Loading...
The latest legal news and analysis on privacy laws.
30 articles
A federal judge granted final approval on July 14, 2026 to the $4.5M Capital Health data breach settlement. The claim window closed April 6, 2026; approved payments follow after appeals.
The Seventh Circuit ruled TCPA text messages are not telephone calls under Do-Not-Call law, creating a circuit split with the Ninth Circuit's Howard ruling.
A coalition of 42 state attorneys general secured an $18 million settlement with 23andMe over its 2023 genetic data breach. The money goes to the states, not a new consumer payout.
SCOTUS denied emergency bids to block Texas's SB 2420 app store age verification law on July 6, 2026. The merits are undecided; Fifth Circuit review is next.
Effective July 1, 2026, Virginia police may use facial recognition under Va. Code 15.2-1723.2: model policy, annual reports, 98% NIST accuracy, and use limits.
A federal judge granted a preliminary injunction on June 27, 2026 blocking Nebraska's LB 383 social media age-verification and parental-consent mandates on First Amendment grounds.
The Supreme Court held 6-3 on June 29, 2026 that a geofence warrant is a Fourth Amendment search. Chatrie v. United States (No. 25-112) extends Carpenter to phone location data.
A divided Sixth Circuit revived Ohio's parental-consent social media law on June 18, 2026 and held NetChoice has no standing to assert minors' rights.
Vermont signed H.816 on June 17, 2026, barring AI-delivered mental health therapy. Diagnosis and treatment are reserved for qualified professionals.
Florida AG James Uthmeier sued TikTok on June 15, 2026 under HB3, Florida's social media minors law, seeking a public-nuisance ruling and per-violation penalties.
FISA Section 702 lapsed June 12, 2026 after the House rejected an extension 198 to 218. Why warrantless surveillance continues anyway, and what 50 U.S.C. 1881a does.
Vermont H.211 passed the legislature May 29, 2026 and awaits Gov. Phil Scott. What the data broker overhaul would do, and what it would not, if signed.
A bankruptcy judge approved the $46.75M 23andMe data breach settlement on July 6, 2026. Here is what the payout tiers mean and how distribution works.
The ACLU alleges Florida police wrongly arrested Robert Dillon on a 93% facial recognition match. What the June 2026 lawsuit claims and what the law requires.
Connecticut's Public Act 26-64, signed May 27, 2026, requires facial-recognition entrance signs and limits license-plate-reader data. Here is what it does.
Colorado Gov. Polis signed SB26-051 on June 3, 2026, moving online age checks to the device operating system. It takes effect January 1, 2028.
Vermont Governor Phil Scott signed S.71, the Data Privacy and Online Surveillance Act, into law on June 16, 2026, eight days after vetoing it. The Act adds consumer data rights, a data-minimization duty, and a clinic-geofencing ban, effective January 1, 2028.
Illinois lawmakers passed HB 5511, the Children's Online Social Media Safety Act, on June 1, 2026, using device-level age checks for minors. It awaits Gov. Pritzker.
Texas SB 2420, the App Store Accountability Act, took effect June 4, 2026 after the Fifth Circuit stayed a federal injunction. What the app store age-verification law requires and the ongoing First Amendment appeal.
On June 4, 2026, the FTC opened public comment on X Corp.'s petition to set aside the 2022 Twitter privacy order tied to a $150 million penalty. Comments are due July 2, 2026.
On June 5, 2026, the FTC finalized a consent order against ed-tech firm Illuminate Education over a breach exposing 10.1 million students data, mandating deletion and security but no fine.
The Supreme Court ruled 8-1 on June 4, 2026 that the FCC can fine carriers for mishandling customer location data without a jury, reinstating nearly $200M in penalties.
Iowa Gov. Kim Reynolds signed HF 864 on June 1, 2026, requiring adult sites to verify users' ages from July 1 and barring verifiers from keeping the ID data.
California AG Rob Bonta sued Chrome Holding Co. (formerly 23andMe) on May 28, 2026 over the 2023 genetic data breach affecting nearly 7 million people, invoking GIPA and the CCPA.