Gift cards are a perennial favorite for holiday shoppers. They’re easy to wrap, universally appreciated, and always the right size. But as gift-giving season approaches, it’s important to remember that gift cards are also a common target for scams. In 2024, Governor Phil Murphy signed into law new requirements governing the sale and display of
Drawing the Line: Section 230’s Protections Under Scrutiny
Section 230 of the Communications Decency Act, 47 U.S. Code § 230, has played a critical role in shaping the modern internet, but the boundaries of its protections remain a persistent point of discussion in law and policy. Ongoing litigation is testing just how far Section 230 stretches when it comes to the design and
Playing by the Rules: California Invasion of Privacy Act Class Action Complaint Filed Against Dave & Buster’s
A class action complaint filed in the Northern District of California on October 17, 2025, alleges that entertainment and arcade franchise Dave & Buster’s Entertainment Inc., misled website visitors about users’ ability to reject cookies and tracking technologies. The lawsuit, brought by two California residents, claims that the Dave & Buster’s website continued to place
California Federal Court Clarifies CIPA’s Reach Over Website Tracking in Mashable Hearing
On October 9, 2025, the Northern District of California denied Mashable, Inc.’s motion to dismiss a class action alleging violations of the California Invasion of Privacy Act (CIPA). Mashable operates a digital news and entertainment website that publishes articles and multimedia content online. The plaintiff alleged that Mashable disclosed the IP addresses and device identifiers
AppLovin Faces SEC Scrutiny Over Alleged Data Practices
On October 6, 2025, Bloomberg reported that the Securities and Exchange Commission (SEC) has launched an investigation into AppLovin Corporation’s data-collection practices, following an alleged whistleblower complaint and a series of short-seller reports. We previously covered the shareholder class action against AppLovin in another blog post. The company is a mobile advertising technology business that
AI at the Frontier: What California’s SB-53 Means for Large AI Model Developers
On September 29, 2025, Governor Gavin Newsom signed SB 53, the Transparency in Frontier Artificial Intelligence Act (“the Act”) into law, establishing a regulatory framework for developers of advanced artificial intelligence (AI) systems. The law imposes new transparency, reporting, and risk management requirements on entities developing high-capacity AI models. It is the first of its
Updates Coming to the CMMC Level 2 Procedural Guide in December: What Contractors and C3PAOs Should Know
Last week, we covered the Cybersecurity Maturity Model Certificate (CMMC) Procurement Rule (the Rule), which formalizes cybersecurity as a condition of doing business with the U.S. Department of Defense (DoD). The Rule requires federal contractors and subcontractors to demonstrate they meet the specified security standards before accessing Federal Contract Information (FCI) and Controlled Unclassified Information
Comply to Compete: DoD Finalizes CMMC Rule for Federal Contractors
In August 2024, The Department of Defense (DoD) released a proposed amendment to the Defense Acquisition Regulations Supplement (DFARS) – which provides acquisition policies and procedures for the DoD – that would require a Cybersecurity Maturity Model Certification (CMMC) program to become a required part of the DoD’s contracting process. The CMMC program is a
HHS Continues Focus on Access Rights by Announcing Crackdown on Information Blocking
In August, the Office for Civil Rights (OCR) published guidance relating to individuals’ rights to access their protected health information (PHI) under HIPAA. As we covered in our earlier blog post about the August guidance, the new FAQs came amidst OCR’s continued enforcement focus on its Right of Access initiative, under which the OCR has
The Price You Pay: California Largely Strikes Down Bill Banning Surveillance Pricing
In today’s marketplace, businesses hold vast amounts of consumer data. That data plays a central role in shaping business strategies. One of the most critical aspects of any business strategy is pricing and the process of determining how much to charge for a product or service and to whom. Price discrimination refers to a business