Oklahoma: Changing Data Privacy as We Know It?
The CCPA for the Land Title Industry: Service Providers and Sale of Data Under the CCPA
Texas AG Ken Paxton has sued General Motors LLC and its subsidiary OnStar LLC (collectively “GM”) over allegations that GM misled vehicle purchasers into enrolling in programs that collected and shared their driving data with...more
This week, Ken Paxton, the Texas Attorney General, filed suit against General Motors for alleged violations of the Texas Deceptive Trade Practices Act in collecting and selling drivers’ data to insurers without consumer...more
On May 9, 2024, Governor Wes Moore signed the Maryland Online Data Privacy Act (MODPA), making Maryland the seventeenth state to enact a comprehensive data privacy law. While similar in certain respects to most Virginia Model...more
On May 9, 2024, in X Corp. v. Bright Data Ltd., the U.S. District Court for the Northern District of California dismissed X’s claims alleging that Bright Data’s access to X’s systems, and scraping and selling of publicly...more
On April 6, the Maryland legislature passed the Maryland Online Data Privacy Act of 2024, sending the bill to the state’s governor for signing. The bill comes on the heels of the Kentucky Consumer Data Protection Act, which...more
According to Chair Lina Khan, the Federal Trade Commission (“FTC”) recent action against Avast Limited and its subsidiaries for $16.5 million is the “highest monetary remedy in a de novo privacy violation case” and the first...more
In just a few short weeks, a new front may emerge for biometrics litigation in the United States. On March 31, 2024, the My Health My Data Act (“MHMDA”) will go into effect in Washington for most entities that conduct...more
On January 18, the FTC issued a consent order prohibiting a digital platform and data aggregator from selling or licensing precise consumer location data on the grounds that it did not obtain consumer consent before...more
Following several years of investigating the common practices in the space, the Federal Trade Commission (FTC) reached its first settlement with a data broker over the alleged collection and sale of location information that...more
Both Texas and Oregon recently adopted rules that will, among other things, implement a registry required by both states’ data broker laws. The Texas law went into effect September 1, 2023, and the Oregon law will go into...more
The Situation: California has enacted a groundbreaking new privacy law aimed at data brokers—entities that sell information about consumers with whom they do not have a direct relationship. Under the Delete Act (SB 362), data...more
On October 10, Governor Newsom signed SB 362, a law requiring any business that meets the definition of “data broker” to provide detailed disclosures about its practices, register with the state and delete any personal...more
California recently passed a groundbreaking new law aimed at further regulating the data broker industry. California is already one of only three states (along with Oregon and Vermont) that require data brokers—businesses...more
Massachusetts lawmakers are considering banning the sale of cellular location data across the state, which would be the first legislation of its kind in the country. The Massachusetts Location Shield Act was proposed in the...more
The headline is a mouthful, but in the time you read this column your personal data has probably been collected by the more sophisticated vendors with whom you do business and is being used to target you for more purchases....more
On Wednesday, March 15, the Consumer Financial Protection Bureau (CFPB) announced an inquiry into data brokers, issuing a “Request for Information Regarding Data Brokers and Other Business Practices Involving the Collection...more
The Consumer Financial Protection Bureau (CFPB) has issued a request for information (RFI) to examine the practices of data brokers and businesses involved in the collection, use, and sale of consumer information on March 15,...more
The Federal Trade Commission (FTC) recently filed a complaint against a data broker alleging that the collection and sale of precise location data significantly harms consumers, especially if the data contains information...more
The Federal Trade Commission (“FTC”) on Monday, August 29, 2022, sued Idaho-based Kochava Inc., a data broker, in the United States District Court for the District of Idaho, seeking a permanent injunction and other relief for...more
On August 24, 2022, California Attorney General Rob Bonta announced a settlement with Sephora, Inc. that included a fine of $1.2 million for alleged violations of the California Consumer Privacy Act (CCPA). The settlement is...more
In the first of its kind under the California Consumer Privacy Act (CCPA), Sephora settled an enforcement action with the California Attorney General for violation of the CCPA. Sephora must pay $1.2 million in penalties and...more
On June 15, 2022, Senator Elizabeth Warren introduced a bill, cosponsored by a host of other Democratic and independent Senators, the “Health and Location Data Protection Act of 2022,” which, subject to a few exceptions,...more
On June 8, 2021, the Colorado Senate passed SB21-190, the Colorado Privacy Act (CPA), as amended by the Colorado House of Representatives. Governor Jared Polis signed the bill into law on July 8. Passage of the CPA makes...more
On June 2, Nevada’s Governor approved amendments to NRS 603A.300-360, the state’s internet privacy legislation. The amended law would expand the definition of “sales” to mean transfers of covered information to operators or...more
Millions of vaccinated Americans — now maskless — surely can’t wait to rekindle their love affair with their iPhone’s facial recognition technology. Meanwhile, these same people are probably less eager for the bars,...more