News & Analysis as of May 5, 2025

Data Protection

+ Follow

Follow this channel for advisories on one of the biggest threats to businesses today. Read a morning brief of fresh guidance and commentary by leading lawyers on security, privacy, risk... more +

Follow this channel for advisories on one of the biggest threats to businesses today. Read a morning brief of fresh guidance and commentary by leading lawyers on security, privacy, risk management, global regulations, data protection, leaks, hacking, cyber insurance, compliance, HIPAA, and every other aspect of cybersecurity of import to corporate readers right now. less -

Guangzhou Internet Court issues the first decision on cross-border transfer of personal data under PIPL

Mayer Brown on 12/24/2024

The Guangzhou Internet Court (the “Court”) recently issued its first judgment involving the cross-border transfer of personal data under the Personal Information Protection Law (“PIPL”).1 An international hotel group was...more

CPPA Announces Settlements with Data Brokers for Failure to Register Under the Delete Act

Ballard Spahr LLP on 11/18/2024

On November 14, 2024, the California Privacy Protection Agency (“CPPA”), which is tasked with enforcing the California Consumer Privacy Act (the “CCPA”), announced it settled with two data brokers, Growbots, Inc. and UpLead...more

Penn State Settlement Shows Growing Cybersecurity Risks for Schools That Contract With Government Agencies on Sensitive Matters

Carlton Fields on 11/5/2024

Penn State recently agreed to pay $1.25 million to settle allegations of False Claims Act violations related to its cybersecurity controls after a whistleblower alleged that the university failed to adhere to cybersecurity...more

DoorDash Settles with California Attorney General for Alleged Violations of the CCPA

Robinson+Cole Data Privacy + Security Insider on 4/18/2024

DoorDash, Inc. recently settled with the California Attorney General for alleged violations of the California Consumer Privacy Act (CCPA) and the California Online Privacy Protection Act (CalOPPA). This is only the second...more

Connecticut Attorney General Issues Report on Data Privacy Act Enforcement; Offers Legislative Recommendations

Hinckley Allen on 3/25/2024

On February 1, 2024, the Connecticut Office of the Attorney General (the “OAG”) issued a report mandated by the Connecticut Data Privacy Act (the “CTDPA”), Conn. Gen. Stat. § 42-515 et seq. (the “Report”), which Report is...more

Bad Medicine: 5 Lessons from the Connecticut AG’s Report on CTDPA Cure Notices

Wyrick Robbins Yates & Ponton LLP on 2/15/2024

On February 1, 2024, the Connecticut Office of the Attorney General (“OAG”) issued a Report to the General Assembly’s General Law Committee (“Report”), summarizing the OAG’s enforcement efforts during six months since the...more

Italian Data Protection Authority Alleges Breaches of GDPR by ChatGPT Platform

Robinson+Cole Data Privacy + Security Insider on 2/2/2024

On January 29, 2024, the Italian Data Protection Authority (Garante) notified OpenAI of breaches of data protection laws involving its ChatGPT platform....more

FTC Proposes Stricter Children’s Privacy Rules in First COPPA Update since 2013

King & Spalding on 1/24/2024

On December 20, 2023, the Federal Trade Commission (FTC) announced proposed revisions to its rules administering the Children’s Online Privacy Protection Act (COPPA). The updates both expand the universe of businesses subject...more

District Court approves $1.75 million data breach settlement

Orrick, Herrington & Sutcliffe LLP on 3/24/2023

On March 3, the U.S. District Court for the Central District of California granted final approval of a $1.75 million class action settlement resolving allegations related to a 2020 data breach that compromised nearly 100,000...more

Data Privacy + Cybersecurity Insider - January 2023 #3

Robinson & Cole LLP on 1/27/2023

CYBERSECURITY - Chick-Fil-A Sued for Sharing Data through Meta Pixel - While plaintiffs’ attorneys were initially focused late last year on suing health care entities for using Pixel and other tracking technology to share...more

Privacy.Minded: The CCPA Enforcement Action Against Sephora Offers A Warning To Businesses Who Are Still Behind On Compliance

Stradling Yocca Carlson & Rauth on 9/2/2022

On August 24, 2022, the California Attorney General’s Office announced a settlement with Sephora, Inc., resolving allegations that Sephora violated the California Consumer Privacy Act (“CCPA”). At the same time, the Attorney...more

Not So Pretty: Top Takeaways From First CCPA Settlement With Sephora and Updated Enforcement Case Examples

Troutman Pepper Locke on 9/1/2022

With the notice and cure set to expire on January 1, 2023, California Attorney General Rob Bonta (CA AG) provided a glimpse at what to expect with its first settlement of alleged violations of the California Consumer Privacy...more

California Attorney General Announces $1.2 Million CCPA Settlement With Sephora Amid Ongoing Enforcement Sweep

Cooley LLP on 8/29/2022

On August 24, 2022, California Attorney General Rob Bonta announced a $1.2 million settlement with cosmetics retailer Sephora to resolve allegations that it violated the California Consumer Privacy Act (CCPA) and failed to...more

Data Privacy + Cybersecurity Insider - August 2022 #4

Robinson & Cole LLP on 8/26/2022

CYBERSECURITY - Cyber-Attack Disrupts Public Services in Fremont County, Colorado - Government offices and public services in Fremont County, Colorado, have been disrupted since August 17, 2022, due to a “cybersecurity...more

Belgian DPA Fines IAB: Rough Waters Ahead for Ad Industry

Dechert LLP on 2/7/2022

On February 2, 2022, the Belgian Data Protection Authority (“DPA”) issued a decision finding that the Interactive Advertising Bureau ("IAB”) Europe’s Transparency and Consent Framework (“TCF”) violates key provisions of the...more

Datenschutz vor Gericht - rechtssichere Reaktion auf Datenpannen, Cyber Security-Vorfälle und sonstige mögliche...

Latham & Watkins LLP on 7/20/2021

Immer häufiger müssen Gerichte über Verfahren wegen tatsächlichen oder behaupteten Bußgeldverstößen entscheiden. Hierbei geht es oft um sehr hohe Beträge und erhebliche persönliche Haftung für die beteiligten...more

Class Action Suits Attempt To Stretch Consumers’ Ability To Sue For CCPA Violations

Stradling Yocca Carlson & Rauth on 1/27/2021

The CCPA’s Private Right Of Action - The CCPA gives consumers several new “Privacy Rights”—such as the right to know how their personal information is collected, used and shared, the right to request deletion of their...more

German court drastically reduces GDPR fine

Hogan Lovells on 11/18/2020

Germany has seen a couple of record GDPR fines since the German Data Protection Authorities (DPA) issued their guidance paper on how to measure GDPR fines in October 2019. One of these DPA sanctions was recently subject to...more

Data Privacy Bill Introduced in Washington State

Morgan Lewis on 1/29/2020

Washington may be the next state to enact its own data privacy law after a bill was introduced into the Washington State Senate earlier this month. Known as the Washington Privacy Act, the bill’s sponsor, Sen. Reuven Carlyle,...more

Landmark FTC Settlement Offers Important Lessons for Businesses That May Collect or Use Children’s Information

Akin Gump Strauss Hauer & Feld LLP on 9/10/2019

On September 4, 2019, the Federal Trade Commission (FTC or the “Commission”) announced a settlement with YouTube and its parent Google that resolves allegations that the companies violated the Children’s Online Privacy...more

French Regulator Says "Oui" to GDPR Fines for Under-Protected and Over-Retained Data

Sheppard Mullin Richter & Hampton LLP on 7/30/2019

NIL, the French data privacy regulator, issued a 400,000 euro ($448,358) fine against a company for GDPR violations stemming from sensitive information collected on its website. Investigating a complaint, CNIL discovered that...more

21 Results

View per page

Page: of 1

Cybersecurity › Statutory Violations › Data Protection

"My best business intelligence, in one easy email…"