News & Analysis as of May 9, 2025

Enforcement Actions

+ Follow

Follow this channel for advisories on one of the biggest threats to businesses today. Read a morning brief of fresh guidance and commentary by leading lawyers on security, privacy, risk... more +

Follow this channel for advisories on one of the biggest threats to businesses today. Read a morning brief of fresh guidance and commentary by leading lawyers on security, privacy, risk management, global regulations, data protection, leaks, hacking, cyber insurance, compliance, HIPAA, and every other aspect of cybersecurity of import to corporate readers right now. less -

FTC Signals Heightened Scrutiny on the Security of APIs

BakerHostetler on 2/10/2025

On Jan. 15, the Federal Trade Commission (FTC) announced a proposed settlement with web hosting giant GoDaddy over alleged violations of Section 5 of the FTC Act. Specifically, the FTC alleged that GoDaddy had violated the...more

CPPA Announces Settlements with Data Brokers for Failure to Register Under the Delete Act

Ballard Spahr LLP on 11/18/2024

On November 14, 2024, the California Privacy Protection Agency (“CPPA”), which is tasked with enforcing the California Consumer Privacy Act (the “CCPA”), announced it settled with two data brokers, Growbots, Inc. and UpLead...more

Penn State Settlement Shows Growing Cybersecurity Risks for Schools That Contract With Government Agencies on Sensitive Matters

Carlton Fields on 11/5/2024

Penn State recently agreed to pay $1.25 million to settle allegations of False Claims Act violations related to its cybersecurity controls after a whistleblower alleged that the university failed to adhere to cybersecurity...more

FTC Continues Focus on Disclosure of Health Information to Third-Party Technologies

BakerHostetler on 5/23/2024

A recently announced settlement with online alcohol addiction treatment service Monument Inc. demonstrates the Federal Trade Commission’s (FTC) continued focus on the use and disclosure of health data. The proposed settlement...more

Bad Medicine: 5 Lessons from the Connecticut AG’s Report on CTDPA Cure Notices

Wyrick Robbins Yates & Ponton LLP on 2/15/2024

On February 1, 2024, the Connecticut Office of the Attorney General (“OAG”) issued a Report to the General Assembly’s General Law Committee (“Report”), summarizing the OAG’s enforcement efforts during six months since the...more

Attorneys General Bring Multistate Data Breach Settlement Against DNA Testing Lab

WilmerHale on 2/23/2023

On February 17, 2023, the state attorneys general of Pennsylvania and Ohio reached a settlement with Ohio-based DNA Diagnostics Center (“DDC”) for a 2021 data breach that affected 2.1 million individuals nationwide and...more

US Crypto Exchange Consents to $100M DFS Settlement for AML Compliance Failures

BakerHostetler on 1/17/2023

On January 4, 2023, the New York State Department of Financial Services (“DFS”) announced that Coinbase, Inc., a major U.S. cryptocurrency exchange, will pay a $50 million penalty and invest an additional $50 million in its...more

New York State Department of Financial Services Publishes First Crypto Industry Consent Order

BakerHostetler on 8/15/2022

On August 1, 2022, the New York State Department of Financial Services (“DFS” or “Department”) issued a Consent Order, imposing a $30 million fine on Robinhood Crypto, LLC (“Robinhood”), a trading platform that allows...more

New York DFS Fines Robinhood $30M for “Significant” Cybersecurity Violations

Robinson+Cole Data Privacy + Security Insider on 8/4/2022

The New York Department of Financial Services (DFS) announced its first ever penalty against a cryptocurrency platform this week, with a whopping $30 million fine assessed against Robinhood Crypto, LLC (RHC) for what it...more

German court drastically reduces GDPR fine

Hogan Lovells on 11/18/2020

Germany has seen a couple of record GDPR fines since the German Data Protection Authorities (DPA) issued their guidance paper on how to measure GDPR fines in October 2019. One of these DPA sanctions was recently subject to...more

Long-Awaited DFS Cyber Enforcement Action Sees Charges Filed Against Title Insurer For Exposing Millions of Documents Containing...

Hinshaw & Culbertson - Consumer Crossroads on 7/25/2020

After several years of anticipation, the New York State Department of Financial Services (DFS) has filed its first enforcement action under the agency's groundbreaking and first-in-the-nation 2017 cybersecurity regulation...more

11 Results

View per page

Page: of 1

Cybersecurity › Statutory Violations › Enforcement Actions

"My best business intelligence, in one easy email…"