Data Privacy

Subscribe to Data Privacy via RSS

The Attorneys General of California, Connecticut, and Colorado, along with the California Privacy Protection Agency (“the Coalition”) announced on September 9, 2025, that they are banding together as a coalition on an investigative sweep of “potential noncompliance” with Global Privacy Control (GPC), that provides businesses with “an easy-to-use browser setting or extension that automatically signals…

A California federal court has refused to dismiss a class action lawsuit alleging that Condé Nast unlawfully installed online trackers on its websites, signaling yet another instance of courts applying a decades-old privacy statute to modern data collection practices.

The lawsuit alleges that when the plaintiff visited Condé Nast-owned publications’ websites such as The New…

In recent years, private plaintiffs have leveraged the California Invasion of Privacy Act (CIPA) against companies over customer service call recordings, transcription services, and website monitoring. These lawsuits allege that businesses violate CIPA by disclosing or allowing third parties to monitor private communications. Even though many cases are dismissed or settled before trial, defending a…

The Telephone Consumer Protection Act of 1991 (TCPA) is a federal law designed to protect consumers from unwanted telemarketing and intrusive solicitation practices. Many states have also enacted similar state laws governing telephone solicitations, so called “mini-TCPAs.” One such state is Texas, which has had a mini-TCPA in place since 2009.

The Texas mini-TCPA applies…

Mindvalley Inc., a self-improvement and online learning platform, has agreed to pay $450,000 to settle a lawsuit alleging that it unlawfully shared users’ video-viewing information with Meta through the use of tracking technology on its website. On August 22, 2025, Judge Noël Wise of the U.S. District Court for the Northern District of California granted…

SeatGeek, the popular online ticketing platform, is facing a proposed class action in California federal court over allegations that it improperly shared website visitors’ personal information with TikTok and Meta through online tracking technologies. The complaint alleges that SeatGeek embedded TikTok and Meta tracking pixels on its website, enabling the companies to collect users’ personal…

On July 24, 2025, during a public meeting following public comment, the California Privacy Protection Agency (CPPA) Board unanimously approved amendments to the California Consumer Privacy Act (CCPA). These substantial changes include new obligations for businesses subject to the CCPA. Significantly, the updates emphasize CPPA’s new regulatory focus over AI decision-making and cybersecurity in addition…

In the California Privacy Protection Agency’s (CPPA) latest enforcement action, Accurate Append, Inc. will pay a $55,400 fine related to allegations that it failed to fulfill its registration obligations. This settlement is the eighth action taken against a data broker since the CPPA launched its investigative enforcement sweep under the California Delete Act.

The Delete…

This post was co-authored by Mark Abou Naoum, Summer Associate. Mark is not admitted to practice law.

Before assuming his new role as Executive Director for the California Privacy Protection Agency (CPPA), Tom Kemp served as a volunteer policy advisor on the Delete Act in 2023 and California’s 2020 ballot initiative, which amended the California…