InfoLawGroup

by: Dave Radmore

On Friday, May 8, 2026, California’s attorney general Rob Bonta, along with a number of District Attorneys and the California Privacy Protection Agency, announced the state’s settlement of an enforcement action against General Motors (GM) that includes a record $12.75 million payment of civil penalties and an injunction restricting GM’s use of

By: Brian Schaller and Max Landaw

In our prior post, we discussed how the Supreme Court’s denial of a petition for certiorari in West Flagler Associates v. Haaland opened a potential pathway for states to structure online sports wagering. Instead of directly legalizing sports wagering via the legislature, Florida legalized sports wagering by renegotiating

By: Joyce Kim & Lael Bellamy California law now requires certain businesses to complete annual cybersecurity audits and file an electronic certification of completion with the California Privacy Protection Agency (“CalPrivacy”). CalPrivacy’s final regulations took effect January 1, 2026, and the first audit period for the largest businesses begins January 1, 2027, so it’s important

By: Brian Schaller & Max Landaw

Few would have predicted that legalized state-licensed sports wagering might one day face competition in the previously niche commodities trading financial market. Prediction markets have taken the country by storm. Even in states where sports wagering is illegal, consumers are now making money off events traditionally associated with sports

by: Lael Bellamy & Joyce Kim

California’s privacy regulator, CalPrivacy (formerly, the California Privacy Protection Agency) (CalPrivacy), is actively enforcing the California Consumer Privacy Act, as amended (CCPA) against businesses of all sizes and industries. In 2025 and 2026 alone, it settled cases against a major automaker (Honda, $632,500), a rural lifestyle retailer (Tractor Supply,

by: Brian Schaller

The United States Court of Appeals for the Fifth Circuit recently held that “‘[P]rior express consent’ encompasses both oral and written consent for both telemarketing and informational calls” under the Telephone Consumer Protection Act of 1991 (“TCPA”). This interpretation adopts a broader view of the consent required to call or text consumers