Privacy Law Matters Blog

By Sam Castic  New and amended data broker laws make more companies that collect and disclose personal data subject to state data broker laws.  Last week New Jersey enacted a unique new data broker and data collector law, and Connecticut enacted (and then amended) one last month.  With Vermont's recent expansion of its law, and…

By Hansenard Piou On November 21st, 2025, the California Attorney General announced a $1.4 million dollar settlement with the mobile app gaming company, Jam City, Inc., the sixth such settlement by California regulators under the California Consumer Privacy Act (CCPA). The AG had sued Jam City, whose mobile gaming apps collect personal information such as…

by Sam Castic and Felicity SlaterA class action suit was recently filed against the companies that operate Uncle Ike's, a Seattle-area marijuana retailer. The suit filed in Washington federal court alleges common law tort claims, ECPA claims, and a claim under the My Health My Data Act (‘MHMDA’ or ‘the Act’).  Unlike the MHMDA claims…

By Hansenard Piou and Sam CasticThis is the third in a series of blog posts about the DOJ Rule regarding Access To U.S. Sensitive Personal Data and Government-Related Data by Countries of Concern or Covered Persons (the “DOJ Rule”). It provides an overview of the second type of data that the DOJ Rule focuses on: government-related…

By Cameron Cantrell On Monday October 20, the Eastern District of Missouri dismissed a proposed class action based on the federal Video Privacy Protection Act (“VPPA”) against CoStar, the company behind Apartments.com. This decision further cements the Circuit courts’ split in determining which entities are subject to the VPPA, with the Eighth Circuit (where Missouri…

By Clara De Abreu E SouzaOn October 8, 2025, California Governor Gavin Newsom signed into law Assembly Bill 656 — Account Cancellation. AB 656, authored by Assembly member Pilar Schiavo, focuses on social media platforms and requires them to provide users with a clear and accessible way to delete their accounts. This action must also…