On January 13, 2026, eight United States Senators sent a letter to Alphabet, Meta, Reddit, Snap, TikTok, and X stating that they“are alarmed by reports of users exploiting generative AI tools to produce sexualized ‘bikini’ or ‘non-nude’ images of individuals without their consent and distributing them on platforms including X and others.” The senators requested
Massachusetts High Court Weighs Instagram Lawsuit: Is Meta Getting Kids Hooked — And Is That Illegal?
Last week, Massachusetts’ Supreme Judicial Court delved into a case with potentially national implications: should Meta platforms face a lawsuit alleging that Instagram’s design illegally hooks kids with addictive features?
The justices appeared divided as they questioned whether Meta’s practices are protected by Section 230 of the Communications Decency Act, the law that shields online…
Drawing the Line: Section 230’s Protections Under Scrutiny
Section 230 of the Communications Decency Act, 47 U.S. Code § 230, has played a critical role in shaping the modern internet, but the boundaries of its protections remain a persistent point of discussion in law and policy. Ongoing litigation is testing just how far Section 230 stretches when it comes to the design and…
Playing by the Rules: California Invasion of Privacy Act Class Action Complaint Filed Against Dave & Buster’s
A class action complaint filed in the Northern District of California on October 17, 2025, alleges that entertainment and arcade franchise Dave & Buster’s Entertainment Inc., misled website visitors about users’ ability to reject cookies and tracking technologies. The lawsuit, brought by two California residents, claims that the Dave & Buster’s website continued to place…
SeatGeek Hit with Class Action Over Sharing User Data with TikTok and Meta
SeatGeek, the popular online ticketing platform, is facing a proposed class action in California federal court over allegations that it improperly shared website visitors’ personal information with TikTok and Meta through online tracking technologies. The complaint alleges that SeatGeek embedded TikTok and Meta tracking pixels on its website, enabling the companies to collect users’ personal…
Federal Jury Finds Against Meta for Collecting Data from Flo Health
On August 1, 2025, a California federal jury found that Meta violated the California Invasion of Privacy Act (CIPA) by collecting data from the Flo Health app without the consent of the individuals who downloaded the app and provided information about their period, ovulation, and pregnancies.
CIPA is California’s wiretap law, and the jury found…
Etsy Sued Over Pixel Trackers: What It Means for Your Business
If you’ve ever browsed Etsy looking for a handmade candle or a quirky T-shirt, you might have unknowingly shared more than just your shopping preferences. A new lawsuit filed last week in California claims that Etsy has been quietly allowing third-party companies like Google, Meta, and Microsoft to collect personal data from users through website…
The VPPA: An Old Law with New Streams
Enacted in 1988, the Video Privacy Protection Act (VPPA) was intended to regulate the then-booming videotape industry by limiting how video rental and sales data is disclosed. The law was enacted in direct response to the publication of a Supreme Court nominee Robert Bork’s video rental history. Though videotapes may be a memory of the…
WhatsApp Patches Vulnerability That Facilitates Remote Code Execution
WhatsApp users should update the application for vulnerability CVE-2025-30401, which Meta recently patched when WhatsApp was released for Windows version 2.2450.6.
Meta cautions Windows users to update to the latest version due to the vulnerability that it is calling a “spoofing” issue that could allow attackers to execute malicious code on devices. The attackers…
A Year in Privacy and Security: Privacy Violations, Large-Scale Data Breaches, and Big Fines and Settlements
2024 was a year chock-full of data breaches and privacy violations. Many new data privacy and cybersecurity regulations were introduced (and became effective), and regulators sent a strong message to businesses that privacy must be at the forefront of their strategy and goals and that robust security controls are required to protect employee and consumer…