Loading...
433 articles · page 2 of 8
Connecticut requires 60-day breach notification, 24-month credit monitoring for SSN breaches, and AG reporting. Learn the rules under Conn. Gen. Stat. 36a-701b.
Learn about Connecticut data privacy laws including the CTDPA, consumer rights, business obligations, penalties up to $5,000 per violation, and breach notification rules.
Connecticut Public Act 25-113 takes effect July 1, 2026, lowering the CTDPA threshold to 35,000 consumers and adding neural data, AI-training disclosure, and under-18 protections.
Practical guide to cookie banner requirements in the US and EU covering what to include, design rules, and common compliance mistakes.
Country-by-country guide to cookie consent requirements: the EU ePrivacy + GDPR opt-in model, the UK DUAA 2025 changes, the US state-law patchwork, and 30+ other jurisdictions including Brazil, China, India, and Australia.
Costa Rica data privacy law explained: Ley 8968, PRODHAB authority, constitutional basis, consent, data subject rights, database registration, cross-border transfers, penalties, and 2026 reform status.
Croatia enforces GDPR through the Act on Implementation (NN 42/2018) and AZOP, which imposed nearly EUR 7M in fines during 2025. Learn constitutional basis, OIB protections, cross-border transfer rules, EU AI Act overlay, and compliance steps.
Step-by-step CTDPA compliance checklist: applicability thresholds, privacy notice requirements, sensitive data opt-in consent, universal opt-out signals, data protection assessments, processor contracts, and AG enforcement rules for Connecticut businesses.
Connecticut residents have five CTDPA rights: access, correct, delete, portability, and opt-out. Learn step-by-step how to submit requests, use GPC, appeal denials, and file a complaint with the CT AG.
Cyprus data privacy law explained: GDPR + Law 125(I)/2018, OCPDP enforcement, constitutional basis, DPO rules, cross-border transfers, EU AI Act, and 2024-2026 fines.
Czech Republic data privacy laws explained: GDPR + Act No. 110/2019 Coll., the ÚOOÚ supervisory authority, the EUR 13.9M Avast fine, public body exemptions, EU AI Act overlay, and 2024–2026 developments.
Verified data breach notification deadlines for 45+ countries: regulator vs. individual notice, split out, with the errors most trackers get wrong.
Country-by-country guide to data localization and residency requirements: China CSL 2026 update, Russia, India DPDP Rules, Vietnam, Indonesia, Nigeria NDPA 2023, Saudi Arabia, Kazakhstan, EU, and more.
Complete guide to DPO requirements worldwide. Covers GDPR Articles 37-39 triggers, EDPB guidelines, and DPO-equivalent rules in Brazil, China, Singapore, Malaysia, India, South Korea, UAE, and more.
Data retention law has two meanings: the GDPR storage-limitation principle (keep no longer than necessary) and mandatory telecom metadata laws. Compare rules across 14 countries including CJEU case law through 2024.
Learn how Delaware's Personal Data Privacy Act protects biometric data like fingerprints and iris scans, including consent rules, penalties, and employer obligations.
Delaware requires data breach notification within 60 days. Learn who must comply, what data triggers reporting, AG notice rules, and encryption safe harbor.
Learn about the Delaware Personal Data Privacy Act (DPDPA), its low 35,000-consumer threshold, consumer rights, sensitive data protections, and enforcement penalties up to $10,000.
Wyssta's $12.67M Delta Dental website-tracking settlement pays an est. $16.50 per claim. Open through Aug. 20, 2026; here's who may be eligible.
Denmark enforces GDPR through courts, not direct DPA fines. Learn how Datatilsynet works, the Danish Data Protection Act, EU AI Act Law 467/2025, CPR numbers, and compliance requirements.
The Disney streaming antitrust settlement is open, with a $50M fund and a Sept. 8, 2026 claim deadline. See who's eligible and how filing works.
DC protects biometric data through its breach notification law (DC Code 28-3851). Learn what triggers notification, penalties, and how DC compares to states with stronger biometric laws.
DC requires breach notification without unreasonable delay and AG notice when 50+ residents are affected. Learn about the private right of action, 18-month identity theft protection, and penalties.
DC has no comprehensive privacy law yet. D.C. Code §§ 28-3851 to 28-3853 require breach notification; the AG enforces via CPPA. Federal overlay includes the TAKE IT DOWN Act (FTC enforcement live May 2026).
Do you have a BIPA claim? Use our free checker. You may qualify if a private company in Illinois scanned your fingerprint or face without written consent.
GDPR applies to US companies that target or monitor people in the EU under Article 3(2). Learn the scope test, EU representative rule, and how to comply.
Live tracker of India's DPDP Act commencement: what's in force now, what's coming in 2026-2027, the unstaffed Data Protection Board, and CERT-In overlap.
Delaware DPDPA compliance steps (Del. Code tit. 6, ch. 12D): 35,000-consumer test, notice, opt-in sensitive data, GPC by Jan 1, 2026, $10,000 penalties.
Delaware DPDPA rights (Del. Code tit. 6, § 12D-104): access, delete, opt out, third-party list, 45-day response, and a Jan 1, 2026 universal opt-out.
Duke Health's MyChart pixel-tracking settlement is open through August 16, 2026. Who qualifies, realistic payout, and how to file, explained.
The most secure email is Proton Mail, which uses end-to-end encryption. Gmail, iCloud, and Outlook use TLS only. Learn how to secure any email account.
Complete guide to Ecuador's Ley Orgánica de Protección de Datos Personales (LOPDP): constitutional basis, SPDP authority, first sanctions (Dec 2025), DPO requirements, cross-border transfers, and business compliance.
Egypt's Personal Data Protection Law No. 151 of 2020 and Ministerial Decree 816/2025 (Executive Regulations): licensing regime, PDPC authority, data subject rights, cross-border transfers, penalties, and the October 2026 compliance deadline.
Emanate Health's Meta Pixel privacy settlement is open, pending final approval. Claim deadline Sept 29, 2026. Fund $777,000, paid pro rata.
State-by-state guide to employee data privacy. Covers workplace monitoring, biometrics, social media passwords, GPS tracking, and CCPA employee rights.
Claims open through Sept. 1, 2026 in the Equifax Duplicate Account FCRA Settlement. See who is in the class, what you may get, and how to file.
Esse Health's data breach settlement claim window closes August 4, 2026. See who's eligible, the ~$50 no-proof payout, and how to file for free.
Estonia enforces data privacy through the EU GDPR and the Personal Data Protection Act (2019). Learn about AKI enforcement, the EUR 3 million Apotheka fine, constitutional rights, e-Estonia context, and business compliance obligations.
Complete guide to EU adequacy decisions under GDPR Article 45: all 17 adequate countries, the UK December 2025 renewal, the Brazil 2026 decision, the January 2024 review of 11 pre-GDPR decisions, and DPF litigation risks.
EU AI Act bans social scoring, facial scraping, and workplace emotion recognition since Feb 2025. Layers onto GDPR, demands FRIAs, and carries EUR 35M fines.
Complete guide to the EU ePrivacy Directive cookie law: consent requirements, the strictly-necessary exemption, how it interacts with GDPR, the withdrawn ePrivacy Regulation, and the November 2025 Digital Omnibus cookie proposals.
Complete guide to EU data privacy law: the GDPR framework across 27 member states, the EU AI Act phased timeline, the ePrivacy Directive, the withdrawn ePrivacy Regulation, the 2025 GDPR Procedural Regulation, the November 2025 Digital Omnibus proposal, and the wider digital rulebook.
Complete guide to the EU-US Data Privacy Framework: history, self-certification, the Data Protection Review Court, the Latombe case (dismissed September 2025, appealed to CJEU as C-703/25 P), PCLOB disruption, and what happens if the DPF falls.
The Evolve Bank & Trust data breach settlement is paid. Checks went out March 30, 2026. Here is who was covered and what people actually got.
FDBR compliance under Fla. Stat. 501.701 et seq.: the $1B controller test, privacy notice, opt-in sensitive data, opt-outs, and $50,000 penalties.
Florida Digital Bill of Rights (Fla. Stat. 501.705): access, delete, port, opt out of sale, and opt out of voice and facial recognition collection.
Fidelity's data breach settlement claim window closes July 27, 2026. See who may be eligible, the ~$100 pro rata payment, and how to file for free.
Finland data privacy guide: GDPR, Data Protection Act 1050/2018, workplace privacy, Act 1377/2025 AI supervision, DPO enforcement, 2024-2026 fines, and compliance tips.
The $31.5M Flagstar Bank data breach settlement is open. Claims are due August 11, 2026. See who is covered and what a realistic payout looks like.
The Flo Health period-tracker privacy settlement is open: $59.5M fund, pro rata payouts, claims due Oct. 15, 2026. See who is eligible and how to file.
Florida biometric privacy law covers fingerprints, voiceprints, and iris scans under the FDBR. Learn opt-out rights, penalties, and the $1B threshold.
Learn Florida's 30-day data breach notification deadline, penalty structure up to $500,000, AG reporting rules, and encryption safe harbor under Fla. Stat. 501.171.
Florida data privacy laws include the Digital Bill of Rights targeting Big Tech and FIPA breach notification rules. Learn FDBR thresholds, consumer rights, and penalties.
France enforces data privacy through GDPR and the Loi Informatique et Libertés. Learn about CNIL fines, cookie rules, breach notification, AI Act, and penalties.
The FTC's order against data broker Kochava, final on June 26, 2026, bars it for 10 years from selling sensitive location data like health clinic visits without consent.
The FTC's finalized 2025 order against data broker Mobilewalla bans selling sensitive location data and limits collection from ad auctions. What the order says.
The FTC fined Amazon $2.25 million on June 30, 2026 for knowingly violating FCRA Section 609(e) by denying identity-theft victims the fraud records they are owed within 30 days.
Step-by-step GDPR compliance checklist: data mapping, lawful bases, privacy notices, DPIAs, breach procedures, DPO, AI Act obligations, and the November 2025 Digital Omnibus changes.
What valid consent means under GDPR: the four elements of Article 4(11), Article 7 conditions, explicit consent for special-category data, children consent, cookie rules, consent-or-pay models, and 2025 enforcement.
Complete guide to GDPR Articles 33 and 34 breach notification: the 72-hour rule, what counts as a personal data breach, processor duties, EDPB Guidelines 9/2022, enforcement cases, and how the clock starts.