Last week, the New York Attorney General’s Office announced that Bombas had agreed to pay $65,000 and implement a number of injunctive provisions to settle allegations that the sock startup failed to comply with the state’s data breach notification statute. According to the press release, Bombas learned in November 2014, that an unauthorized intruder
California Assembly Approves Amendments to Exclude Employees from CCPA, Protect Loyalty Programs
On Tuesday and Wednesday of this week, the California Assembly voted to approve four bills to amend the California Consumer Privacy Act (CCPA). The legislation now moves to the California Senate.
In total, the Assembly has approved ten CCPA amendments. Here’s the full list:
Approved by the California Assembly – May 28 & 29
Bills to Exclude Insurance Companies from the CCPA, Protect Loyalty Programs among Legislation Approved by California Assembly
On Wednesday, the California Assembly voted to approve two bills to amend the California Consumer Privacy Act (“CCPA”). The legislation now moves to the California Senate.
In total, the Assembly has approved five CCPA amendments. Four bills remain pending before the full Assembly. Here’s the full list:
Approved by the California Assembly This Week
California Senate Ends Suspense on Privacy Private Right of Action
In February, we posted that the California Attorney General and state Senator Hannah-Beth Jackson had announced a bill that would have materially expanded legal exposure for businesses under the CCPA. The most concerning parts of the bill were the attempts to expand the private right of action to cover privacy practices, while simultaneously removing companies’
CFPB Long-Awaited Proposed Rule on Debt Collection Would Address Call Frequency, Texting, and More
The CFPB released its proposed rule governing debt collection, which would impose new requirements for debt collectors related to when and how a consumer can be contacted, what can and must be said when a consumer is reached, and the procedures to validate and verify a debt. Industry and other stakeholders have long anticipated the
Several CCPA Amendments Move Forward in California State Legislature
On April 23, the California Assembly’s Committee on Privacy and Consumer Protection held a hearing to discuss a number of proposed amendments to the California Consumer Privacy Act (CCPA). Here are some of the key bills the Committee voted to move forward:
- Assembly Bill 25: seeks to amend the definition of a “consumer” to
DOJ Releases CLOUD Act White Paper and FAQ
Earlier this month, the Department of Justice released a White Paper and FAQ on the Clarifying Lawful Overseas Use of Data (CLOUD) Act. Enacted in March 2018, the CLOUD Act attempts to resolve the legal conflicts that arise when one country orders the disclosure of electronic data pursuant to a criminal investigation, but another country’s
Court Says Headphone App Not Eavesdropping, But May Be Deceptive
A federal judge allowed a class-action lawsuit alleging Bose collected and shared data about its headphone users to proceed last week on the basis of deceptive advertising. The decision underscores the risks that internet of things (IoT) businesses can face if they fail to accurately communicate to consumers how a mobile app or “smart” product
Another Legislative Attempt to Curtail Mandatory Arbitration Clauses
Businesses often include mandatory arbitration clauses in their pre-dispute dealings with customers to prevent costly consumer class actions in favor of streamlined (often individual) arbitration. The Federal Arbitration Act (“FAA”) makes such arbitration agreements “valid, irrevocable, and enforceable, save upon such grounds as exist at law or in equity for the revocation of any contract.”
Time Runs Out for TikTok App: Developer Musical.ly Agrees to FTC’s Largest-Ever Fine for Children’s Privacy Violations
The FTC recently announced a $5.7 million settlement with app developer Musical.ly for COPPA violations associated with its app (now known as TikTok)—the agency’s largest-ever COPPA fine since the enactment of the statute. The agency charged the app company, which allows users to create and share videos of themselves lip-syncing to music, with unlawfully collecting