News & Analysis as of

Regulatory Requirements Enforcement Actions Data Privacy

Dacheng

China Issues First Administrative Penalty for Unlawful Cross Border Transfer of Personal Information

Dacheng on

On September 9, 2025, China announced the landmark administrative penalty against Dior (Shanghai) over unlawful cross-border transfers of personal information, with the primary violation being the failure to satisfy the...more

Ropes & Gray LLP

HHS OCR Empowered to Administer and Enforce Federal Substance Abuse Privacy Part 2 Regulations

Ropes & Gray LLP on

On August 25, 2025, the U.S. Department of Health and Human Services (“HHS”) delegated the administration and enforcement (the “Delegation”) of 42 C.F.R. Part 2 (“Part 2”), the federal rules governing the confidentiality and...more

Foley Hoag LLP

FTC to App Developers: Your Vendors’ COPPA Missteps Are Your Own

Foley Hoag LLP on

The Federal Trade Commission has once again reminded the mobile ecosystem that compliance obligations under the Children’s Online Privacy Protection Act (“COPPA”) do not stop at an app developer’s door. In a recent...more

DLA Piper

Australia: Scraping the Barrel – When Data Scraping Breaches the Privacy Act

DLA Piper on

Data scraping is an automated process through which computer programs extract vast amounts of data from the internet at a faster rate than manual data collection methods....more

Fox Rothschild LLP

The FTC Still Cares About Privacy

Fox Rothschild LLP on

What should you know about recent FTC enforcement actions announced over the last few days? In short, privacy enforcement is a “go.” Here are some takeaways....more

Baker Donelson

Powering Up Part 2: HHS Announced OCR Enforcement Authority for Part 2 Final Rule

Baker Donelson on

The Office for Civil Rights (OCR) will be ready to enforce the 2024 Part 2 Final Rule by the February 16, 2026, compliance deadline now that the U.S. Department of Health & Human Services (HHS) has delegated enforcement...more

Coblentz Patch Duffy & Bass

EU-U.S. Data Transfers in 2025

Cross-border data transfers between the EU and U.S. remain a legal and operational minefield. While the July 2023 adequacy decision ushered in the EU-U.S. Data Privacy Framework (DPF), recent developments have called its...more

DLA Piper

Thailand: PDPA Crackdown 2025: Are You Next? – Major Fines and Lessons from Thailand’s Latest Enforcement

DLA Piper on

Since the full enforcement of Thailand’s Personal Data Protection Act B.E. 2562 (2019) (“PDPA”) in June 2022, the Personal Data Protection Committee (“PDPC”) has moved decisively from awareness-building to active enforcement....more

Bennett Jones LLP

Right to Have Your Information De-Listed? The Federal Privacy Commissioner Issues Decision

Bennett Jones LLP on

The Office of the Privacy Commissioner of Canada (OPC) issued its findings on August 27 2025 in connection with an investigation regarding the issue of whether individuals have the right to have information about them...more

Jones Day

Nigeria Launches Investigations into Noncompliance with Nigeria Data Protection Act 2023

Jones Day on

The Nigeria Data Protection Act 2023 ("NDP Act") seeks to safeguard the fundamental rights, freedoms, and interests of data subjects as enshrined under the Constitution of the Federal Republic of Nigeria....more

Jackson Lewis P.C.

[Event] Workplace Horizons Extension: Chicago - September 18th, Chicago, IL

Jackson Lewis P.C. on

The leading educational and networking event — from the premier firm for employment + labor law — comes closer to you regionally and topically. The benefits of Jackson Lewis’ annual Workplace Horizons conference in New...more

Wiley Rein LLP

Wiley Consumer Protection Download (August 26, 2025)

Wiley Rein LLP on

FTC Chairman Sends Warning Letters to Technology Companies Regarding Data Security and Censorship. On August 21, FTC Chairman Andrew Ferguson sent warning letters to thirteen technology companies that provide cloud computing,...more

Paul Hastings LLP

You’ve Got Mail: NYDFS Enforcement Action Highlights Cybersecurity Risk of Over-Retention and Other Risks

Paul Hastings LLP on

On Aug. 14, 2025, the New York Department of Financial Services (NYDFS) issued a Consent Decree announcing that Healthplex, Inc. (Healthplex) has agreed to pay a $2 million fine, as a result of an investigation into a 2021...more

Wiley Rein LLP

FTC Consumer Protection and Privacy Enforcement Series: The Fair Credit Reporting Act—Who Is Covered and How to Comply

Wiley Rein LLP on

For the latest installment of our series of practical insights on emerging Federal Trade Commission (FTC) consumer protection and data privacy priorities, we discuss coverage and requirements under the Fair Credit Reporting...more

Amundsen Davis LLC

Don’t Mess With Texas: The Lone Star State Has Become a Leader in Data Privacy and AI Regulation

Amundsen Davis LLC on

While generally considered a business-friendly state, Texas is taking an increasingly important role in regulating how U.S. companies use their information technology. Over the past few years, Texas has adopted path-breaking...more

Dacheng

China Monthly Data Protection Update: August 2025

Dacheng on

This monthly report outlines key developments in China’s data protection sector for August. The following events merit special attention: CAC Summons NVIDIA Over Cybersecurity Concerns Related to H20 Chip: On July 31, CAC...more

Wiley Rein LLP

FTC Consumer Protection and Privacy Enforcement Series: PADFA Enforcement—What Companies Need to Know

Wiley Rein LLP on

As part of our series to provide practical insights into emerging Federal Trade Commission (FTC) priority areas for consumer protection and data privacy enforcement, we are taking a deep dive into the Protecting Americans’...more

A&O Shearman

UK Pensions: What’s new this week? August 11, 2025

A&O Shearman on

Welcome to your weekly update from the A&O Shearman Pensions team, covering all the latest legal and regulatory developments in the world of workplace pensions. ECCTA: identity verification requirements from November 18,...more

Hogan Lovells

HL UK Pensions Law Digest 11 August 2025

Hogan Lovells on

A bite-sized summary of recent UK pension news Welcome to our latest update, in which we cover: Pensions Regulator: successful action to boost scheme funding Enforcement action by TPR, combined with a ruling from the...more

Hogan Lovells

Thailand ramps up data protection enforcement

Hogan Lovells on

Thailand's Personal Data Protection Committee (“PDPC”) has significantly intensified its enforcement of Thailand's Personal Data Protection Act B.E. 2562 (2019) (“PDPA”), announcing on 1 August 2025 eight new administrative...more

Fox Rothschild LLP

To Do: Annually Review Privacy Notices or Risk CPPA Enforcement

Fox Rothschild LLP on

The annual review and update (if necessary) of privacy notices just got an upgrade to a “must do.” This provision, found in California Consumer Privacy Act from the beginning, requires companies to assess their data...more

DLA Piper

Uganda: Data Protection Regulator Clarifies Compliance Requirements for Offshore Entities

DLA Piper on

In a decision issued on 18 July 2025 against Google LLC, the Personal Data Protection Office (PDPO) has affirmed that the data protection compliance obligations under Ugandan law apply to all entities that handle the personal...more

Verrill

Minnesota’s Consumer Data Privacy Act: An Overview

Verrill on

Twenty-nine years after Prince warned us about the dangers of the Internet, his home state has taken action to protect consumers who use it. On July 31, 2025, Minnesota joined the roughly twenty states that have adopted...more

Wiley Rein LLP

FTC Consumer Protection and Privacy Enforcement Series: Practical Tips for When Your Company Gets an FTC CID

Wiley Rein LLP on

Welcome to our new series on Federal Trade Commission (FTC) enforcement, where we will provide practical insights into emerging FTC priority areas for consumer protection and data privacy enforcement. Overall, the current FTC...more

Orrick, Herrington & Sutcliffe LLP

CPPA fines data broker for failing to register under the Delete Act

On July 28, the CPPA released a stipulated final order to impose a $55,400 administrative fine on a data broker for failing to register with the agency by the January 31, 2024, deadline as required by California’s Delete Act....more

249 Results
 / 
View per page
Page: of 10

"My best business intelligence, in one easy email…"

Your first step to building a free, personalized, morning email brief covering pertinent authors and topics on JD Supra:
*By using the service, you signify your acceptance of JD Supra's Privacy Policy.
- hide
- hide