Law professor and privacy law scholar Dan Solove has made two short essays available to everyone: The AI Inference Problem in Privacy Law AI inferences undermine privacy laws. Whether they recognize inferences or not, privacy laws are in a bind. Rethinking Privacy of the Mind:  Why Protecting Neural Data Is Insufficient Is protecting neural data...

A breach involving a public figure prompted this press release from Italy’s data protection authority: Regarding the dissemination of personal data on the dark web relating to Vice President Antonio Tajani and his family members, the Italian Data Protection Authority warns media outlets, newspapers, websites, and platforms that the acquisition, dissemination, and republishing, by any...

Scott Hall and Meaghan Henderson of Coblentz Patch Duffy & Bass write: States continued to adopt more targeted privacy requirements in 2026, including new restrictions on precise geolocation and sensitive personal data and expanded requirements for data brokers. These laws are important even for businesses that have already determined whether they are subject to each...

Bruce Armon, Evan Foster, and Jazmine B. King of Saul Ewing LLP write: On September 2, 2026, HB 381 was signed into law and amends Delaware’s data breach notification statute effective immediately. The new Delaware breach law includes a 60-day notice provision to the Delaware Attorney General, narrows the safe harbor for institutions covered by...

Oregon will receive more than $10.4 million, and GM must now get drivers’ clear permission before collecting or sharing their driving and location data Attorney General Dan Rayfield today announced that General Motors will pay $220 million to settle allegations that it sold drivers’ private driving behavior and location data to data brokers, who then...

Oregon will receive more than $10.4 million, and GM must now get drivers’ clear permission before collecting or sharing their driving and location data Attorney General Dan Rayfield today announced that General Motors will pay $220 million to settle allegations that it sold drivers’ private driving behavior and location data to data brokers, who then...

Odia Kagan of FoxRothschild writes: On September 30, 2026, California Governor Gavin Newsom signed Senate Bill 690, significantly narrowing one of the theories driving California website-tracking litigation. The law limits private lawsuits alleging that tracking technologies used on websites and applications violate the pen register and trap-and-trace provisions of the California Invasion of Privacy Act,...

Source

Cassandre Coyer reports: California Gov. Gavin Newsom vetoed a law Sunday that would have expanded the state’s privacy protections to ban the sales of online users’ sensitive information, breaking with a group of states that have prohibited the practice. Maryland and New Jersey, among others, have banned sales of all sensitive data in the last...

Source

Attacks on a woman’s right to choose continue by the Republicans. Expect even more attacks after the midterms. Stephen Preger reports: The Trump administration is intentionally slow-rolling efforts to restrict abortion pill access until after the midterms. Once they’re over, “the gloves will be off,” according to one anti-abortion advocate who spoke with The Washington...

Source

Lindsey Tonsager, Jenna Zhang, and Irene Kim of Covington and Burling summarize some recent bills signed into law. From their article: Companion Chatbots. Adam’s Law (SB 1119) requires operators of a “companion chatbot” to determine the age of users consistent with the Digital Age Assurance Act and imposes a series of obligations before making a...

Source

Derek Kravitz reports: Nearly every time you buy something online or sign up for a loyalty program, you leave behind personal information that can be collected, shared, and sold among companies including advertisers, retailers, and data brokers. This kind of information is sometimes used to charge consumers more for a range of products and services,...

Source

Samantha Rupe reports: The Center for Reproductive Rights has filed a lawsuit challenging Oklahoma abortion laws on behalf of two women who were denied abortion care after receiving fatal fetal diagnoses. Magon Hoffman and Sheena Hamlin said they were forced to leave Oklahoma to obtain care after learning their pregnancies would not result in surviving...

Source

Meghan O’Connor and Candice Andalia of Quarles write: California is drawing a hard line: artificial intelligence may schedule a therapy appointment, but it may not conduct one. Licensed professionals who allow AI to make independent therapeutic decisions, interact directly with patients, or detect emotions and mental states may face fines of up to $10,000 per...

Source

Odia Kagan of FoxRothschild writes: If a user sets a privacy preference, an operating system or app cannot change that setting without the user’s explicit consent, says new bill, AB 2561, that passed the California legislature. A “Privacy setting” means any user-configurable option within an application’s privacy, or similarly labeled, menu that governs the application’s...

Source

Dan Cooper, Jadzia Pierce, Kristof Van Quathem, Atli Stannard, Anna Sophia Oberschelp de Meneses, Diego Bonomo, John Bowers, Sam Jungyun Choi, and Laura Schukraft of Covington and Burling write: In recent months, children’s online safety and privacy have moved to the top of the EU’s digital agenda. The European Commission is expected to outline its...

Source

Joseph J. Lazzarotti of JacksonLewis writes: On September 2, 2026, Delaware’s Governor signed House Bill (HB) 380 and HB 381. HB 380 amends the Delaware Personal Data Privacy Act (DPDPA), which was enacted in 2023 and became effective January 1, 2025. HB 381 separately amends Delaware’s computer security breach notification law. In short, what changes...

Source

Nicholas Boyle, Claire Kermond, and Alexandra Moore of White & Case write: On August 31, 2026, the Australian Government released a Privacy Reform – Consultation Paper (the Consultation Paper) and an exposure draft of the Privacy Amendment (Personal Data Protection Bill) 2026 (Exposure Draft) detailing proposed changes to the Privacy Act 1988 (Cth) (the Privacy...

Source

Christopher Brown reports: The California Legislature passed a bill to eliminate the right to file private lawsuits under a provision of the California Invasion of Privacy Act, partly stemming a recent wave of litigation. The bill, SB 690, passed the state Assembly by a vote of 66 to 0 Aug. 28 and then returned for a...

The California Privacy Protection Agency announced some good news on LinkedIn: Good news! CalPrivacy sponsored bill SB 923 (Becker), also known as the Expanding Privacy Rights Act, officially passed the California Legislature. The bill will expand the right to delete to cover all personal information collected about a consumer no matter the source of the...

Kelly Sandberg of Troutman Amin’s CIPAWorld writes: In the case of Emily Rodriguez v. Accident Fund Holdings, Inc., the Central District of California granted Defendant Accident Fund Holdings’(AFHI’s) motion to dismiss Plaintiff Emily Rodriguez’s (Plaintiff’s) second amended complaint containing claims of California invasion of privacy and the common law tort of intrusion upon seclusion. Emily Rodriguez v....