The FTC’s New Age Verification Policy: Safe Passage Through the COPPA Catch-22—But Biometric, State, and Global Questions Remain

For years, digital platforms have faced a regulatory paradox at the heart of children’s privacy compliance. Under the Children’s Online Privacy Protection Act (COPPA), obligations turn on several factors: whether a service is primarily directed to children, whether it is a mixed-audience platform that opts to implement age-screening, and which categories of personal information are …

Read more The FTC’s New Age Verification Policy: Safe Passage Through the COPPA Catch-22—But Biometric, State, and Global Questions Remain

California’s Record CCPA Settlement with Disney Underscores What Opt-Out Compliance Actually Requires

The California Attorney General’s office does not pick enforcement targets at random. When it trained its sights on Disney’s streaming ecosystem and emerged with a $2.75 million settlement, the largest in the California Consumer Privacy Act’s history, it did so with a specific, pointed message: if your technology can follow a consumer across every screen …

Read more California’s Record CCPA Settlement with Disney Underscores What Opt-Out Compliance Actually Requires

The 2026 Privacy Law and Compliance State of Play: Navigating an Increasingly Complex Regulatory Landscape

As we enter 2026, the privacy compliance landscape has reached unprecedented complexity. While we have reviewed the state of the landscape in prior years, 2026 is particularly challenging, with 19 comprehensive state privacy laws now in effect across the United States, alongside nearly 150 global privacy regulations and an expanding web of sectoral and AI-specific …

Read more The 2026 Privacy Law and Compliance State of Play: Navigating an Increasingly Complex Regulatory Landscape

Seven Critical CCPA Compliance Changes Taking Effect January 1, 2026

The California Privacy Protection Agency (CPPA) has issued guidance on seven major regulatory updates that businesses must prepare for before January 1, 2026. These amendments to the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) regulations represent some of the most significant compliance changes since the original law took effect, introducing new …

Read more Seven Critical CCPA Compliance Changes Taking Effect January 1, 2026

Conspicuous Links Aren’t Enough: Critical Lessons from Sanchez v. Maggy London on Enforceable Online Terms

The U.S. District Court for the Southern District of California recently delivered a stark reminder to online businesses: simply having a conspicuous link to your terms and conditions doesn’t guarantee enforceability. In Sanchez v. Maggy London International Ltd., the court denied Maggy London’s motion to compel arbitration, finding that while their hyperlink to the terms …

Read more Conspicuous Links Aren’t Enough: Critical Lessons from Sanchez v. Maggy London on Enforceable Online Terms

The SalesLoft/Drift Data Breach: Critical Legal Lessons for DPAs, MSAs, and Third-Party Risk Management

A comprehensive legal analysis of the August 2025 supply chain attack and its implications for contract drafting, vendor management, and data security obligations Executive Summary The August 2025 SalesLoft/Drift data breach represents one of the most significant supply chain security incidents in recent history, affecting hundreds of organizations globally through compromised OAuth tokens. Beginning as …

Read more The SalesLoft/Drift Data Breach: Critical Legal Lessons for DPAs, MSAs, and Third-Party Risk Management

When Data Residency Meets Geopolitical and Competitive Reality: The Airwallex Controversy and DOJ Data Transfer Rules

Executive Summary The recent public dispute between venture capitalist Keith Rabois and Airwallex CEO Jack Zhang has thrust into the spotlight a critical question facing global fintech companies: Can firms with significant Chinese operations credibly promise that U.S. customer data remains beyond Beijing’s reach? This controversy arrives at a pivotal moment—just months after the Department …

Read more When Data Residency Meets Geopolitical and Competitive Reality: The Airwallex Controversy and DOJ Data Transfer Rules

When Well-Intentioned Transparency Laws Miss the Mark: Analyzing the Unintended Consequences of New York’s Algorithmic Pricing Disclosure Act

Introduction: The Promise and Pitfalls of Algorithmic Pricing Regulation New York’s Algorithmic Pricing Disclosure Act, which took effect in November 2025, represents a groundbreaking attempt to bring transparency to the increasingly opaque world of dynamic pricing. As a law firm focused on privacy law, marketing compliance, artificial intelligence, and online pricing regulations, we understand the …

Read more When Well-Intentioned Transparency Laws Miss the Mark: Analyzing the Unintended Consequences of New York’s Algorithmic Pricing Disclosure Act

Eleventh Circuit Affirms: Website Terms Must Be Clear and Conspicuous to Create Binding Arbitration Agreements

Valiente v. NexGen Global Highlights Critical Website Design Flaws in TCPA Defense The Eleventh Circuit’s recent decision in Valiente v. NexGen Global, LLC, No. 23-13308 (11th Cir. Nov. 10, 2025), offers essential guidance for businesses using arbitration clauses to manage legal disputes. The court’s thorough analysis demonstrates how poor website design and unclear Terms of …

Read more Eleventh Circuit Affirms: Website Terms Must Be Clear and Conspicuous to Create Binding Arbitration Agreements

California Attorney General Secures $1.4 Million Settlement Against Jam City for CCPA Violations: Critical Lessons for Mobile App Developers

In the sixth enforcement action under the California Consumer Privacy Act (CCPA), California Attorney General Rob Bonta announced a $1.4 million settlement with Jam City, Inc., a mobile gaming company based in Culver City, California. This enforcement action highlights critical compliance failures that mobile app developers must avoid and demonstrates the Attorney General’s continued focus …

Read more California Attorney General Secures $1.4 Million Settlement Against Jam City for CCPA Violations: Critical Lessons for Mobile App Developers