Privacy Headlines
13 headlines in the database.
Data Protection Report · 3/19/2026
On 9 February 2026, the Commission Nationale de l’Informatique et des Libertés (CNIL) published its 2025 report on its enforcement action. Beyond the €487 million – in cumulative fines – largely driven (unsurprisingly) by two sanctions related to cookies, another trend deserves attention: the growing numbers of fines for failure to ensure the security of personal... Continue Reading
Data Protection Report · 3/13/2026
On January 1, 2026, the California Privacy Protection Agency’s (“CalPrivacy”) cybersecurity audit regulations (the “Regulations”) took effect after several years of rulemaking and public comment. As previewed in the Data Protection Report, certain businesses subject to the California Consumer Privacy Act as amended by the California Privacy Rights Act are now required to conduct comprehensive... Continue Reading
Data Protection Report · 3/6/2026
Earlier this year, the Attorneys General of Massachusetts and Connecticut entered into settlement agreements with Comstar, LLC, an ambulance billing firm, relating to alleged HIPAA regulation violations in connection with a ransomware incident.  Comstar is a business associate under HIPAA, and state regulators are authorized to enforce HIPAA under the authority granted by the Health... Continue Reading
Data Protection Report · 2/24/2026
Even when stringent protective orders are in place, clients are often concerned that the sensitive information they are required to produce in litigation will end up being disclosed or used for improper purposes. Clients often ask whether the protective order is strong enough to ensure that the other side will comply with the provisions. It... Continue Reading
Data Protection Report · 2/14/2026
On February 11, 2026, California Attorney General Rob Bonta announced a $2.75 million settlement with The Walt Disney Company (“Disney”), the largest civil penalty to date under the California Consumer Privacy Act as amended by the California Privacy Rights Act (collectively, “CCPA”), resolving claims that Disney’s opt-out mechanisms did not fully satisfy CCPA requirements. This... Continue Reading
Data Protection Report · 2/11/2026
The False Claims Act (“FCA”), the U.S. federal government’s principal civil anti-fraud statute, imposes liability on entities that knowingly submit, or cause the submission of, false or misleading claims for payment to the United States. The FCA has long served as a significant enforcement tool for the U.S. Department of Justice (“DOJ”) in dealing with... Continue Reading
Data Protection Report · 9/11/2024
Data Protection Report · 2/13/2024
Data Protection Report · 9/23/2021
Data Protection Report · 11/17/2020
Data Protection Report · 11/17/2020
Data Protection Report · 11/12/2019
Showing 1 - 13 of 13 results