Section 230 of the Communications Decency Act, 47 U.S. Code § 230, has played a critical role in shaping the modern internet, but the boundaries of its protections remain a persistent point of discussion in law and policy. Ongoing litigation is testing just how far Section 230 stretches when it comes to the design and
Playing by the Rules: California Invasion of Privacy Act Class Action Complaint Filed Against Dave & Buster’s
By Roma Patel on
Posted in Enforcement + Litigation
A class action complaint filed in the Northern District of California on October 17, 2025, alleges that entertainment and arcade franchise Dave & Buster’s Entertainment Inc., misled website visitors about users’ ability to reject cookies and tracking technologies. The lawsuit, brought by two California residents, claims that the Dave & Buster’s website continued to place…
SeatGeek Hit with Class Action Over Sharing User Data with TikTok and Meta
By Kathryn Rattigan on
Posted in Data Privacy
SeatGeek, the popular online ticketing platform, is facing a proposed class action in California federal court over allegations that it improperly shared website visitors’ personal information with TikTok and Meta through online tracking technologies. The complaint alleges that SeatGeek embedded TikTok and Meta tracking pixels on its website, enabling the companies to collect users’ personal…
Federal Jury Finds Against Meta for Collecting Data from Flo Health
By Linn Foster Freedman on
Posted in Enforcement + Litigation
On August 1, 2025, a California federal jury found that Meta violated the California Invasion of Privacy Act (CIPA) by collecting data from the Flo Health app without the consent of the individuals who downloaded the app and provided information about their period, ovulation, and pregnancies.
CIPA is California’s wiretap law, and the jury found…
Etsy Sued Over Pixel Trackers: What It Means for Your Business
By Kathryn Rattigan on
Posted in Data Privacy
If you’ve ever browsed Etsy looking for a handmade candle or a quirky T-shirt, you might have unknowingly shared more than just your shopping preferences. A new lawsuit filed last week in California claims that Etsy has been quietly allowing third-party companies like Google, Meta, and Microsoft to collect personal data from users through website…
The VPPA: An Old Law with New Streams
By Roma Patel on
Posted in Enforcement + Litigation
Enacted in 1988, the Video Privacy Protection Act (VPPA) was intended to regulate the then-booming videotape industry by limiting how video rental and sales data is disclosed. The law was enacted in direct response to the publication of a Supreme Court nominee Robert Bork’s video rental history. Though videotapes may be a memory of the…
WhatsApp Patches Vulnerability That Facilitates Remote Code Execution
By Linn Foster Freedman on
Posted in Cybersecurity
WhatsApp users should update the application for vulnerability CVE-2025-30401, which Meta recently patched when WhatsApp was released for Windows version 2.2450.6.
Meta cautions Windows users to update to the latest version due to the vulnerability that it is calling a “spoofing” issue that could allow attackers to execute malicious code on devices. The attackers…
A Year in Privacy and Security: Privacy Violations, Large-Scale Data Breaches, and Big Fines and Settlements
By Kathryn Rattigan on
Posted in Enforcement + Litigation
2024 was a year chock-full of data breaches and privacy violations. Many new data privacy and cybersecurity regulations were introduced (and became effective), and regulators sent a strong message to businesses that privacy must be at the forefront of their strategy and goals and that robust security controls are required to protect employee and consumer…
Increased Privacy Enforcement Actions Anticipated Under Texas Privacy Law
By Kathryn Rattigan on
Posted in Data Privacy
While California was the first state to implement a comprehensive consumer privacy rights law and the first to bring an enforcement action for violations, Texas is quickly becoming the next privacy regulator to watch. The Texas Privacy and Data Security Act (TPDSA) became effective in July 2024, and the Texas Securing Children Online through Parental…
The Push for Warning Labels on Social Media Platforms, States Attorneys General Urge Lawmakers to Take Action
By Kathryn Rattigan on
Posted in Data Privacy, Uncategorized
Should kids be on social media? At what age? Should parents monitor their conversations on those platforms? Do parental controls work? These are questions facing many parents and guardians, especially with the increasing use of social media platforms by kids and teens. The Pew Research Center reported that 58% of teens are daily users of…