cyber, privacy, and technology, where we highlight all the happenings you may have missed. State Action: North Dakota Passes Law...more

China Monthly Data Protection Update: May 2025

Dacheng on 5/29/2025

This monthly report outlines key developments in China’s data protection sector for May. The following events merit special attention...more

FTC Order with GoDaddy Finalized Over Lax Data Security

Robinson+Cole Data Privacy + Security Insider on 5/23/2025

On May 21, 2025, the Federal Trade Commission (FTC) finalized its order with GoDaddy over allegations that GoDaddy “failed to implement standard data security tools and practices to protect customers’ websites and data.” In a...more

Right To Know - May 2025, Vol. 29

Clark Hill PLC on 5/14/2025

Welcome to your monthly rundown of all things cyber, privacy, and technology, where we highlight all the happenings you may have missed. State Action: Virginia Governor Signs Bill Restricting Minor’s Use of Social Media:...more

The BR Privacy & Security Download: May 2025

Blank Rome LLP on 5/9/2025

Welcome to this month’s issue of The BR Privacy & Security Download, the digital newsletter of Blank Rome’s Privacy, Security, & Data Protection practice. We invite you to share this resource with your colleagues and visit...more

Blakes Data Governor: May 2025

Blake, Cassels & Graydon LLP on 5/7/2025

Welcome to Blakes Data Governor, a new publication of the Blakes Privacy & Data Protection group. Blakes Data Governor provides actionable insights and practical overviews of recent developments impacting privacy,...more

Key Themes From the 2025 IAPP Global Privacy Summit

Skadden, Arps, Slate, Meagher & Flom LLP on 5/5/2025

On April 23 and 24, 2025, regulators, industry leaders and data privacy leaders from across the globe convened in Washington, D.C. for the 2025 International Association of Privacy Professionals (IAPP) Global Privacy Summit....more

NFL Draft Provides Wake-Up Call on Protecting Confidential Information While Working Remotely

Paul Hastings LLP on 5/5/2025

Last week’s NFL draft highlighted more than the accomplishments of athletes at the combine or on the field. While there was extensive coverage of the merits of each player, one of the major headlines coming out of the draft...more

Decoded - Technology Law Insights, V 6, Issue 4, April 2025

Spilman Thomas & Battle, PLLC on 4/24/2025

Welcome to our fourth issue of 2025 of Decoded - our technology law insights e-newsletter. We hope you enjoy this issue and thank you for reading. Sector by Sector: How Data Breaches are Wrecking Bottom Lines - “Data...more

China Monthly Data Protection Update: April 2025

Dacheng on 4/17/2025

This monthly report outlines key developments in China’s data protection sector for April....more

Right To Know - April 2025, Vol. 28

Clark Hill PLC on 4/11/2025

Welcome to your monthly rundown of all things cyber, privacy, and technology, where we highlight all the happenings you may have missed. ...more

UK’s Data Protection Regulator Fines a UK SaaS Provider ~$4 Million Following a Ransomware Incident

Alston & Bird on 4/7/2025

On March 26, 2025, the UK data protection regulator (the Information Commissioner’s Office (“ICO”)) fined Advanced Computer Software Group Ltd (“Advanced”) £3.07 million (approximately $4 million). In 2022, Advanced suffered...more

China Monthly Data Protection Update: March 2025

Dacheng on 4/2/2025

This monthly report outlines key developments in China’s data protection sector for March. The following events merit special attention...more

UK GDPR Regulator Fines Data Processor After Ransomware Attack

Skadden, Arps, Slate, Meagher & Flom LLP on 4/1/2025

On 27 March 2025, the UK Information Commissioner’s Office (ICO) issued a £3.07 million fine to an IT services provider following a ransomware attack in 2022 that affected the company’s health care business. The ransomware...more

Decrypting the Craic: The latest updates on data protection, cyber, and AI in Ireland

Hogan Lovells on 3/31/2025

As technology continues to advance at a rapid pace, issues surrounding privacy, cybersecurity, and AI law have become increasingly prominent. In Ireland, this has sparked a series of legal developments in recent months, aimed...more

Recent Enforcement Reminds Companies: Assess HIPAA Compliance

Gardner Law on 3/20/2025

A HIPAA compliance assessment is an evaluation of an organization's practices, policies, and procedures to ensure that they align with requirements from the Health Insurance Portability and Accountability Act (“HIPAA”). It...more

The UK’s Online Safety Act (OSA): What you need to do now

A&O Shearman on 3/18/2025

We are now on the first stop – illegal harms – of Ofcom’s (the UK’s online safety regulator) roadmap for what online providers must do to comply with the OSA. - By March 16, 2025, in-scope services must assess the risk of...more

Right To Know - March 2025, Vol. 27

Clark Hill PLC on 3/17/2025

Cyber, Privacy, and Technology Report - Welcome to your monthly rundown of all things cyber, privacy, and technology, where we highlight all the happenings you may have missed....more

CHINA: Recent Enforcement Trends

DLA Piper on 3/12/2025

Recently, the Cyberspace Administration of China (CAC), which is the primary data regulator in China, published a newsletter about the government authorities’ enforcement of Apps and websites that violated personal data...more

$1.5M Warby Parker Fine a Holdover; OCR Focuses On Men in Sports, Antisemitism, ‘Biological Truth’

Health Care Compliance Association (HCCA) on 3/12/2025

Nearly six years to the day that Warby Parker reported a breach affecting nearly 200,000 individuals, the HHS Office for Civil Rights (OCR) imposed a $1.5 million fine on the eyewear giant. Investigated by OCR under the Biden...more

MoForecast: State AGs and the Future of Privacy Enforcement – What You Need to Know

Morrison & Foerster LLP on 3/5/2025

Faced with emerging challenges in privacy and cybersecurity, state attorneys general (AGs) are at the forefront of enforcement. Companies face increasing expectations to implement robust cybersecurity programs, promptly...more

Something Old, Something New: Latest NYDFS Cybersecurity Regulation Enforcement Action Emphasizes Policy Implementation, Training,...

Wyrick Robbins Yates & Ponton LLP on 2/26/2025

The New York State Department of Financial Services recently announced that it has entered into a consent order with PayPal, Inc. for violations of the NYDFS Cybersecurity Regulation. The consent order, under which PayPal has...more

323 Results

View per page

Page: of 13

Cybersecurity › Data Protection › Enforcement Actions

"My best business intelligence, in one easy email…"