U.S.

U.S.: CalPrivacy Continues Enforcement Momentum: Settlement Over Opt-Out of Sale/Sharing Violations

By Andrew Serwin & Chelsea Rissmiller on March 17, 2026

On March 5, 2026, the California Privacy Protection Agency (CalPrivacy or the Agency) announced a $375,703 settlement with Ford Motor Company (Ford), stemming from its long-running investigation into the privacy practices of connected vehicle manufacturers, an inquiry the Agency has been pursuing since 2023.

The Ford matter was announced just days after CalPrivacy’s settlement with…

759206041

U.S.: California’s PlayOn Enforcement: A New Chapter in Children’s Data Privacy

By Andrew Serwin, Madison Bucci, Hayley Curry, Leila Javanshir & Stacy Shelhorse on March 6, 2026

Posted in Adtech, Children's data, Enforcement

On March 3, 2026, the California Privacy Protection Agency (CalPrivacy) announced a settlement with PlayOn Sports (formerly 2080 Media, Inc.), imposing a $1.1 million administrative fine and sweeping compliance obligations. Reached in January, the settlement marks a significant escalation in state privacy enforcement and is the first CalPrivacy action to address privacy violations involving students…

U.S.: Ninth Circuit Expands Personal Jurisdiction Over Foreign Tech Platforms in Data Breach Cases

By Andrew Serwin, Jeff DeGroot & Matt Danaher on March 4, 2026

Posted in Privacy Law, Privacy Litigation, Standing

On March 2, 2026, the U.S. Court of Appeals for the Ninth Circuit issued a significant decision, in Freeman v. 3Commas Technologies OÜ, reversing a district court’s dismissal of a class action against an Estonian software company for lack of personal jurisdiction.[1] The ruling provides valuable guidance on when foreign technology companies can…

U.S.: Virginia’s Social Media Time‑Limit Law for Minors Blocked: Key Takeaways

By Andrew Serwin & Leila Javanshir on March 3, 2026

Posted in Children's data

On February 27, 2026, a federal court in Virginia issued a decision with significant implications for state efforts to regulate minors’ use of social media. In NetChoice v. Jay Jones, the U.S. District Court for the Eastern District of Virginia granted a preliminary injunction blocking enforcement of Virginia Senate Bill 854, a statute that…

U.S.: FTC Issues COPPA Policy Statement to Incentivize the Use of Age Verification Technologies to Protect Children Online

By Andrew Serwin on February 25, 2026

Posted in Children's data, COPPA, Enforcement, FTC

The FTC just released a policy statement regarding enforcement activities related to COPPA, which can be found at this link.

According to Christopher Mufarrige, Director of the FTC’s Bureau of Consumer Protection, age verification technologies are important child-protective technologies, and this policy statement “…incentivizes operators to use these innovative tools, empowering parents to protect…

U.S.: Illinois Law Trumps Meta’s California Choice-of-Law Provision in BIPA Class Action

By Andrew Serwin & Matt Danaher on February 24, 2026

Posted in Biometric data, BIPA, Class actions

A recent federal court decision raises questions about the enforcement of contractual choice‑of‑law provisions in the context of a case brought under Illinois’s Biometric Information Privacy Act (BIPA).

In Hartman, et al. v. Meta Platforms, Inc., the U.S. District Court for the Southern District of Illinois denied Meta’s motion for summary judgment seeking to…

U.S.: Texas AG Sues Shein Over Alleged Deceptive Practices and Data Privacy Risks

By Andrew Serwin on February 23, 2026

Posted in AG Enforcement, China, Texas AG

On February 20, 2026, Texas Attorney General Ken Paxton filed suit against Shein US Services, LLC, alleging false, deceptive, and misleading practices in violation of the Texas Deceptive Trade Practices Act. The complaint targets both product safety concerns and alleged misrepresentations regarding consumer data practices.

Shein, founded in China in 2008, is a global fast‑fashion…