United States: Privacy Protection

Subscribe
Privacy law and privacy regulation thought leadership, articles, podcasts, videos and webinars from expert sources across the legal world. Explore insights covering topics including GDPR, data protection, data privacy, and privacy protection.
Article
California's Fall 2026 Privacy Roundup: Expanded CCPA Deletion Rights And More
California Governor Gavin Newsom has signed several significant privacy bills that will reshape how businesses handle consumer data, including expanded deletion rights under the CCPA, shortened data broker response cycles, and sweeping new insurance sector privacy requirements. While one landmark bill banning the sale of sensitive personal information was vetoed, the approved legislation requires companies to update their deletion workflows...
United States Privacy
SR
McDermott Will & Schulte
Article
Most Privacy Programs Plan For Vendors, Deals, And Incidents. Few Plan For What Happens To Company Data If The Business Fails.
When a company enters bankruptcy, its accumulated internal records—email, chat, source code, HR files, and operational logs—can become the most valuable asset, particularly for AI developers seeking training data. This emerging trend raises critical questions about privacy protections, employee data rights, and what happens to sensitive corporate information when there is no company left to keep the promises it made.
United States Privacy
LS
Lowenstein Sandler
Article
Governor Newsom Signs SB 690: California Eliminates Private Right Of Action For Website Pen Register And Trap And Trace Claims Under CIPA
California Governor Gavin Newsom signed Senate Bill 690 into law, fundamentally altering the landscape of website-tracking litigation by eliminating the private right of action under California Penal Code Section 638.51 for online activity. The amendment applies retroactively to many pending cases filed since January 1, 2025, potentially reshaping defense strategies while leaving other privacy claims intact.
United States Privacy
B
Benesch Friedlander Coplan & Aronoff LLP
Article
Can AI Make Real-Money Gaming More Engaging, Secure, And Fair?
Enterprise AI creates legal risk throughout the AI lifecycle, beginning before deployment. Model selection, data pipelines, vendor relationships, AI-generated outputs, consequential decision-making, contracts, and governance can create intellectual-property, privacy, confidentiality, contractual, regulatory, and liability exposure. Artificial intelligence is rapidly reshaping real-money gaming, but its value proposition is inseparable from regulatory risk.
United States Media & IT
G
Gamma Law
Article
California Governor Signs SB 690, Limiting Private Right Of Action Under CIPA’s “Pen Register” And “Trap And Trace” Provisions
California Governor Gavin Newsom signed SB 690, amending the California Invasion of Privacy Act to restrict private plaintiffs from bringing pen register and trap and trace claims arising from web-based conduct. While this amendment aims to reduce the wave of private CIPA litigation targeting website tracking technology, businesses remain exposed to several major types of claims and enforcement mechanisms under CIPA and related statutes.
United States Privacy
CM
Crowell & Moring LLP
Article
TRACKING MORE THAN JUST CALORIES: Northern District Of California Rules Over MyFitnessPal’s Motion To Dismiss.
The Northern District of California recently ruled on MyFitnessPal's motion to dismiss claims alleging the fitness app falsely represented users could opt out of third-party tracking. The court's decision addresses multiple legal grounds including wiretapping, pen register violations, and common law fraud, with varying outcomes for different plaintiffs based on the nature of their website interactions and data sharing allegations.
United States Privacy
Troutman Amin LLP
Article
California Federal Court Denies TikTok’s Motion To Dismiss Children’s Privacy Claims Based On Prior Class Action Settlements
A federal court rejected TikTok's attempt to use two prior nationwide class action settlements—totaling over $93 million—to dismiss new privacy claims brought by minors alleging violations of the Children's Online Privacy Protection Act. The ruling hinged on whether the current plaintiffs were demonstrably members of the earlier settlement classes based solely on the pleadings, raising critical questions about the scope and enforceability of broad settlement releases in successive privacy litiga
United States Litigation
DM
Duane Morris LLP
Article
When One Statute Closes, Another Opens: How CIPA Plaintiffs Are Shifting To The Wiretap Act, VPPA, And Florida’s FSCA
California's Invasion of Privacy Act has driven website-tracking litigation for three years, but as courts and legislators narrow CIPA's reach, plaintiffs' firms are pivoting to federal statutes and other state laws. The same allegations about Google Analytics, Meta pixels, and tracking tools are now being reframed under the Electronic Communications Privacy Act, Video Privacy Protection Act, and Florida's Security of Communications Act, creating multistate exposure that CIPA reform does nothing to address.
United States Privacy
JM
Jeffer Mangels & Mitchell LLP
Article
Governor Newsom Signs SB 690, Ending The Private Right Of Action Under CIPA’s Pen Register And Trap-and-Trace Provision
Governor Gavin Newsom signed Senate Bill 690 on September 30, 2026, eliminating the private right of action under California's Invasion of Privacy Act (CIPA) for pen register and trap-and-trace violations. While the law takes effect January 1, 2027, and applies retroactively for two years, its narrow scope is not expected to significantly reduce abusive CIPA litigation.
United States Litigation
BS
Ballard Spahr LLP
Video
ROBOCALLS ALLOWED ANYTIME A NUMBER IS PROVIDED?: Court Suggests Providing Number To A Caller Constitutes TCPA Express Consent For Robocalls– And This Is VERY Interesting
A federal court suggests that merely providing a phone number to a caller may constitute express consent under the TCPA for robocalls, potentially opening the door for widespread automated calling practices in the GenAI era. The ruling in Smith v. Examworks addresses whether consent must specifically authorize robocalls or if general consent to be called is sufficient, with significant implications for telemarketing compliance.
United States Technology
Troutman Amin LLP
See more