H&M Fined For GDPR Violation

California Governor Newsom has signed Senate Bill 574 into law, establishing the nation's first statutory framework governing how attorneys and arbitrators use generative AI in their professional practice. The legislation creates specific obligations around confidentiality protection, accuracy verification, and disclosure requirements that take effect January 1, 2027.

Although being challenged by an injunction filed on August 20, 2026, by a coalition of 17 states, California’s SB 54 Plastic Pollution Prevention and Packaging Producer Responsibility Act is now in effect, and companies that sell, distribute, import, or ship packaged products into California should be evaluating whether they have compliance obligations.

Scott L. Vernick was quoted in The Legal Intelligencer article, "Did UPMC Data Breach Ruling Lock Plaintiffs Out of State Court?" on January 23, 2017.

California's 2026 legislative session concluded with Governor Newsom signing several landmark privacy and AI bills into law, including comprehensive child safety measures, AI auditor oversight frameworks, and expanded data protection requirements. How will these new regulations reshape digital advertising, workplace AI deployment, and online platform obligations for businesses operating in California?

Connecticut’s Governor has signed into law Public Act No. 26-64, “An Act Concerning Consumer Privacy and Protection,” which introduces substantial new compliance obligations for businesses that operate as data brokers...

In the last few months, California and New Jersey enacted legislation to protect children online: California’s 13-bill package targets risks to children arising from emerging technologies, while New Jersey’s 3-bill package includes an age-appropriate design code. Despite their differences, these laws share a common focus on protecting children as technology evolves.

California Governor Gavin Newsom has signed several significant privacy bills that will reshape how businesses handle consumer data, including expanded deletion rights under the CCPA, shortened data broker response cycles, and sweeping new insurance sector privacy requirements. While one landmark bill banning the sale of sensitive personal information was vetoed, the approved legislation requires companies to update their deletion workflows...

Legal risk intensifies for companies offering online interactive features to minors across Georgia, Florida, and Alabama as the Eleventh Circuit vacates preliminary injunctions against state social media laws. With Florida's HB 3 and Georgia's SB 351 now enforceable and Alabama's HB 161 set to take effect January 1, 2027, businesses face divergent compliance requirements including age verification, parental consent mechanisms, and account deletion protocols.

Meta Platforms has agreed to pay $17 billion over ten years to resolve multistate litigation alleging the company engineered Facebook and Instagram to addict minors while concealing the risks. Beyond the historic financial penalty, the settlement mandates sweeping platform changes including default usage limits, overnight lockouts, and parental controls for users under eighteen.

Multiple organizations have recently disclosed significant data breaches affecting thousands of individuals, with compromised information ranging from basic contact details to highly sensitive medical records and financial data. The incidents span various sectors including healthcare, insurance, and professional services, raising questions about the scope of exposure and potential remedies for affected individuals.

As breach litigations increase, understanding how to protect attorney-client privilege has become critical for companies facing cybersecurity incidents.

In a pivotal move that signals increased scrutiny of digital marketing practices, the Office of the Australian Information Commissioner (OAIC) released comprehensive guidance on November 4, 2024...

On July 30, 2024, Texas Attorney General Ken Paxton reached a record $1.4 billion deal to settle claims against Meta (formerly known as Facebook) related to the tech giant's...

Recently three plaintiffs filed a class-action lawsuit alleging that Amazon violated Illinois' Biometric Information Privacy Act ("BIPA"), by collecting and storing "voiceprints" without the users'...

As we move toward the end of 2024, it seems the time is right for an update of AI statutory developments so far this year. While the EU has once again set the standard with the EU AI Act...

As artificial intelligence (AI) continues to rapidly evolve, its growing impact on data privacy and cybersecurity has prompted governments and organizations to focus on developing comprehensive policy...

Apple Intelligence was launched on Monday, October 28, and is available on any iPhone 16 and iPhone 15 Pro that is updated to iOS 18.1. It is also available on certain models of iPads and Macs.

After a long wait, on September 30, 2024, China released the "Network Data Security Management Regulations" ("Regulations"). These regulations help clarify requirements under China's Cyber Security Law ("CSL").

Artificial Intelligence (AI) is transforming industries, enhancing consumer experiences, and advancing societal goals.

On November 12, 2020, Vodafone, the multinational telecommunications company, was fined €12.25 million by Garante, Italy's data protection authority.