1. Consumer Law Reforms -
2023 will see an increase in class action lawsuits targeting per- and poly-fluoroalkyl substances (PFAS) in consumer products as more PFAS-limiting laws go into effect. Specifically, we expect food...more
4/4/2023
/ Artificial Intelligence ,
Automatic Renewals ,
Cryptoassets ,
Fake Reviews ,
Federal Trade Commission (FTC) ,
Influencers ,
Non-Fungible Tokens (NFTs) ,
PFAS ,
Popular ,
Privacy Laws ,
Product Packaging ,
Proposition 65 ,
ROSCA ,
Subscription Services ,
Toxic Chemicals ,
Unfair or Deceptive Trade Practices
GoodRx Faces Million Dollar Proposed Penalty from FTC in First Enforcement Action Under the Health Breach Notification Rule -
Settlement reveals views on application of unfairness authority to sharing of sensitive...more
3/2/2023
/ Artificial Intelligence ,
Biometric Information Privacy Act ,
Breach Notification Rule ,
California Privacy Rights Act (CPRA) ,
Class Action ,
Data Privacy ,
Data Security ,
FCC ,
Federal Trade Commission (FTC) ,
FTC Act ,
Health Insurance Portability and Accountability Act (HIPAA) ,
HIPAA Breach ,
NIST ,
PHI ,
Risk Management ,
Rulemaking Process ,
Settlement ,
VPPA
With the start of the new year, the ArentFox Schiff Metaverse Industry team reviews 10 of the most pressing legal issues for companies in 2023....more
1/31/2023
/ Blockchain ,
CFTC ,
Class Action ,
Compliance ,
Customer-Loyalty Programs ,
Data Privacy ,
Decentralized Autonomous Organization (DAO) ,
Digital Assets ,
DMCA ,
Enforcement ,
Federal Trade Commission (FTC) ,
ICANN ,
Metaverse ,
Non-Fungible Tokens (NFTs) ,
Popular ,
Professional Development ,
Securities Act of 1933 ,
Securities and Exchange Commission (SEC)
Colorado Department of Law Issues Draft CPA Revisions -
On December 22, the Colorado Department of Law issued updates to the draft Colorado Privacy Act (CPA) rules. These revisions build on written comments and feedback from...more
1/13/2023
/ Biometric Information Privacy Act ,
California Consumer Privacy Act (CCPA) ,
California Privacy Rights Act (CPRA) ,
Colorado ,
COPPA ,
Data Security ,
Employee Definition ,
EU ,
EU-US Privacy Shield ,
Federal Trade Commission (FTC) ,
General Data Protection Regulation (GDPR) ,
Health Insurance Portability and Accountability Act (HIPAA) ,
Mobile Apps ,
New Guidance ,
Penalties ,
Personal Data ,
Popular ,
Privacy Laws ,
Rulemaking Process ,
Standard Contractual Clauses ,
UK
The Federal Trade Commission (FTC) announced on December 14, 2022, that it is seeking public comment on potential updates and changes to its “Green Guides,” kicking off a process that may lead to the first significant changes...more
Pandora’s Virtual Try-On Tool Leads to BIPA Class Complaint -
On November 15, 2022, a group of plaintiffs brought a purported class action against Pandora Jewelry LLC, claiming that its virtual try-on tool violates...more
12/12/2022
/ Biometric Information Privacy Act ,
Breach of Contract ,
Cease and Desist Orders ,
Class Action ,
Computer Fraud and Abuse Act (CFAA) ,
Federal Trade Commission (FTC) ,
General Data Protection Regulation (GDPR) ,
Health Insurance Portability and Accountability Act (HIPAA) ,
hiQ Labs Inc v LinkedIn Corp ,
LinkedIn ,
NIST ,
Personal Information ,
SCOTUS ,
Social Media ,
Twitter ,
Virtual Reality ,
Web Scraping
FTC Is Tracking Twitter Developments With “Deep Concern” -
Elon Musk’s recent purchase of Twitter has led to numerous resignations in the security department. Most recently, Twitter’s chief information security officer,...more
11/15/2022
/ Biometric Information Privacy Act ,
California Privacy Rights Act (CPRA) ,
Consent Order ,
Cybersecurity ,
Data Privacy ,
Data Retention ,
EU ,
Federal Trade Commission (FTC) ,
General Data Protection Regulation (GDPR) ,
NYDFS ,
Personal Information ,
Risk Assessment ,
Twitter
FTC Publishes Advance Notice of Proposed Rulemaking on Commercial Surveillance and Data Security -
Concerned that companies use secret surveillance practices to collect “vast troves” of consumer information, the Federal...more
8/18/2022
/ Advanced Notice of Proposed Rulemaking (ANPRM) ,
California Consumer Privacy Act (CCPA) ,
CIPA ,
Data Security ,
Department of Justice (DOJ) ,
Federal Trade Commission (FTC) ,
Privacy Laws ,
Rulemaking Process ,
Sensitive Personal Information ,
UK ,
UK Data Protection Act
The Federal Trade Commission (FTC) recently announced plans to crack down on the illegal use and sharing of sensitive data in response to the recent Supreme Court decision in Dobbs v. Jackson Women’s Health Organization...more
CPPA Amends Draft CPRA Regulations & Announces Public Comment Dates -
The California Privacy Protection Agency (CPPA) has announced amendments to the California Privacy Rights Act proposed regulations, which primarily...more
7/13/2022
/ Advanced Notice of Proposed Rulemaking (ANPRM) ,
California Consumer Privacy Act (CCPA) ,
California Privacy Rights Act (CPRA) ,
Cookies ,
Data Breach ,
Data Brokers ,
Data Protection ,
Department of Justice (DOJ) ,
Enforcement ,
Federal Trade Commission (FTC) ,
FTC Act ,
General Data Protection Regulation (GDPR) ,
Metaverse ,
New Regulations ,
Privacy Laws ,
Rulemaking Process
Buying a car has evolved from the days of brick and mortar dealerships to e-commerce, where consumers can select their preferred dealer, reserve, order, finance, and purchase a new or used vehicle in a seamless transaction....more
7/6/2022
/ Augmented Reality ,
Blockchain ,
Class Action ,
Cryptocurrency ,
Cybersecurity ,
False Advertising ,
Federal Trade Commission (FTC) ,
FTC Act ,
Intellectual Property Protection ,
IRS ,
Metaverse ,
Popular ,
Truth in Lending Act (TILA) ,
Virtual Reality
As more states enact their own privacy laws, members of the privacy community and those impacted by privacy legislation continue to push for uniformity. The American Data Privacy and Protection Act (ADPPA) addresses this...more
7/6/2022
/ Biometric Information Privacy Act ,
Breach Notification Rule ,
California Consumer Privacy Act (CCPA) ,
Chief Privacy Officer ,
Communications Act of 1934 ,
Consumer Privacy Rights ,
Data Breach ,
Data Privacy ,
Data Protection ,
Data Security ,
Federal Data Privacy ,
Federal Trade Commission (FTC) ,
Online Safety for Children
The Federal Trade Commission (FTC) and Department of Justice (DOJ) recently ordered Twitter to pay $150 million for violating a 2011 FTC order that prohibited the company from misrepresenting its privacy and data security...more
California Privacy Protection Agency Releases Draft CPRA Regulations -
The California Privacy Protection Agency (CPPA) just released proposed California Privacy Rights Act (CPRA) regulations. The regulations expand...more
6/8/2022
/ Artificial Intelligence ,
Biometric Information ,
California ,
California Consumer Privacy Act (CCPA) ,
California Privacy Rights Act (CPRA) ,
CNIL ,
Cyber Crimes ,
Data Breach ,
Data Security ,
Department of Justice (DOJ) ,
Employment Discrimination ,
Equal Employment Opportunity Commission (EEOC) ,
EU-US Privacy Shield ,
European Data Protection Board (EDPB) ,
Facial Recognition Technology ,
Federal Trade Commission (FTC) ,
Hiring & Firing ,
Job Applicants ,
Personal Information ,
Privacy Laws ,
Schrems I & Schrems II
As technology becomes increasingly a part of student learning, education technology (ed tech) companies, parents, and educators should stay abreast of children’s privacy rights under the Children’s Online Privacy Protection...more
In a first-of-its-kind case, the Federal Trade Commission required Fashion Nova to pay $4.2 Million for blocking negative customer reviews in violation of the FTC Act. Shortly after, the agency released new guidance for...more
FTC Warns Companies to Remediate Log4j Security Vulnerability -
Log4j is a ubiquitous piece of software used to record activities in a wide range of systems found in consumer-facing products and services. Recently, a...more
1/19/2022
/ Apple ,
Audits ,
CNIL ,
Cybersecurity ,
Data Breach ,
Data Privacy ,
Data Protection ,
Department of Defense (DOD) ,
European Data Protection Board (EDPB) ,
Federal Trade Commission (FTC) ,
GAO ,
General Data Protection Regulation (GDPR) ,
Opt-Outs
Best Practices for the Virginia Consumer Data Protection Act -
The Virginia Consumer Data Protection Act (VCDA) Working Group of the Joint Commission on Technology and Science released its final report on best practices...more
12/10/2021
/ CDPA ,
CNIL ,
Consumer Financial Protection Bureau (CFPB) ,
Consumer Privacy Rights ,
Cybersecurity Information Sharing Act (CISA) ,
Data Breach ,
Data Privacy ,
Data Security ,
Employee Monitoring ,
Enforcement Actions ,
ENISA ,
European Data Protection Board (EDPB) ,
European Economic Area (EEA) ,
Fair Credit Reporting Act (FCRA) ,
Federal Trade Commission (FTC) ,
General Data Protection Regulation (GDPR) ,
Privacy Laws ,
Ransomware ,
UNESCO ,
Virginia
California Signs New CCPA and Privacy Related Bills into Law -
California’s Governor recently signed into law three new bills impacting CCPA and privacy in California, including:
AB 335, which exempts from the CCPA and...more
11/11/2021
/ California ,
California Consumer Privacy Act (CCPA) ,
China ,
Consumer Financial Protection Bureau (CFPB) ,
Cybersecurity ,
Data Collection ,
Department of Justice (DOJ) ,
Dodd-Frank ,
Federal Trade Commission (FTC) ,
Fraud ,
New Legislation ,
Personal Information ,
Popular ,
Ransomware ,
State Privacy Laws
The U.S. Federal Trade Commission (FTC) on October 13, 2021, warned 700 major consumer products companies and national advertisers that any future violations of the FTC’s endorsement and testimonial guidance could result in...more
In Blackbaud Inc. Customer Data Security Breach Litigation, No. 3:20-mn-02972 (D.S.C. Aug. 12, 2021), a federal judge found that defendant, Blackbaud Inc. was subject to the CCPA despite its motion to dismiss asserting that...more
9/22/2021
/ California ,
California Consumer Privacy Act (CCPA) ,
China ,
Class Action ,
COPPA ,
Cyber Attacks ,
Data Breach ,
Data Collection ,
Enforcement Actions ,
EU ,
Federal Trade Commission (FTC) ,
International Data Transfers ,
Personal Information Protection Law (PIPL) ,
Securities and Exchange Commission (SEC) ,
Settlement ,
Standard Contractual Clauses ,
UK
SCOTUS: Accessing Private Database for Improper Purpose Not Violation of Computer Fraud and Abuse Act.
In a recent Supreme Court case, Van Buren v. United States, the Court narrowed the applicability of the Computer Fraud...more
7/20/2021
/ Attorney-Client Privilege ,
Biometric Information Privacy Act ,
California Consumer Privacy Act (CCPA) ,
Computer Fraud and Abuse Act (CFAA) ,
Data Security ,
Databases ,
Department of Justice (DOJ) ,
Disclosure Requirements ,
European Commission ,
Federal Trade Commission (FTC) ,
Internet Privacy ,
Police ,
Popular ,
Ransomware ,
SCOTUS ,
Securities and Exchange Commission (SEC) ,
Securities Exchange Act of 1934 ,
Settlement ,
Standard Contractual Clauses ,
Unauthorized Access ,
Van Buren v United States
The legislation updates the Children’s Online Privacy Protection Act (COPPA) by prohibiting internet companies from collecting personal information from anyone 13- to 15-years old without the user’s consent
Senators...more
6/9/2021
/ Biometric Information ,
Broker-Dealer ,
Cookie Banners ,
COPPA ,
Cybersecurity ,
Cybersecurity Information Sharing Act (CISA) ,
Data Collection ,
Data Protection ,
EU ,
European Commission ,
Executive Orders ,
Facial Recognition Technology ,
FBI ,
Federal Trade Commission (FTC) ,
General Data Protection Regulation (GDPR) ,
Latin America ,
NGOs ,
Online Safety for Children ,
Personal Information ,
Popular ,
Proposed Legislation ,
Schrems I & Schrems II ,
Securities and Exchange Commission (SEC) ,
Standard Contractual Clauses ,
Suspicious Activity Reports (SARs)
The Federal Trade Commission (FTC) continues to put emphasis on the importance of corporate board involvement in privacy and data security.
Corporate Boards: Don’t Underestimate Your Role in Data Security Oversight -
The...more
5/20/2021
/ Apple ,
Article III ,
Artificial Intelligence ,
Board of Directors ,
Data Privacy ,
Data Protection ,
Data Security ,
Disclosure Requirements ,
Electronic Protected Health Information (ePHI) ,
EU ,
European Commission ,
Federal Trade Commission (FTC) ,
Google ,
Identity Theft ,
Latin America ,
Mobile Apps ,
New Rules ,
ONC ,
Personal Data ,
Popular ,
SCOTUS ,
Standing
California Can Enforce Net Neutrality Law After Court Victory -
California’s net neutrality law bars internet service providers from prioritizing, blocking, slowing down, or speeding up internet content. California’s law...more
4/13/2021
/ Adtech ,
California ,
California Consumer Privacy Act (CCPA) ,
CDPA ,
Data Brokers ,
Data Collection ,
Department of Justice (DOJ) ,
EU ,
EU-US Privacy Shield ,
European Commission ,
European Data Protection Board (EDPB) ,
FCC ,
Federal Trade Commission (FTC) ,
General Data Protection Regulation (GDPR) ,
Information Commissioner's Office (ICO) ,
Injunctions ,
Internet Service Providers (ISPs) ,
Net Neutrality ,
Opt-Outs ,
Personal Data Protection Act 2012 (PDPA) ,
Proposed Legislation ,
Schrems I & Schrems II ,
Sensitive Personal Information ,
UK