23andMe Data Breach Settlement: Payments Expected September 2026
23andMe's claim window closed Feb 17, 2026 and final approval came Jan 30, 2026. The administrator now expects class member payments in September 2026.
8 min read
Data Privacy Laws
468 articles · page 1 of 8
AI and Data Privacy: Legal Requirements (2026)
How AI intersects with data privacy law. Covers the EU AI Act, Colorado SB 205, CCPA automated decisions, FTC enforcement, and state laws.
11 min read
Alabama Biometric Privacy Laws: Collection, Consent & Penalties (2026)
Alabama has no standalone biometric privacy law, and its breach notification act does not cover biometric data. Learn what changes under the 2026 Alabama Personal Data Protection Act (effective 2027), penalties up to $500K, and employer obligations.
8 min read
Alabama Data Breach Notification Laws: Reporting Rules & Timelines (2026)
Learn Alabama's data breach notification rules under the 2018 Act, including the 45-day deadline, AG reporting requirements, penalties, and exemptions.
9 min read
Alabama Data Privacy Laws: Breach Notification & Consumer Rights (2026)
Complete guide to Alabama data privacy laws including the Data Breach Notification Act of 2018, security requirements, penalties, and the pending Personal Data Protection Act.
16 min read
Alaska Biometric Privacy Laws: Collection, Consent & Penalties (2026)
Alaska has no biometric privacy law despite multiple legislative attempts. Learn what protections exist, gaps in coverage, and pending bills as of 2026.
8 min read
Alaska Data Breach Notification Laws: Reporting Rules & Timelines (2026)
Alaska requires breach notification without unreasonable delay. One of ~12 states with a private right of action for actual damages up to $500.
9 min read
Alaska Data Privacy Laws: Constitutional Privacy & Breach Rules (2026)
Alaska data privacy laws explained. Learn about constitutional privacy rights, breach notification under AS 45.48, biometric protections, and SSN safeguards.
14 min read
Albany Park Settlement: Claim Window Closed, Hearing Oct 23
Albany Park's deceptive-discount claim window closed August 18, 2026. A final approval hearing is set for October 23, 2026 before any money can move.
8 min read
Allina Health Pixel Settlement: Claim Window Closed Sept 8
Allina Health's pixel-tracking claim window closed September 8, 2026. A final approval hearing is set for September 24, 2026 in Minnesota federal court.
7 min read
Amazon Prime FTC Settlement: Payments Expected Late 2026
The Amazon Prime FTC claim window closed July 27, 2026. The FTC says Amazon expects to send payments in late 2026, with refunds capped at $51 per person.
8 min read
ApolloMD Data Breach Settlement: Who Is Eligible, Payout
ApolloMD data breach settlement is open for claims through Sept 30, 2026. $4.02M fund, $75 no-proof payment or up to $5,000 documented loss reimbursement.
7 min read
Apple Siri Privacy Settlement: Paid, $20 Per Device
Apple's $95M Siri privacy settlement is paid; distribution began Jan. 23, 2026. See who was eligible, the $20-per-device payout, and what to do now.
9 min read
Are Class Action Settlements Taxable?
It depends on what the payment replaces. See when a class action or data breach settlement is taxable under IRS rules, and when it typically is not.
8 min read
Argentina Data Privacy Laws: PDPL Compliance Guide (2026)
Argentina's Personal Data Protection Law (Ley 25.326) governs data privacy with EU adequacy status confirmed January 2024. Covers AAIP enforcement, habeas data, Ley Olimpia, pending GDPR reform, and 2024-2026 developments.
22 min read
Arizona Biometric Privacy Laws: Collection, Consent & Penalties (2026)
Arizona has no standalone biometric privacy law. Learn how ARS 18-551/552 protects biometric data in breaches, penalties up to $500K, and pending legislation.
7 min read
Arizona Data Breach Notification Laws: Reporting Rules & Timelines (2026)
Arizona requires data breach notification within 45 days under A.R.S. §§ 18-551 and 18-552. Learn who must report, what triggers notice, and penalties up to $500,000.
9 min read
Arizona Data Privacy Laws: Breach Rules & Consumer Rights (2026)
Arizona has no comprehensive privacy law but enforces strict breach notification rules under A.R.S. 18-552 with a 45-day deadline and up to $500,000 in penalties.
15 min read
Arkansas Biometric Privacy Laws: Collection, Consent & Penalties (2026)
Arkansas protects biometric data under its breach notification law, not a dedicated statute. Learn what the Personal Information Protection Act requires in 2026.
8 min read
Arkansas Data Breach Notification Laws: Reporting Rules & Timelines (2026)
Learn Arkansas data breach notification rules under the Personal Information Protection Act, including reporting timelines, AG requirements, and penalties.
8 min read
Arkansas Data Privacy Laws: Breach Notification & Consumer Rights (2026)
Learn about Arkansas data privacy laws including the Personal Information Protection Act, breach notification rules, student data protections, and your consumer rights.
14 min read
Arkansas Teen Online Privacy Law (Act 952) Now in Effect
Arkansas Act 952 (HB 1717) took effect July 1, 2026, extending COPPA-style consent, targeted-ad, and data-rights rules to minors up to age 16. What to know.
7 min read
AT&T Data Breach Settlement: Claim Window Closed, Awaiting Approval
AT&T's $177M settlement closed claims Dec 18, 2025 and the Jan 15, 2026 hearing was held, but the judge has not ruled. The administrator posts status updates.
8 min read
Australia Data Privacy Laws: Privacy Act, APPs & 2026 Reforms
Australia's Privacy Act 1988: the 13 APPs, OAIC penalties, the statutory privacy tort (in force June 2025), the NDB scheme and the 2024 to 2026 reforms. Verified September 2026.
27 min read
Australia's Notifiable Data Breaches Scheme Explained
Australia's Notifiable Data Breaches scheme under Part IIIC of the Privacy Act 1988: the serious harm test, the 30-day assessment and OAIC notification.
7 min read
Austria Data Privacy Laws: GDPR & DSG Guide (2026)
Austria enforces data privacy through the GDPR and DSG (Datenschutzgesetz). Learn about DSB enforcement, constitutional rights, AI Act rules, penalties, and breach rules.
25 min read
Bahrain Data Privacy Laws: PDPL Law No. 30 of 2018 Complete Guide (2026)
Bahrain PDPL (Law No. 30 of 2018): the ten 2022 Ministry of Justice Orders, the 72-hour breach rule in Order 43, the transfer list that omits Qatar, and Article 58 penalties.
21 min read
Bangladesh Data Privacy Laws: The Personal Data Protection Act 2026
Bangladesh's Personal Data Protection Act 2026 (Act 63 of 2026) replaced the 2025 ordinance on 10 April 2026. Consent, data subject rights, cross-border transfer and administrative fines.
19 min read
Belgium Data Privacy Laws: GDPR Implementation Guide (2026)
Belgium enforces data privacy through GDPR, the Law of 30 July 2018, and Article 22 of the Constitution. APD/GBA fines, AI Act (BIPT), breach rules, and 2025-2026 decisions.
25 min read
Bermuda Data Privacy Laws: PIPA Compliance Guide (2026)
Guide to Bermuda Personal Information Protection Act covering consent, data subject rights, Privacy Commissioner enforcement, and cross-border rules.
18 min read
Biometric Privacy Laws by State (2026): BIPA, CUBI & Consent
Biometric privacy laws by state. Which states have biometric data laws like Illinois BIPA, Texas CUBI, and Washington, plus consent rules and your rights.
6 min read
BIPA Compliance for Employers (2026): Step-by-Step
BIPA compliance for employers using fingerprint or face-scan timeclocks: the seven Section 15 steps, plus a free self-check tool. Avoid the most common violations.
4 min read
BIPA Damages: What a Violation Is Worth (2026)
BIPA damages explained: the $1,000 and $5,000 statutory amounts, why the 2024 amendment ended per-scan math, and what people actually receive in settlements.
3 min read
BIPA Explained: Illinois Biometric Privacy Act (740 ILCS 14)
BIPA, the Illinois Biometric Information Privacy Act (740 ILCS 14), explained: consent rules, the $1,000 to $5,000 penalties, key cases, and the 2024 amendment.
5 min read
BIPA Statute of Limitations: The 5-Year Deadline (2026)
The BIPA statute of limitations is five years for all claims, settled by Tims v. Black Horse Carriers (2023). How the deadline works and when the clock starts.
2 min read
Brazil Data Privacy Laws: LGPD Compliance Guide (2026)
Complete guide to Brazil's LGPD data privacy law. Covers the 10 legal bases, ANPD enforcement, penalties up to BRL 50M, EU adequacy decision, and compliance requirements.
19 min read
Bulgaria Data Privacy Laws: GDPR & PDPA Complete Guide (2026)
Bulgaria enforces GDPR through the ZZLD (amended Aug 2024), supervised by the CPDP. Covers EGN protection, NRA breach, EU AI Act, NIS2, Schengen SIS, and compliance steps.
22 min read
California Biometric Privacy Laws: Collection, Consent & Penalties (2026)
California protects biometric data as sensitive personal information under the CCPA/CPRA. Learn about consumer rights, breach rules, employer duties, and CPPA enforcement.
8 min read
California Data Breach Notification Laws: Reporting Rules & Timelines (2026)
California requires breach notification within 30 days under SB 446. Learn who must comply, what triggers notice, CCPA damages, and AG reporting rules.
9 min read
California Data Privacy Laws: CCPA, CPRA & Consumer Rights (2026)
Learn about California data privacy laws including CCPA, CPRA, consumer rights, business obligations, penalties up to $7,988 per violation, and the new 2026 DELETE Act rules.
15 min read
California Lawmakers Pass SB 923: CCPA Delete-Right Expansion, Explained
California SB 923 was enrolled and presented to Governor Newsom on September 2, 2026. Under article IV, section 10(b)(2) he has until September 30 to act.
8 min read
California's Delete Act Deletion Mandate Takes Effect: Data Brokers Must Now Process DROP Requests Every 45 Days
As of August 1, 2026, California data brokers must access the DROP platform every 45 days to process consumer deletion requests under the Delete Act (SB 362). Here's what changed and what it means.
6 min read
CalPrivacy Fines Two Data Brokers Under CCPA and Delete Act
California's privacy agency fined LocateSmarter $116,490 and Cybba $52,400 in August 2026; the LocateSmarter order is its first under both the CCPA and Delete Act.
10 min read
Canada Data Privacy Laws: PIPEDA & Provincial Guide (2026)
Complete guide to Canada data privacy laws including PIPEDA, Quebec Law 25, Alberta and BC PIPA. Covers penalties up to $25M, breach notification rules, and 2026 reform status.
29 min read
Canada Tables Bill C-36 to Replace PIPEDA: What the Privacy Reform Bill Would Change
Canada introduced Bill C-36, the Protecting Privacy and Consumer Data Act, on June 15, 2026 to replace its aging federal privacy law. Status: first reading.
7 min read
Cash App Data Breach Settlement: Approved, Not Yet Paid
The $15M Cash App data breach settlement has final approval but is not confirmed paid. Claims closed Nov 18, 2024; see the status and the payout tiers.
8 min read
CCPA Compliance Checklist for Businesses (2026)
Step-by-step CCPA compliance checklist covering privacy policies, Do Not Sell links, data mapping, vendor contracts, employee training, and the 45-day response window.
11 min read
CCPA Opt-Out Rights: Do Not Sell or Share My Personal Information (2026)
California consumers can opt out of the sale and sharing of personal data under the CCPA. Learn about GPC signals, sensitive PI limits, link requirements, and enforcement.
10 min read
CCPA vs CPRA: Key Differences Explained (2026)
Compare the CCPA and CPRA side by side. Learn about new consumer rights, the CPPA enforcement agency, contractor rules, risk assessments, and opt-out preference signals.
9 min read
Change Healthcare Data Breach Settlement: No Settlement Yet
As of September 2026 there is no Change Healthcare settlement, fund, or claim form. MDL 3108 is in pretrial; the next status conference is September 17, 2026.
9 min read
Chantix Settlement: $44M Refund Claims, Deadline 9/14/26
Open: Pfizer's $44M Chantix (varenicline) economic-loss settlement refunds recalled-drug buyers. Claim deadline is September 14, 2026. Who may be eligible.
8 min read
Chile Data Privacy Laws: Ley 21.719 Reform, New Agency, and December 2026 Entry into Force
Complete guide to Chile data privacy laws: Ley 21.719 (2024) rewrites and renames Ley 19.628, creates the Agencia de Protección de Datos Personales, GDPR-aligned rights, penalties up to 20,000 UTM, and enforcement from December 2026.
16 min read
China Cross-Border Data Transfer Rules: CAC Security Assessment, Standard Contract, and Certification
How China's PIPL cross-border transfer regime works: the three legal mechanisms, exact CAC Order 16 thresholds, and how to choose the right one.
10 min read
China Data Privacy Laws: PIPL, CSL & DSL Compliance Guide (2026)
China's PIPL, amended Cybersecurity Law (Jan 2026), and Data Security Law form a strict data protection regime. Consent requirements, cross-border transfer rules, penalties up to CNY 10 million, compliance steps.
19 min read
Colombia Data Privacy Laws: Law 1581 and Habeas Data Guide (2026)
Colombia protects personal data through constitutional habeas data rights and Ley 1581 of 2012. Covers SIC enforcement, RNBD, cross-border transfers, the Worldcoin shutdown, and the archived 2025 reform bills.
19 min read
Colorado Biometric Privacy Laws: Collection, Consent & Penalties (2026)
Colorado biometric privacy law HB24-1130 requires consent before collecting fingerprints, facial scans, and other biometric data. Learn employer rules, retention limits, and penalties.
9 min read
Colorado Data Breach Notification Laws: Reporting Rules & Timelines (2026)
Colorado requires data breach notification within 30 days. Learn who must comply, what personal information is protected, AG reporting rules, and penalties.
8 min read
Colorado Data Privacy Laws: CPA Consumer Rights Guide (2026)
Colorado Privacy Act grants consumers rights to access, delete, and control personal data. Learn CPA thresholds, penalties, and breach rules.
21 min read
Colorado Privacy Act Compliance Checklist (2026)
Step-by-step Colorado Privacy Act compliance checklist: applicability thresholds, the nonprofit coverage trap, privacy notice, GPC Universal Opt-Out, sensitive data consent, data protection assessments, processor contracts, and AG enforcement.
15 min read
Colorado Privacy Act Consumer Rights & How to Use Them
Colorado residents have seven CPA rights: access, correct, delete, portability, and opt-out of targeted ads, data sales, and profiling. Learn how to submit requests, use GPC, appeal denials, and file an AG complaint.
15 min read