States are weighing in on whether grocery stores, hotel chains, and retailers should be using personal consumer information such as “browsing history” and “location data” to decide what price you see, when someone else might see something different. Pioneering this inquiry is California, approaching this individualized pricing as a potential privacy problem. At the end
California
California’s “Shine the Light” Trap: A Simple Request Right with Real Litigation Risk
We know that California has a lot of privacy laws, but the Shine the Light law is one of the oldest in the state, and it still catches businesses off guard because it is not about cookies or ad tech. It’s about who you share customer information with for marketing and what you must disclose when a customer…
California Trial Court Decision Provides Long-Awaited Relief from CIPA Claims
A new California trial court decision offers website operators some long-awaited relief in the ongoing wave of website privacy suits under the California Invasion of Privacy Act (CIPA). In early December, the Los Angeles County Superior Court, rejected an increasingly common theory that routine website analytics and tracking tools function as illegal “pen registers” or “trap…
Enforcement Under California’s Delete Act, Full Steam Ahead
Enforcement of California’s Delete Act is accelerating. The California Privacy Protection Agency (CPPA) recently sent a clear message to data brokers: register, pay the required fee, and be prepared to defend your data practices, especially when they involve sensitive populations.
CPPA announced recent settlements with two data brokers totaling more than $100,000 for failing to…
State AG’s Oppose FCC’s Efforts to Preempt State Laws Regulating AI
On December 17, 2025, a bipartisan group of 23 Attorneys General from the states of Arizona, California, Colorado, Connecticut, Delaware, Hawai’i, Illinois, Maine, Maryland, Massachusetts, Minnesota, Nevada, New Jersey, New Mexico, North Carolina, Oregon, Rhode Island, Tennessee, Utah, Vermont, Washington, Wisconsin, and the District of Columbia, sent a comment letter to the Federal Communications Commission…
$1.4 Million Settlement for California Privacy Violation: What the Jam City Settlement Means for CCPA Enforcement
Jam City, Inc., a prominent mobile gaming company behind popular franchises such as Harry Potter and Frozen, has agreed to pay $1.4 million in civil penalties to resolve allegations that it violated the California Consumer Privacy Act (CCPA) by failing to provide adequate privacy opt-out mechanisms for its users. This resolution, announced by…
Navigating Website Privacy Risks in California: CIPA Tracker Claims, TCPA Marketing, CCPA Compliance, and Why Arbitration in Your Terms Matter
- The surge in California Invasion of Privacy Act (CIPA) lawsuits targeting website tracking technologies;
- Telephone Consumer Protection Act (TCPA) risks in digital marketing;
Cole v. Quest Diagnostics: The Third Circuit Weighs In on Pixels, Privacy, and Medical Data
- California Invasion of Privacy Act (CIPA), which prohibits secret
Judge Dismisses Audible Customer Privacy Suit, Citing Choice-of-Law Clause
A recent federal court decision highlights the power of online terms and conditions, and how “choice-of-law” clauses can dramatically influence privacy litigation. In Crowell v. Audible, a Seattle judge dismissed a proposed class action alleging that Audible unlawfully shared its California customers’ browsing and listening data with Meta, finding that the case must proceed…
California Hits Employer with $1.35M Fine in First-Ever Job Applicant Enforcement Action
- Provide a