We know that California has a lot of privacy laws, but the Shine the Light law is one of the oldest in the state, and it still catches businesses off guard because it is not about cookies or ad tech. It’s about who you share customer information with for marketing and what you must disclose when a customer
consumer privacy
When Chats Become Evidence: Court Affirms Order Requiring OpenAI to Produce 20 Million De-Identified ChatGPT Logs
On January 5, 2026, the federal U.S. District Court for the Southern District of New York upheld two discovery orders requiring OpenAI to produce a sample of 20 million de-identified user logs from ChatGPT as part of wide-ranging copyright litigation brought by news organizations and class plaintiffs. This decision offers important insights into how federal…
A Wave of CIPA Lawsuits Targets Estée Lauder, Nike, and Luxottica for Online Tracking
California’s strict privacy laws, particularly the California Invasion of Privacy Act (CIPA), are fueling a surge in class action lawsuits against major companies over their use of online tracking technologies. In recent weeks, prominent brands including Estée Lauder, Nike, and Luxottica have been hit with proposed class actions in the Northern District of California, all…
CCPA 2026: What Companies Need to Know About California’s Revised Consumer Privacy Rule
The California Consumer Privacy Act (CCPA), as amended and effective January 1, 2026, brings the most detailed and sweeping changes since the law’s introduction. If you do business in California or handle Californians’ personal information, here’s what your company must know, and do, to avoid compliance risks.
Expanded Privacy Policy and Disclosure Requirements
The updated…
Dashboard Detectives: How Connected Cars Turn Drivers Into Data
Anyone who has purchased a car in the past decade is familiar with the dazzling wave of technology that greets them: giant touchscreens, voice controls, remote start apps. But behind the gleaming infotainment systems and driver-assist cameras, a subtler, more powerful feature has crept into the modern automobile, the ability to observe, record, and report…
Privacy Tip #466 – Consumer Reports Evaluate the Security of Connected Devices
In today’s increasingly digital world, connected devices are an integral part of daily life. From smart speakers and thermostats to fitness trackers and home security cameras, these devices offer convenience and automation—but they also present new privacy and security challenges. Recognizing the growing concern among consumers, Consumer Reports (CR) has undertaken comprehensive testing to evaluate…
California “Opt Me Out Act”: A New Era for Browser Privacy Options
California continues to lead the way in digital privacy. Its latest step is AB 566, the California Opt Me Out Act. This new law amends the already robust California Consumer Privacy Act (CCPA) and specifically targets how internet browsers empower users to control their personal information.
AB 566 requires that all consumer web browsers (i.e., Chrome, Firefox, Safari…
CA, CT + CO AG’s + CPPA Band Together on “Joint Investigative Privacy Sweep”
The Attorneys General of California, Connecticut, and Colorado, along with the California Privacy Protection Agency (“the Coalition”) announced on September 9, 2025, that they are banding together as a coalition on an investigative sweep of “potential noncompliance” with Global Privacy Control (GPC), that provides businesses with “an easy-to-use browser setting or extension that automatically signals…
Condé Nast Faces Setback in California Web Tracking Class Action
A California federal court has refused to dismiss a class action lawsuit alleging that Condé Nast unlawfully installed online trackers on its websites, signaling yet another instance of courts applying a decades-old privacy statute to modern data collection practices.
The lawsuit alleges that when the plaintiff visited Condé Nast-owned publications’ websites such as The New…
Privacy Tip #455 – Match Group Settles with FTC Over Deceptive Advertising
If you are a Match.com user, you will want to be aware that the FTC recently announced that “Match Group, Inc., and Match Group, LLC (Match), the owners and operators of online dating services Match.com, OkCupid, PlentyOfFish, The League, and other dating sites, have agreed to pay $14 million, permanently stop misrepresenting guarantees and locking…