Data Privacy Laws News
The latest legal news and analysis on data privacy laws.
35 articles
South Dakota's Genetic Data Privacy Act (SB 49) Takes Effect July 1, 2026
South Dakota's Genetic Data Privacy Act, SB 49, took effect July 1, 2026, requiring consent and privacy notices from DTC genetic testing companies.
Supreme Court Overrules Humphrey's Executor, Lets the President Fire FTC Commissioners at Will
On June 29, 2026, the Supreme Court held 6 to 3 in Trump v. Slaughter that FTC commissioners can be removed at will, overruling Humphrey's Executor (1935) and unsettling agency independence.
FTC Bars Data Broker Kochava From Selling Sensitive Location Data Without Consent
The FTC's order against data broker Kochava, final on June 26, 2026, bars it for 10 years from selling sensitive location data like health clinic visits without consent.
Arkansas Teen Online Privacy Law (Act 952) Now in Effect
Arkansas Act 952 (HB 1717) took effect July 1, 2026, extending COPPA-style consent, targeted-ad, and data-rights rules to minors up to age 16. What to know.
Utah Digital Choice Act Takes Effect: Data Portability Rules
Utah's Digital Choice Act (HB 418) is now in force as of July 1, 2026, requiring social media data portability and interoperability. What the law requires.
FTC Fines Amazon $2.25 Million for Denying Identity-Theft Victims Their Fraud Records Under the FCRA
The FTC fined Amazon $2.25 million on June 30, 2026 for knowingly violating FCRA Section 609(e) by denying identity-theft victims the fraud records they are owed within 30 days.
Connecticut Expands Its Privacy Law: What PA 25-113 Means Starting July 1
Connecticut Public Act 25-113 takes effect July 1, 2026, lowering the CTDPA threshold to 35,000 consumers and adding neural data, AI-training disclosure, and under-18 protections.
Texas Attorney General Opens Data-Breach Investigation Into Carnival, Issues Civil Investigative Demand (2026)
Texas AG Paxton opened a data-breach investigation into Carnival and issued a Civil Investigative Demand on June 23, 2026. An investigation, not a finding.
Canada Tables Bill C-36 to Replace PIPEDA: What the Privacy Reform Bill Would Change
Canada introduced Bill C-36, the Protecting Privacy and Consumer Data Act, on June 15, 2026 to replace its aging federal privacy law. Status: first reading.
UK's Data (Use and Access) Act 2025 Rewrites UK GDPR Rules: What Changed and When
The Data (Use and Access) Act 2025 reshapes UK GDPR, the DPA 2018 and PECR. Royal Assent on 19 June 2025, with key privacy rules in force from 5 February 2026.
FTC Finalizes Order Banning Data Broker Mobilewalla From Selling Sensitive Location Data
The FTC's finalized 2025 order against data broker Mobilewalla bans selling sensitive location data and limits collection from ad auctions. What the order says.