United States

FTC Sues TikTok for Violating US Children’s Privacy Law (COPPA)

The FTC has filed a lawsuit against TikTok and its parent company ByteDance for violating the US Children’s Online Privacy Protection Act (COPPA). The lawsuit claims TikTok knowingly collected data from millions of children under 13 without parental consent, in breach of a 2019 FTC order. Despite internal concerns, TikTok allegedly continued collecting and sharing children’s data, failed to delete accounts upon parental request, and allowed children to bypass age verification. The suit seeks civil penalties and a permanent injunction to prevent further violations.

FTC Sues TikTok for Violating US Children’s Privacy Law (COPPA) Read More »

New York AG Launches Website Privacy Guides

The New York State Attorney General’s Office released a guide on website privacy controls to help businesses ensure their tracking practices comply with New York law. The guide addresses common mistakes businesses make with privacy disclosures and controls, such as uncategorized tags, misconfigured tools, and misleading interfaces. It emphasizes the importance of accurate and truthful privacy representations and provides recommendations for effective privacy disclosures and user-friendly controls. The guide aims to prevent deceptive practices and enhance consumer privacy protection.

New York AG Launches Website Privacy Guides Read More »

US Senators Urge FTC Crackdown on Automakers’ Data Sharing

On July 26, 2024, U.S. Senators Ron Wyden and Edward J. Markey called on the FTC to investigate automakers’ unauthorized sharing of driver data with data brokers. Wyden’s investigation revealed that GM, Honda, and Hyundai shared driving and location data with Verisk Analytics without drivers’ informed consent. Hyundai received over $1 million from Verisk for data from 1.7 million cars, while Honda and GM also engaged in similar practices. The senators condemned these actions, urging the FTC to hold automakers and data brokers accountable for privacy violations and deceptive practices.

US Senators Urge FTC Crackdown on Automakers’ Data Sharing Read More »

FTC Bans Avast from Selling Web Data and Fines $16.5 Million

FTC Bans Avast from Selling Web Data and Fines $16.5 Million

The Federal Trade Commission (FTC) has finalized an order against Avast Limited, banning the company from selling or licensing web browsing data for advertising. This decision follows allegations that Avast, through its subsidiary Jumpshot, sold consumer browsing data without proper notice or consent, despite claims of protecting privacy. Avast is required to pay $16.5 million, which will go towards consumer redress. The FTC also mandates Avast to delete collected data, notify affected consumers, and implement a comprehensive privacy program.

FTC Bans Avast from Selling Web Data and Fines $16.5 Million Read More »

California AG Bonta Reminds Companies of Health Information Obligations

California AG Bonta Reminds Companies of Health Information Obligations

California Attorney General Rob Bonta has issued reminders to major pharmacy chains and health data companies about their legal obligations under the new AB 352 law, which enhances the state’s Confidentiality of Medical Information Act (CMIA). This law, effective from 1 July 2024, prevents the disclosure of reproductive health and gender-affirming care information to out-of-state entities without patient consent. The companies are required to implement robust security measures to protect sensitive health data and avoid sharing it with law enforcement without a warrant, emphasizing the state’s commitment to safeguarding patient privacy following the repeal of Roe v. Wade.

California AG Bonta Reminds Companies of Health Information Obligations Read More »

Scroll to Top