Podcast: Digital Taxation—Implications for EU Technology Companies
E17: Carpenter Decision Builds Up Privacy from #SCOTUS
The U.S. Supreme Court seldom takes up privacy cases, but the 2026 term includes two matters that could have profound implications for how businesses collect, retain, and disclose data. ...more
Last year, we wrote about a constitutional challenge bubbling up in the Fourth Circuit relating to "geofence warrants," which require production of location data showing whether a cell phone was near the scene of a crime at...more
Just two weeks ago, I wrote on this blog about how sometimes, it takes the law a while to catch up to technology. Specifically, I wrote about a case that held that flying a drone over your spouse’s home and remotely accessing...more
The FTC settled with General Motors LLC, General Motors Holdings LLC, and OnStar LLC (collectively, “GM”) to resolve allegations that the companies collected, used, and sold consumers’ precise geolocation and driving data...more
A recent Pennsylvania Supreme Court ruling could have broad implications for internet privacy, and employers should take note. The state’s high court ruled in December that individuals do not have a reasonable expectation of...more
Earlier this month an appellate court in New Jersey issued an opinion in State v. Bryant, holding that tower dumps are Fourth Amendment searches that require particularized warrants supported by probable cause. This...more
Ohio’s new age-verification law for online adult content, which requires online platforms to limit certain users’ access to sensitive material, took effect on September 30, 2025. The statute, RC § 1349.10, asks covered...more
California has set what may be an emerging trend with AB 45, restricting collection and use of personal information collected near family planning facilities. The law was signed recently by h Governor Newsom and is set to go...more
Higher education institutions face unique data privacy and cybersecurity challenges. They are at the forefront of technological and research innovation and have become an increasingly attractive target for cybersecurity...more
Recently, California’s Governor signed Assembly Bill (AB) 45, which builds on existing California laws, such as the Confidentiality of Medical Information Act, seeking to protect individuals seeking certain healthcare...more
On September 2, 2025, the Federal Trade Commission filed a complaint and proposed order against toy manufacturer Apitor Technology Co., Ltd. (Apitor), alleging that the company violated the Children’s Online Privacy...more
California’s legislature has once again taken center stage in the national privacy conversation, passing a flurry of privacy bills during a marathon session that stretched into the night of September 12....more
The Massachusetts AG enforces the state's mortgage servicing, debt collection, and data breach notification laws, while Texas takes aim at junk fees....more
What should you know about recent FTC enforcement actions announced over the last few days? In short, privacy enforcement is a “go.” Here are some takeaways....more
Last week, Missouri Attorney General Andrew Bailey announced his resignation from the position effective September 8. He issued a press release reporting that he is leaving to serve as the Co-Deputy Director of the FBI, in...more
On August 15, 2025, a bipartisan coalition of 37 state Attorneys General, led by Georgia Attorney General Chris Carr and New Mexico Attorney General Raul Torrez, sent a letter to Instagram requesting that it make “immediate...more
Last week, a bipartisan group of 37 state attorneys general led by Georgia Attorney General Chris Carr and New Mexico Attorney General Raúl Torrez sent a letter to the head of Instagram regarding Instagram’s...more
As we pass the mid-point of 2025, it’s a good time to review the important developments we have seen in the first 6 months of this year, particularly reforms to the UK’s data protection laws, the EU’s pathway to...more
Oregon will begin to regulate the use of minors’ information and sale of users’ location data (regardless of age) with an update to its Oregon Consumer Privacy Act. These revisions will go into effect January 1, 2026. As...more
On July 1, the California Attorney General (CA AG) announced a $1.55 million settlement – the largest penalty issued under the California Consumer Privacy Act (CCPA) to date – with Healthline, an online health and wellness...more
As we navigate through 2025, the European legal landscape is undergoing a significant transformation, particularly in the realms of artificial intelligence (AI) regulation and data sovereignty. These changes are reshaping how...more
We are in an era where smartphones track sleep patterns, fitness apps monitor heart rates, and online searches reveal sensitive medical inquiries. As a result, the notion of “health data” has expanded dramatically. This...more
For businesses subject to the California Consumer Privacy Act (CCPA), a compliance step often overlooked is the requirement to annually update the businesses online privacy policy. Under Cal. Civ. Code § 1798.130(a)(5),...more
On March 10, 2025, California Attorney General Rob Bonta announced an investigative sweep targeting the location data industry, emphasizing compliance with the California Consumer Privacy Act (CCPA). This announcement follows...more
While Andrew Ferguson advocates for a restrained regulatory approach at the FTC, his statements and voting record reveal clear priority areas where businesses can expect continued vigorous enforcement. Two areas stand out in...more