On July 24, 2025, the California Privacy Protection Agency (CPPA) unanimously adopted a comprehensive rulemaking package under the California Consumer Privacy Act (CCPA) that primarily addresses automated decisionmaking...more
7/31/2025
/ Algorithms ,
Automated Decision Systems (ADS) ,
California Consumer Privacy Act (CCPA) ,
Consumer Privacy Rights ,
Cybersecurity ,
Data Privacy ,
Employee Rights ,
Job Applicants ,
New Regulations ,
Regulatory Requirements ,
Risk Assessment ,
Risk Management ,
Technology
The first piece of major US federal legislation in the global digital assets space was signed into law on July 18, 2025, by President Trump.1 Declared by President Trump as positioning the United States to be the “crypto...more
Just days before it was scheduled to take effect, the Federal Trade Commission’s (FTC) amended Negative Option Rule, commonly known as the “Click-to-Cancel” Rule (Rule), was vacated by the US Court of Appeals for the Eighth...more
7/15/2025
/ Administrative Procedure Act ,
Appeals ,
Cancellation Rights ,
Consumer Protection Laws ,
Enforcement Actions ,
Federal Trade Commission (FTC) ,
Loper Bright Enterprises v Raimondo ,
Rulemaking Process ,
Statutory Interpretation ,
Subscription Services ,
Unfair or Deceptive Trade Practices
Consistent with President Trump’s de-regulatory agenda, the Consumer Financial Protection Bureau (CFPB or Bureau) is withdrawing over five dozen of its guidance documents, including interpretive rules, advisory opinions, and...more
On October 16, 2024, and by a 3-2 vote of its commissioners, the Federal Trade Commission (FTC) issued a broad-reaching final “click to cancel” rule (Rule), updating its Negative Option Rule, that could subject companies to...more
On December 20, 2023, the Federal Trade Commission (FTC) announced a Notice of Proposed Rulemaking (NPRM or Proposed Rule) to update its Children’s Online Privacy Protection Act (COPPA) rule (the Rule) for the first time...more
Technological advances, especially in Artificial Intelligence and quantum computing, will continue to amaze in the coming years. They will open up vast new opportunities while presenting profound regulatory, litigation, and...more
3/1/2024
/ Artificial Intelligence ,
Business Losses ,
Consumer Financial Protection Bureau (CFPB) ,
Coronavirus/COVID-19 ,
Cyber Crimes ,
Cybersecurity ,
Data Breach ,
Data Privacy ,
Enforcement Actions ,
Federal Trade Commission (FTC) ,
Financial Services Industry ,
NAIC ,
Popular ,
Securities and Exchange Commission (SEC) ,
State Privacy Laws ,
Technology ,
Website Design ,
Websites
On October 19, 2023, the Consumer Financial Protection Bureau (CFPB) issued an advance notice of proposed rulemaking (ANPR) with respect to a new consumer financial data portability rule mandated by Section 1033 of the...more
11/9/2023
/ Advanced Notice of Proposed Rulemaking (ANPRM) ,
Banking Sector ,
Compliance ,
Compliance Dates ,
Consumer Financial Protection Act (CFPA) ,
Consumer Financial Protection Bureau (CFPB) ,
Data Collection ,
Data Privacy ,
Data Processing Rules ,
Data Protection ,
Data-Sharing ,
Federal Trade Commission (FTC) ,
Financial Services Industry ,
Nonbank Firms ,
Personal Data ,
Sensitive Personal Information ,
Third-Party Service Provider
On September 15, 2023, the Consumer Financial Protection Bureau (CFPB) published an outline of expansive rulemaking proposals to modernize the coverage of the Fair Credit Reporting Act (FCRA) to include data brokers, data...more
9/26/2023
/ Artificial Intelligence ,
Comment Period ,
Consumer Financial Protection Bureau (CFPB) ,
Credit Reports ,
Creditors ,
Data Brokers ,
Fair Credit Reporting Act (FCRA) ,
Financial Services Industry ,
Medical Debt ,
Proposed Rules ,
Rulemaking Process ,
SBREFA ,
Small Business ,
Underwriting
On April 3, the CFPB issued a policy statement intended to provide “a framework to help federal and state enforcers identify when companies engage in abusive conduct.” Conduct violates the abusiveness standard when it either:...more
The year 2023 will continue to have cybersecurity and data privacy front of mind for General Counsels. With sweeping new US and global laws and regulations coming online and the California Privacy Protection Agency (CPPA)...more
3/3/2023
/ California Consumer Privacy Act (CCPA) ,
Consumer Privacy Rights ,
Cybersecurity ,
Data Collection ,
Data Privacy ,
Data Protection ,
Personal Data ,
Personal Information ,
Personally Identifiable Information ,
Privacy Laws ,
Sensitive Personal Information
In a groundbreaking decision, the Federal Trade Commission (FTC) announced it was diagnosing GoodRx’s use of tracking pixel codes and analytics, its digital strategy, as not only an unfair or deceptive act or abusive practice...more
2/9/2023
/ Behavioral Advertising ,
Breach Notification Rule ,
California Consumer Privacy Act (CCPA) ,
Class Action ,
Data Breach ,
Data-Sharing ,
Facebook ,
Federal Trade Commission (FTC) ,
Google ,
Health Care Providers ,
Health Insurance Portability and Accountability Act (HIPAA) ,
Internal Controls ,
Microsoft ,
Personal Information ,
Pharmacies ,
PHI ,
Sensitive Personal Information ,
Social Networks ,
UDAP ,
Unfair or Deceptive Trade Practices