Data Privacy Laws
481 articles · page 1 of 9
$2.7M BCHP Data Breach Settlement Also Binds IT Vendor XTIUM
New York and Connecticut secured $2.7M from Boston Children's Health Physicians and XTIUM on Oct 16, 2026. What the assurance requires, and by when.
#
23andMe Data Breach Settlement: Payments Expected September 2026
23andMe's claim window closed Feb 17, 2026 and final approval came Jan 30, 2026. The administrator now expects class member payments in September 2026.
44 State AGs Settle With Labcorp Over 2019 AMCA Data Breach
44 state attorneys general settled with Labcorp for $2,287,455 over the 2019 AMCA breach. The money goes to the states, not consumers, and no claim form exists.
A
AI and Data Privacy: Legal Requirements (2026)
How AI intersects with data privacy law. Covers the EU AI Act, Colorado SB 205, CCPA automated decisions, FTC enforcement, and state laws.
Alabama Biometric Privacy Laws: Collection, Consent & Penalties (2026)
Alabama has no standalone biometric privacy law, and its breach notification act does not cover biometric data. Learn what changes under the 2026 Alabama Personal Data Protection Act (effective 2027), penalties up to $500K, and employer obligations.
Alabama Data Breach Notification Laws: Reporting Rules & Timelines (2026)
Learn Alabama's data breach notification rules under the 2018 Act, including the 45-day deadline, AG reporting requirements, penalties, and exemptions.
Alabama Data Privacy Laws: Breach Notification & Consumer Rights (2026)
Complete guide to Alabama data privacy laws including the Data Breach Notification Act of 2018, security requirements, penalties, and the pending Personal Data Protection Act.
Alaska Biometric Privacy Laws: Collection, Consent & Penalties (2026)
Alaska has no biometric privacy law despite multiple legislative attempts. Learn what protections exist, gaps in coverage, and pending bills as of 2026.
Alaska Data Breach Notification Laws: Reporting Rules & Timelines (2026)
Alaska requires breach notification without unreasonable delay. One of ~12 states with a private right of action for actual damages up to $500.
Alaska Data Privacy Laws: Constitutional Privacy & Breach Rules (2026)
Alaska data privacy laws explained. Learn about constitutional privacy rights, breach notification under AS 45.48, biometric protections, and SSN safeguards.
Albany Park Settlement: Claim Window Closed, Hearing Oct 23
Albany Park's deceptive-discount claim window closed August 18, 2026. A final approval hearing is set for October 23, 2026 before any money can move.
Allina Health Pixel Settlement: Approved, Not Yet Paid
A Minnesota federal judge granted final approval of the Allina Health pixel-tracking settlement on September 24, 2026 and no payment date has been set; status updates come from the court and the settlement administrator.
Amazon Prime FTC Settlement: Paid, What Claimants Received
Amazon began sending automatic Prime refunds in November 2025 and had issued more than $845 million by September 2026, with payments continuing through April 2027. Status updates come from the FTC and the settlement administrator.
ApolloMD Data Breach Settlement: Who Is Eligible, Payout
ApolloMD data breach settlement: the Sept 30, 2026 claim deadline has passed. The $4.02M deal has a final approval hearing scheduled for Oct 5, 2026.
Apple Siri Privacy Settlement: Paid, $20 Per Device
Apple's $95M Siri privacy settlement is paid; distribution began Jan. 23, 2026. See who was eligible, the $20-per-device payout, and what to do now.
Are Class Action Settlements Taxable?
It depends on what the payment replaces. See when a class action or data breach settlement is taxable under IRS rules, and when it typically is not.
Argentina Data Privacy Laws: PDPL Compliance Guide (2026)
Argentina's Personal Data Protection Law (Ley 25.326) governs data privacy with EU adequacy status confirmed January 2024. Covers AAIP enforcement, habeas data, Ley Olimpia, pending GDPR reform, and 2024-2026 developments.
Arizona Biometric Privacy Laws: Collection, Consent & Penalties (2026)
Arizona has no standalone biometric privacy law. Learn how ARS 18-551/552 protects biometric data in breaches, penalties up to $500K, and pending legislation.
Arizona Data Breach Notification Laws: Reporting Rules & Timelines (2026)
Arizona requires data breach notification within 45 days under A.R.S. §§ 18-551 and 18-552. Learn who must report, what triggers notice, and penalties up to $500,000.
Arizona Data Privacy Laws: Breach Rules & Consumer Rights (2026)
Arizona has no comprehensive privacy law but enforces strict breach notification rules under A.R.S. 18-552 with a 45-day deadline and up to $500,000 in penalties.
Arkansas Biometric Privacy Laws: Collection, Consent & Penalties (2026)
Arkansas protects biometric data under its breach notification law, not a dedicated statute. Learn what the Personal Information Protection Act requires in 2026.
Arkansas Data Breach Notification Laws: Reporting Rules & Timelines (2026)
Learn Arkansas data breach notification rules under the Personal Information Protection Act, including reporting timelines, AG requirements, and penalties.
Arkansas Data Privacy Laws: Breach Notification & Consumer Rights (2026)
Learn about Arkansas data privacy laws including the Personal Information Protection Act, breach notification rules, student data protections, and your consumer rights.
Arkansas Teen Online Privacy Law (Act 952) Now in Effect
Arkansas Act 952 (HB 1717) took effect July 1, 2026, extending COPPA-style consent, targeted-ad, and data-rights rules to minors up to age 16. What to know.
AT&T Data Breach Settlement: Final Approval Granted October 2, 2026
A federal judge granted final approval of AT&T's $177M data breach settlement on October 2, 2026. Claims closed Dec 18, 2025 and the order sets no payment date.
Australia Data Privacy Laws: Privacy Act, APPs & 2026 Reforms
Australia's Privacy Act 1988: the 13 APPs, OAIC penalties, the statutory privacy tort (in force June 2025), the NDB scheme and the 2024 to 2026 reforms. Verified September 2026.
Australia's Notifiable Data Breaches Scheme Explained
Australia's Notifiable Data Breaches scheme under Part IIIC of the Privacy Act 1988: the serious harm test, the 30-day assessment and OAIC notification.
Australian Privacy Principles: All 13 APPs Explained
The 13 Australian Privacy Principles (APPs) in Schedule 1 of the Privacy Act 1988: who must follow them and what each APP requires, in plain English.
Austria Data Privacy Laws: GDPR & DSG Guide (2026)
Austria enforces data privacy through the GDPR and DSG (Datenschutzgesetz). Learn about DSB enforcement, constitutional rights, AI Act rules, penalties, and breach rules.
B
Bahrain Data Privacy Laws: PDPL Law No. 30 of 2018 Complete Guide (2026)
Bahrain PDPL (Law No. 30 of 2018): the ten 2022 Ministry of Justice Orders, the 72-hour breach rule in Order 43, the transfer list that omits Qatar, and Article 58 penalties.
Bangladesh Data Privacy Laws: The Personal Data Protection Act 2026
Bangladesh's Personal Data Protection Act 2026 (Act 63 of 2026) replaced the 2025 ordinance on 10 April 2026. Consent, data subject rights, cross-border transfer and administrative fines.
Belgium Data Privacy Laws: GDPR Implementation Guide (2026)
Belgium enforces data privacy through GDPR, the Law of 30 July 2018, and Article 22 of the Constitution. APD/GBA fines, AI Act (BIPT), breach rules, and 2025-2026 decisions.
Bermuda Data Privacy Laws: PIPA Compliance Guide (2026)
Guide to Bermuda Personal Information Protection Act covering consent, data subject rights, Privacy Commissioner enforcement, and cross-border rules.
Biometric Privacy Laws by State (2026): BIPA, CUBI & Consent
Biometric privacy laws by state. Which states have biometric data laws like Illinois BIPA, Texas CUBI, and Washington, plus consent rules and your rights.
BIPA Compliance for Employers (2026): Step-by-Step
BIPA compliance for employers using fingerprint or face-scan timeclocks: the seven Section 15 steps, plus a free self-check tool. Avoid the most common violations.
BIPA Damages: What a Violation Is Worth (2026)
BIPA damages explained: the $1,000 and $5,000 statutory amounts, why the 2024 amendment ended per-scan math, and what people actually receive in settlements.
BIPA Explained: Illinois Biometric Privacy Act (740 ILCS 14)
BIPA, the Illinois Biometric Information Privacy Act (740 ILCS 14), explained: consent rules, the $1,000 to $5,000 penalties, key cases, and the 2024 amendment.
BIPA Statute of Limitations: The 5-Year Deadline (2026)
The BIPA statute of limitations is five years for all claims, settled by Tims v. Black Horse Carriers (2023). How the deadline works and when the clock starts.
Brazil Data Privacy Laws: LGPD Compliance Guide (2026)
Complete guide to Brazil's LGPD data privacy law. Covers the 10 legal bases, ANPD enforcement, penalties up to BRL 50M, EU adequacy decision, and compliance requirements.
Bulgaria Data Privacy Laws: GDPR & PDPA Complete Guide (2026)
Bulgaria enforces GDPR through the ZZLD (amended Aug 2024), supervised by the CPDP. Covers EGN protection, NRA breach, EU AI Act, NIS2, Schengen SIS, and compliance steps.
C
California Biometric Privacy Laws: Collection, Consent & Penalties (2026)
California protects biometric data as sensitive personal information under the CCPA/CPRA. Learn about consumer rights, breach rules, employer duties, and CPPA enforcement.
California Data Breach Notification Laws: Reporting Rules & Timelines (2026)
California requires breach notification within 30 days under SB 446. Learn who must comply, what triggers notice, CCPA damages, and AG reporting rules.
California Data Privacy Laws: CCPA, CPRA & Consumer Rights (2026)
Learn about California data privacy laws including CCPA, CPRA, consumer rights, business obligations, penalties up to $7,988 per violation, and the new 2026 DELETE Act rules.
California Delete Act and DROP: How to Delete Your Data From Data Brokers (2026)
California residents can make every registered data broker delete their data with one free DROP request. How to sign up, what brokers must do, what DROP misses.
California Lawmakers Pass SB 923: CCPA Delete-Right Expansion, Explained
California SB 923 was enrolled and presented to Governor Newsom on September 2, 2026. Under article IV, section 10(b)(2) he has until September 30 to act.
California Makes Companies Tell the AG Before Handing Over Abortion Records
California AB 1930, Chapter 468, was signed September 26, 2026. New Civil Code 1798.309 requires seven business days notice to the Attorney General before producing records.
California Repeals the Age-Appropriate Design Code and Replaces It With a New Kids' Privacy Law
California AB 2246, Chapter 187, repeals the Age-Appropriate Design Code Act and enacts a new Civil Code title with no DPIA requirement and doubled penalties.
California's Delete Act Deletion Mandate Takes Effect: Data Brokers Must Now Process DROP Requests Every 45 Days
As of August 1, 2026, California data brokers must access the DROP platform every 45 days to process consumer deletion requests under the Delete Act (SB 362). Here's what changed and what it means.
CalPrivacy Fines Two Data Brokers Under CCPA and Delete Act
California's privacy agency fined LocateSmarter $116,490 and Cybba $52,400 in August 2026; the LocateSmarter order is its first under both the CCPA and Delete Act.
Canada Tables Bill C-36 to Replace PIPEDA: What the Privacy Reform Bill Would Change
Canada introduced Bill C-36, the Protecting Privacy and Consumer Data Act, on June 15, 2026 to replace its aging federal privacy law. Status: first reading.
Cash App Data Breach Settlement: Approved, Not Yet Paid
The $15M Cash App data breach settlement has final approval but is not confirmed paid. Claims closed Nov 18, 2024; see the status and the payout tiers.
CCPA Compliance Checklist for Businesses (2026)
Step-by-step CCPA compliance checklist covering privacy policies, Do Not Sell links, data mapping, vendor contracts, employee training, and the 45-day response window.
CCPA Opt-Out Rights: Do Not Sell or Share My Personal Information (2026)
California consumers can opt out of the sale and sharing of personal data under the CCPA. Learn about GPC signals, sensitive PI limits, link requirements, and enforcement.
CCPA vs CPRA: Key Differences Explained (2026)
The CPRA (Prop 24, 2020) amended the CCPA from Jan 1, 2023: new rights to correct and limit sensitive data, a sharing opt-out, and the CPPA. Compare both.
Change Healthcare Data Breach Settlement: No Settlement Yet
As of September 2026 there is no Change Healthcare settlement, fund, or claim form. MDL 3108 is in pretrial; the next status conference is September 17, 2026.
Chantix Settlement: $44M Refund Claims, Deadline 9/14/26
Open: Pfizer's $44M Chantix (varenicline) economic-loss settlement refunds recalled-drug buyers. Claim deadline is September 14, 2026. Who may be eligible.
Character.AI Bankruptcy: State AGs Warn on Private Chat Data
A coalition of 39 states and DC filed a notice on October 14, 2026 in the Character.AI bankruptcy, seeking privacy protections for chat data in any sale.
Chile Data Privacy Laws: Ley 21.719 Reform, New Agency, and December 2026 Entry into Force
Complete guide to Chile data privacy laws: Ley 21.719 (2024) rewrites and renames Ley 19.628, creates the Agencia de Protección de Datos Personales, GDPR-aligned rights, penalties up to 20,000 UTM, and enforcement from December 2026.
China Cross-Border Data Transfer Rules: CAC Security Assessment, Standard Contract, and Certification
How China's PIPL cross-border transfer regime works: the three legal mechanisms, exact CAC Order 16 thresholds, and how to choose the right one.
China Data Privacy Laws: PIPL, CSL & DSL Compliance Guide (2026)
China's PIPL, amended Cybersecurity Law (Jan 2026), and Data Security Law: consent rules, cross-border transfers, PIPL fines up to CNY 50 million or 5% of revenue.