What Is “Personal Information”? How Privacy Laws Around the World Define the Concept That Drives Compliance

Every privacy law begins in the same place: a definition. Before any obligation to disclose, obtain consent, honor a deletion request, or report a breach attaches, the law must first establish what information it governs. That foundational concept, “personal information” in U.S. law and “personal data” in European and many international frameworks, is the threshold …

Read more What Is “Personal Information”? How Privacy Laws Around the World Define the Concept That Drives Compliance

When the Banner Says One Thing and the Website Does Another: The Legal Risk of Privacy Choices That Are Not Operationalized

A cookie banner is not just a design element; rather, it is a statement to every visitor about what the business will and will not do with their data, and the privacy notice behind it is a second, more detailed statement. When a visitor clicks “Reject All” and tracking continues, or an opt-out stops one …

Read more When the Banner Says One Thing and the Website Does Another: The Legal Risk of Privacy Choices That Are Not Operationalized

AI’s Next Data Source Is Your Business: The Privacy Questions Behind the Training Data Market

An advertisement makes the proposition unusually clear: “You’ve got 3 years of emails, invoices, and business records doing nothing. We’ll pay you six figures for them.” For a business sitting on years of operational records, the offer can sound like an opportunity to monetize an overlooked asset. For the employees, customers, and others described in …

Read more AI’s Next Data Source Is Your Business: The Privacy Questions Behind the Training Data Market

Webull’s China Scrutiny: Why U.S. Data Storage Is Only Part of the Compliance Picture

Congressional scrutiny of Webull brings renewed attention to the relationship between data residency, foreign access, corporate control, and the Department of Justice’s Data Security Program. Where a company stores customer information is an important compliance question. Who can access that information and who can influence the systems that process it may be just as consequential. …

Read more Webull’s China Scrutiny: Why U.S. Data Storage Is Only Part of the Compliance Picture

Should Your Website Terms and Conditions Include an Arbitration Clause? A Practitioner’s Guide to a Complicated Question

One of the most common questions that arises when drafting or updating website terms and conditions for clients is deceptively simple: Should we include an arbitration clause? There is no universal right answer, and if any attorney tells you otherwise, be skeptical. The calculus depends on the nature of your business, your user base, the …

Read more Should Your Website Terms and Conditions Include an Arbitration Clause? A Practitioner’s Guide to a Complicated Question

FTC Takes Action Against OkCupid and Match Group for Sharing User Photos with a Facial Recognition AI Company

On March 30, 2026, the Federal Trade Commission filed a complaint in the U.S. District Court for the Northern District of Texas against Humor Rainbow, Inc. d/b/a OkCupid and its affiliate Match Group Americas, LLC, alleging that OkCupid provided nearly three million users’ photos, demographic information, and location data to an unrelated facial recognition AI …

Read more FTC Takes Action Against OkCupid and Match Group for Sharing User Photos with a Facial Recognition AI Company

CalPrivacy Fines Ford Motor Company $375,703 for Adding Friction to the CCPA Opt-Out Process

On March 5, 2026, the California Privacy Protection Agency (CalPrivacy) announced a $375,703 settlement with Ford Motor Company over alleged violations of the California Consumer Privacy Act (CCPA). The violation at issue is narrow but significant: Ford required consumers to complete an email verification step before it would process their request to opt out of …

Read more CalPrivacy Fines Ford Motor Company $375,703 for Adding Friction to the CCPA Opt-Out Process

CalPrivacy’s $1.1 Million PlayOn Sports Fine: What Every Business Needs to Know About Tracking Technologies, Opt-Outs, and the New Era of Risk Assessments

On February 27, 2026, the Board of the California Privacy Protection Agency (CalPrivacy) adopted a Stipulated Final Order against 2080 Media, Inc. d/b/a PlayOn Sports, the leading digital ticketing and media platform for high school sports and activities, requiring the company to pay a $1.1 million administrative fine and implement sweeping compliance reforms. CalPrivacy’s announcement …

Read more CalPrivacy’s $1.1 Million PlayOn Sports Fine: What Every Business Needs to Know About Tracking Technologies, Opt-Outs, and the New Era of Risk Assessments

The FTC’s New Age Verification Policy: Safe Passage Through the COPPA Catch-22—But Biometric, State, and Global Questions Remain

For years, digital platforms have faced a regulatory paradox at the heart of children’s privacy compliance. Under the Children’s Online Privacy Protection Act (COPPA), obligations turn on several factors: whether a service is primarily directed to children, whether it is a mixed-audience platform that opts to implement age-screening, and which categories of personal information are …

Read more The FTC’s New Age Verification Policy: Safe Passage Through the COPPA Catch-22—But Biometric, State, and Global Questions Remain

California’s Record CCPA Settlement with Disney Underscores What Opt-Out Compliance Actually Requires

The California Attorney General’s office does not pick enforcement targets at random. When it trained its sights on Disney’s streaming ecosystem and emerged with a $2.75 million settlement, the largest in the California Consumer Privacy Act’s history, it did so with a specific, pointed message: if your technology can follow a consumer across every screen …

Read more California’s Record CCPA Settlement with Disney Underscores What Opt-Out Compliance Actually Requires