Loading...
The latest legal news and analysis on data privacy laws.
13 articles
As of August 1, 2026, California data brokers must access the DROP platform every 45 days to process consumer deletion requests under the Delete Act (SB 362). Here's what changed and what it means.
NJ Gov. Sherrill signed A5328 on June 30, 2026, banning sensitive-data sales and creating a data-broker registry with fees up to $1.5 million and $50,000 per-record penalties.
South Dakota's Genetic Data Privacy Act, SB 49, took effect July 1, 2026, requiring consent and privacy notices from DTC genetic testing companies.
On June 29, 2026, the Supreme Court held 6 to 3 in Trump v. Slaughter that FTC commissioners can be removed at will, overruling Humphrey's Executor (1935) and unsettling agency independence.
The FTC's order against data broker Kochava, final on June 26, 2026, bars it for 10 years from selling sensitive location data like health clinic visits without consent.
Arkansas Act 952 (HB 1717) took effect July 1, 2026, extending COPPA-style consent, targeted-ad, and data-rights rules to minors up to age 16. What to know.
Utah's Digital Choice Act (HB 418) is now in force as of July 1, 2026, requiring social media data portability and interoperability. What the law requires.
The FTC fined Amazon $2.25 million on June 30, 2026 for knowingly violating FCRA Section 609(e) by denying identity-theft victims the fraud records they are owed within 30 days.
Connecticut Public Act 25-113 takes effect July 1, 2026, lowering the CTDPA threshold to 35,000 consumers and adding neural data, AI-training disclosure, and under-18 protections.
Texas AG Paxton opened a data-breach investigation into Carnival and issued a Civil Investigative Demand on June 23, 2026. An investigation, not a finding.
Canada introduced Bill C-36, the Protecting Privacy and Consumer Data Act, on June 15, 2026 to replace its aging federal privacy law. Status: first reading.
The Data (Use and Access) Act 2025 reshapes UK GDPR, the DPA 2018 and PECR. Royal Assent on 19 June 2025, with key privacy rules in force from 5 February 2026.
The FTC's finalized 2025 order against data broker Mobilewalla bans selling sensitive location data and limits collection from ad auctions. What the order says.