Leveraging Knowledge to Manage Your Data Risks
On August 19, 2026, the Federal Trade Commission (FTC) and the state of Connecticut announced a proposed $4 million settlement with Manchester City Nissan and several of its officers. The settlement reminds any organization that advertises to consumers: the price customers see should be the price they can expect to pay.
The case involves alleged…
Connecticut Attorney General William Tong announced in the past week that his office has entered into two settlements focused on the privacy of consumer data.
The first, announced on August 19, 2026, is a settlement with TaxAct, a Texas company that assists taxpayers with filing tax returns. In the action, the AG alleged TaxAct was…
On May 27, 2026, Connecticut Governor Ned Lamont signed Senate Bill 5 (“the Bill”) into law, creating a broad framework for artificial intelligence oversight in the state. The Bill reaches beyond any single category of AI use and touches consumer disclosures, employment tools, AI companions, synthetic media, workforce issues, state agency AI use, and privacy-related…
On December 17, 2025, a bipartisan group of 23 Attorneys General from the states of Arizona, California, Colorado, Connecticut, Delaware, Hawai’i, Illinois, Maine, Maryland, Massachusetts, Minnesota, Nevada, New Jersey, New Mexico, North Carolina, Oregon, Rhode Island, Tennessee, Utah, Vermont, Washington, Wisconsin, and the District of Columbia, sent a comment letter to the Federal Communications Commission…
The Attorneys General of California, Connecticut, and Colorado, along with the California Privacy Protection Agency (“the Coalition”) announced on September 9, 2025, that they are banding together as a coalition on an investigative sweep of “potential noncompliance” with Global Privacy Control (GPC), that provides businesses with “an easy-to-use browser setting or extension that automatically signals…
Reproductive health privacy is once again in the legal spotlight with a recent federal district court decision that struck down nearly all of a recent rule under the Health Insurance Portability and Accountability Act (HIPAA) that protected reproductive healthcare-related information privacy.
In a ruling issued on June 18, 2025, in Purl v. Department of Health…
Are you storing sensitive data on a shared network drive? If so, your organization could be at serious risk of a data breach or privacy lawsuit. Shared drives, like the common “S:\ drive,” are often used to store documents, spreadsheets, customer information, financial records, and even scanned IDs. But here’s the problem: these network shares…
On October 11, 2024, following the filing of a lawsuit against TikTok by the Kentucky Attorney General, Senators Richard Blumenthal (D-CT) and Marsha Blackburn (R-TN), who authored the bipartisan “Kids Online Safety Act,” requested that TikTok CEO Shou Chew provide all “documents, communications, and research held by TikTok regarding the safety of minors on…
The Connecticut Data Privacy Act (CDPA), which became effective on July 1, 2023, provides Connecticut residents with certain rights over their personal information and establishes responsibilities and privacy protection standards for businesses that process personal information. Notably, the CDPA allows businesses a 60-day cure period to correct violations without penalties through the end of 2024.
This week, the California Superior Court ruled that the California Privacy Protection Agency (CPPA) cannot begin enforcement of the California Privacy Rights Act (CPRA) until March 2024. The ruling stems from a lawsuit filed by the California Chamber of Commerce which argued that state businesses would not have enough time to prepare for the upcoming…
