News & Analysis as of

Data Privacy Enforcement Actions

Cozen O'Connor

The State AG Report – 07.24.2025

Cozen O'Connor on

Here are curated AG and federal regulatory news stories highlighting key areas in which state and federal regulators’ decisions are having an impact across the US: • Latest Texas AG Food Probe Puts Mars in a Sticky...more

Troutman Pepper Locke

2025 Mid-Year Review: State AGs in a New Era

Troutman Pepper Locke on

The United States is navigating a new era of regulatory oversight and the balance of power between federal and state regulators following the 2024 election cycle. As federal agencies retreat from and/or realign their...more

Sheppard Mullin Richter & Hampton LLP

CFPB Terminates Consent Order Against Credit Union Early

On July 18, the Guiding and Establishing National Innovation for U.S. Stablecoins Act (GENIUS ACT) was signed into law, creating the first federal regulatory framework for payment stablecoins. The law prohibits the issuance...more

Cozen O'Connor

Kentucky AG Sues Temu over Alleged Data Misuse and Counterfeit Sales

Cozen O'Connor on

Kentucky AG Russell Coleman filed a lawsuit against PDD Holdings Inc. and WhaleCo Inc., d/b/a Temu, alleging widespread violations of state consumer protection laws. According to the complaint, the Temu shopping app...more

Arnall Golden Gregory LLP

OIG Audit Finds Cybersecurity Gaps at Large Northeastern Hospital

On July 11, 2025, the U.S. Department of Health and Human Services (“HHS”), Office of Inspector General (“OIG”) posted a report that announced the findings of a cybersecurity audit it conducted of a large Northeastern...more

Loeb & Loeb LLP

NY Delays Algorithmic Pricing Disclosure Enforcement as Lawsuit Proceeds

Loeb & Loeb LLP on

Last week, on July 14, 2025, a New York federal court issued a general stay of enforcement of the NY Algorithmic Pricing Disclosure Act, which went into effect just days earlier, on July 8, 2025. As a result, businesses...more

Hudson Cook, LLP

Connecticut Finalizes First CTDPA Enforcement Action

Hudson Cook, LLP on

July 23, 2025 Mark D. Metrey On July 8, 2025, Connecticut Attorney General William Tong announced the state's first public enforcement action under the Connecticut Data Privacy Act (CTDPA) against TicketNetwork, Inc....more

Cohen & Gresser LLP

Evading DOJ Crosshairs As Data Security Open Season Starts

Cohen & Gresser LLP on

The U.S. Department of Justice has added a new weapon to its enforcement arsenal, aimed at enhancing its ability to prevent foreign adversaries from accessing and exploiting government related data and sensitive personal data...more

Womble Bond Dickinson

From Data to Decisions: Navigating Privacy and Litigation Risks in the AI Era

Womble Bond Dickinson on

While many systems that are described as AI have been around for decades (e.g., internet search engines), today’s AI tools are much more powerful and are widely accessible. Generative AI and agentic AI extend the power of...more

Sheppard Mullin Richter & Hampton LLP

China Initiates Mandatory Reporting Regime for Personal Information Protection Officers

On July 18, 2025, the Cyberspace Administration of China (the “CAC”) issued the Notice on Launching the Reporting Mechanism for Personal Information Protection Officers (the “Notice ”). This development marks a significant...more

Greenbaum, Rowe, Smith & Davis LLP

Navigating New Jersey’s Medical Spa Regulatory Landscape: Key Compliance and Risk Management Considerations

The medical spa industry is thriving, but with growth comes complexity, particularly in New Jersey where healthcare and professional licensing rules intersect with business and real-estate regulations. For physicians, nurses,...more

Morrison & Foerster LLP

FTC Looks to Leverage PADFAA Enforcement to Help Limit Exposure of Consumer Data

In recent comments, Commissioner Holyoak signaled that the Federal Trade Commission will prioritize enforcement of the Protecting Americans’ Data from Foreign Adversaries Act (PADFAA), a law that empowers the FTC to police...more

Woodruff Sawyer

Enforcement of the HIPAA Reproductive Health Care Privacy Rule Vacated Nationwide

Woodruff Sawyer on

On June 18, 2025, a federal district court in Texas vacated a significant portion of the HIPAA Privacy Rule to Support Reproductive Health Care Privacy (“Final Rule”), which was implemented on April 24, 2024, on a nationwide...more

Paul Hastings LLP

ICO Annual Report Provides Insight Into Data Protection Risks for Businesses

Paul Hastings LLP on

The UK Information Commissioner’s Office’s (the ICO’s) latest Annual Report summarises its accomplishments and priorities, including last year’s enforcement actions. Based on our review of the report, we see the ICO focusing,...more

Dacheng

China Monthly Data Protection Update: July 2025

Dacheng on

This monthly report outlines key developments in China’s data protection sector for July. The following events merit special attention: CAC Issues Third Edition of the Data Export Security Assessment Application Guide: On...more

Mintz - Privacy & Cybersecurity Viewpoints

No More Warnings: Ignoring AG Costs $85,000

Connecticut Attorney General William Tong recently announced the state’s first-ever enforcement settlement under the Connecticut Data Privacy Act (CTDPA) with TicketNetwork, Inc., an online ticket marketplace. The settlement...more

Skadden, Arps, Slate, Meagher & Flom LLP

State Privacy Enforcement Accelerates, With California Targeting Substantive Compliance and Connecticut Bringing Its First Action

As federal privacy enforcement shows signs of slowing, states are aggressively stepping in to fill the void. On July 1, 2025, the California attorney general (AG) announced a $1.55 million settlement with Healthline Media,...more

DLA Piper

Italy: Garante Issues Fine for Use of Employee’s Private Chats in Disciplinary Actions

DLA Piper on

The Italian Data Protection Authority (Garante) has fined a company EUR 420,000 for violating privacy laws in the workplace. The decision focuses on the employer’s use of content from Facebook, WhatsApp, and Messenger— shared...more

Proskauer - Minding Your Business

DOJ Begins Enforcement of New Data Security Program

On July 9, 2025, the Department of Justice (“DOJ”) commenced enforcement of its new Data Security Program (“DSP”) to prevent foreign adversaries from accessing sensitive U.S. data. Created earlier this year, the program seeks...more

Herbert Smith Freehills Kramer

Connecticut Attorney General Imposes $85k Penalty on TicketNetwork for Defects in Its Privacy Notice

On July 8, 2025, Connecticut’s attorney general announced a settlement with TicketNetwork Inc. for failing to fix several privacy notice defects since 2023. The $85,000 fine is the first monetary penalty under the state’s...more

Loeb & Loeb LLP

Understanding Session Replay: Legal Risks and How to Mitigate Them

Loeb & Loeb LLP on

In an increasingly data-driven digital landscape, businesses are constantly seeking tools to better understand and optimize user experiences. One such tool is session replay—a powerful technology that allows organizations to...more

Venable LLP

CCPA Health Check: Key Compliance Lessons from the Healthline Settlement

Venable LLP on

Over a year after his office’s last privacy enforcement action, on July 1, 2025, California Attorney General Rob Bonta (AG) announced a new California Consumer Privacy Act (CCPA) settlement with Healthline Media LLC...more

Skadden, Arps, Slate, Meagher & Flom LLP

SkadBytes Podcast | Tech’s Shifting Landscape: Five Trends Shaping the Conversation

Introducing “SkadBytes,” our newest podcast where Skadden’s IP and Tech team discusses pivotal changes driving tech regulation and innovation. Host Deborah Kirk and colleagues Alistair Ho and Jonathan Stephenson reflect on...more

Wiley Rein LLP

States Continue Privacy Law Enforcement Efforts

Wiley Rein LLP on

Recent enforcement activities in California and Connecticut highlight that states are ready and willing to actively enforce their comprehensive privacy laws. These recent actions – which continue the trend of states ramping...more

Benesch

Connecticut Attorney General Issues $85,000 Penalty for Deficient Privacy Policies

Benesch on

In its first fine for violations of the Connecticut Data Privacy Act (“CDPA”), the state's omnibus data privacy law, the Connecticut Attorney General (“CT AG”) chose to make an example of deficient privacy notices....more

863 Results
 / 
View per page
Page: of 35

"My best business intelligence, in one easy email…"

Your first step to building a free, personalized, morning email brief covering pertinent authors and topics on JD Supra:
*By using the service, you signify your acceptance of JD Supra's Privacy Policy.
- hide
- hide