The SCREEN Act: A Federal Age-Verification Mandate Lands on Top of a 20-State Patchwork
The SCREEN Act (S.737 / H.R.1623) would impose a federal age-verification mandate on platforms that host or profit from content harmful to minors, ban...
data minimization
9 articles on data minimization — privacy laws, security frameworks, and regulatory compliance.
Massachusetts Just Did What No Comprehensive State Privacy Law Has Dared: A Private Right of Action With Real Teeth
On June 4, 2026, the Massachusetts House voted 146-0 to pass the Massachusetts Consumer Data Privacy Act — and it carries two features the rest of the...
New York Just Passed the Toughest Health Data Privacy Law in the Country — And It Has Nothing to Do With HIPAA
On June 3 and 4, 2026, the New York Senate and Assembly passed the New York Health Information Privacy Act (S-9269), a standalone statute governing 'r...
When 'We Take Security Seriously' Isn't Enough: The FTC's Final Illuminate Order and What It Means for Every Data-Handling Company
On June 5, 2026, the FTC gave final approval to a 10-year information-security order against edtech provider Illuminate Education after a breach expos...
Vermont Passes S.71, the Data Privacy and Online Surveillance Act: What the 20th State Privacy Law Means for Compliance Teams
On May 29, 2026, Vermont's legislature passed S.71, reviving comprehensive privacy legislation Governor Scott vetoed two years earlier. The bill pairs...
GM's $12.75 Million CCPA Settlement: California's Record Penalty and the First Data Minimization Enforcement Action
California regulators settled with General Motors for $12.75 million over its OnStar program's unauthorized sale of detailed driving behavior data to ...
State Privacy Roundup: Maine's Comprehensive Privacy Bill Clears Senate, Oregon's AI Chatbot Safety Bill Heads to Governor
Maine's LD 1822 advances with a controversial political organization exemption, while Oregon's SB 1546 becomes one of the first AI chatbot safety bill...
The Most Recent Global Compliance and Privacy Fines (Q1 2025)
Q1 2025 saw record-breaking global privacy fines with several enforcement actions exceeding €100 million. This analysis explores key enforcement trend...
Navigating the Maze: An In-Depth Look at U.S. State Data Privacy Laws
The Maine Data Privacy and Protection Act (MDPPA) takes effect July 1, 2025, providing robust consumer rights and imposing stringent obligations on bu...