In a recent decision from the Southern District of Florida, U.S. District Judge Robert N. Scola, Jr. denied class certification of a proposed class of paid Univision NOW subscribers who assert that Univision NOW’s use of the Meta Pixel violates the Video Privacy Protection Act (VPPA). The three proposed class representatives allege D2C, LLC, doing
Latest from CyberAdviser
The FTC Announces New Enforcement Actions Against Certain Businesses for Engaging in “Deceptive AI” Practices
As part of a new enforcement initiative called “Operation AI Comply,” the FTC recently announced that it has brought the following five enforcement actions against businesses that use or sell AI tools in a manner that the FTC has alleged is deceptive and unfair:
BIPA Amendment Enacted
On August 5, 2024, Illinois Governor J.B. Pritzker signed into law SB 2979, significantly amending the state’s Biometric Information Privacy Act (BIPA). This update represents a considerable decrease in the potential for exorbitant financial liabilities for businesses that engage with biometric data while still maintaining the statute’s robust protections for individuals’ biometric data. The
Historic $1.4 Billion Data Privacy Settlement between Meta and Texas
The State of Texas and Meta Platforms Inc. (“Meta”) have agreed to a $1.4 billion settlement, to be paid out over five years, to resolve claims relating to Meta’s alleged use of facial recognition technology without user consent. This settlement marks the largest privacy settlement obtained by a single state and is the first one
The FTC’s Revised Health Breach Notification Rule Is Now in Effect
The Federal Trade Commission (FTC) continues to enforce and update its Health Breach Notification Rule (HBNR) amidst a fast-changing regulatory environment. A new rule, which took effect this week, expands the scope of the HBNR, as the FTC ramps up enforcement activity related to disclosures of identifiable health data, and other agencies implement changes to the
A Comparison of AI Regulatory Frameworks
In this month’s webcast, Greg Szewczyk of Ballard Spahr’s Privacy and Data Security group is joined by Paolo Sbuttoni, a partner at Foot Anstey who specializes in technology and data. We compare the AI regulatory landscape in the European Union, the United Kingdom, and the United States. We also provide insight on the scope
CPPA’s Enforcement Update: New Regulations and Focus Areas
The California Privacy Protection Agency (“CPPA”) discussed at its July 16 meeting new enforcement focuses in addition to current goals. While the new focuses are largely in line with general trends, they also serve as a reminder that specific and nuanced compliance decisions can make a big difference.
As the CPPA has made clear in
XZ Utils Supply Chain Attack Sheds Light on Vulnerabilities in Widely Adopted Open Source System
In a reminder that open source products can carry significant risks beyond intellectual property, a vulnerability in a compression tool commonly used by developers has triggered widespread concerns.
XZ Utils (“XZ”) is an open source data compression utility, first published in 2009, and widely used in Linux and macOS systems. The tool is primarily used
Colorado Passes AI Regulation
Colorado has become the first state to pass legislation (SB24-205) regulating the use of artificial intelligence (AI) within the United States. This legislation is designed to address the influence and implications, ethically, legally, and socially, of AI technology across various sectors.
Any person doing business in Colorado, including developers or deployers of high-risk
Webinar Recording – Daniel’s Law: The Newest Flavor of Privacy Class Action Litigation
In this month’s webcast, Matt Thornton and Lexi Chapman of Ballard Spahr’s privacy & data security group explore the basics of Daniel’s Law and how it has ignited a wave of privacy class action lawsuits. They delve into the elements of a claim, recent litigation, and practical steps businesses can take to mitigate risk.