12 Days of Regulatory Insights: Day 8 – How State AGs Are Rewriting Social Media Rules — Regulatory Oversight Podcast
12 Days of Regulatory Insights: Day 5 – Privacy Under the Microscope — Regulatory Oversight Podcast
Consumer Finance Monitor Podcast Episode: The CFPB's Proposed Data Broker Rule
RegFi Episode 9: Consumer Data Collection and Usage with Eric Ellman
CFPB's Rulemaking Under the FCRA (Part 3) – Crossover Episode With FCRA Focus Podcast
CFPB's Rulemaking Under the FCRA (Part 3) – Crossover Episode With The Consumer Finance Podcast
CFPB's Rulemaking Under the FCRA (Part 2) – Crossover Episode With FCRA Focus Podcast - Consumer Finance Podcast
CFPB's Rulemaking Under the FCRA (Part 2) – Crossover Episode With The Consumer Finance Podcast - FCRA Focus Podcast
CFPB Request for Information About the Status of Data Brokers Under the Fair Credit Reporting Act - The Consumer Finance Podcast
Episode 8: Why brokers, not breaches, are America's greatest privacy threat (with Rob Shavell)
Key point: In this post: (1) increase in ECPA litigation as courts extend “crime tort” exception beyond health care; (2) service provider wins again against wiretapping claim; (3) defendants lose standing arguments in federal...more
As AI systems became more deeply embedded in consumer‑facing products and services throughout 2025, regulators and private plaintiffs continued to test how existing privacy and consumer‑protection laws apply to the...more
The January 31 deadline for companies that operated as data brokers in 2025 to register in California has passed, but registration is just the beginning of what lies ahead for data brokers in the remainder of 2026 (and...more
While it’s impossible to agree on whether 2026 will be the Year of Youth Privacy, the Year of the Data Broker, or (another) Year of the Cookie, one thing we can agree on is that it promises not to be boring! Wait…did we...more
Data Privacy Day offers a natural checkpoint to take stock of a fast‑moving legal landscape. As of January 1, 2026, several significant U.S. state privacy laws and regulatory updates are now live, with additional U.S. and...more
CalPrivacy followed up on its threat from last year to focus on data brokers. This month it settled with Rickenbacher Data LLC for failure to register as a data broker. The company is a Texas-based company that operates as...more
While 2025 saw no new state comprehensive privacy laws enacted, state enforcement activity accelerated—individually and collaboratively—reflecting trends likely to intensify in 2026. Key enforcement focus areas included...more
The new year is off to a quick start. February looms. Businesses are beginning to settle into 2026, and some trends (or at least outlines of such) are beginning to emerge. Businesses are digesting the AI and privacy bills...more
The California Department of Financial Protection and Innovation (“DFPI”) has issued a Second Invitation for Comments on a proposed rulemaking that would expand registration and reporting requirements under the California...more
2025 was one of the most active years in recent memory for US state-level privacy enforcement. California and Texas led the way, and we anticipate Colorado, Connecticut, Maryland, Minnesota, Oregon, and New Jersey to emerge...more
The California Privacy Protection Agency has issued two new enforcement decisions that underscore its expanding focus on data broker accountability under the Delete Act. In actions announced on January 8, 2026, CalPrivacy...more
What Businesses Need to Know - Contrary to the expectations of many in the privacy field, no new state-level data privacy laws were passed in 2025. As we enter 2026, however, several laws that were passed in 2024, along...more
California’s 2025 legislative session ended with a familiar message to businesses: privacy compliance is expanding in scope, and artificial intelligence (AI) governance is moving quickly from voluntary best practices to...more
Enforcement of California’s Delete Act is accelerating. The California Privacy Protection Agency (CPPA) recently sent a clear message to data brokers: register, pay the required fee, and be prepared to defend your data...more
On January 8, the California Privacy Protection Agency (CalPrivacy) announced it had taken enforcement actions against two companies for failing to register as data brokers, in violation of California’s Delete Act, by the...more
2025 was a year of rapid technological advancements with respect to artificial intelligence (AI). There were also significant legal developments, with a few states moving to enact AI-focused legislation. California emerged as...more
Recent developments under California’s data broker law, the Delete Act, signal intensified focus by the California Privacy Protection Agency (“CalPrivacy”) on businesses that sell personal information. In particular,...more
Four states have adopted laws regulating data brokers, but only one – California – has established a universal deletion mechanism whereby consumers are able to request that all data brokers registered in the state delete...more
On January 12, 2026, the California Department of Financial Protection and Innovation (DFPI) issued an invitation for comments on a proposed rulemaking concerning registration and reporting for consumer-reporting providers....more
As we enter 2026, the changes of the last several years are no longer abstract. Technology decisions are now examined closely by regulators, courts and counterparties, often long after those decisions were made. At the same...more
The California Privacy Protection Agency (known as CalPrivacy) recently published its latest enforcement strikes against two data brokers for failing to register. ...more
Welcome to this month’s issue of The BR Privacy & Security Download, the digital newsletter of Blank Rome’s Privacy, Security & Data Protection practice....more
Epstein Becker Green’s previous blog post on this topic encouraged U.S. organizations across all industries with cross-border operations – including health care/life sciences, finance, e-commerce, and research – to “know...more
On December 17, 2025, CalPrivacy, California’s privacy enforcement agency, issued Enforcement Advisory No. 2025-01 to provide guidance on data broker registration. The Advisory focuses on requirements related to trade names,...more
On December 17, 2025, the California Privacy Protection Agency ("CalPrivacy") issued Enforcement Advisory No. 2025-01, providing guidance on revised data broker registration requirements related to trade names, websites, and...more