May 2025

This Client Alert is a monthly update on privacy and cybersecurity developments as posted on our Privacy & Information Security Law Blog. If you would like to receive email alerts when new posts are published, please visit our blog and enter your email address in the subscribe field.

• D.C. Federal Court Rules Termination of Democrat PCLOB Members Is Unlawful
• New Cybersecurity Requirements for Federal Contractors
• European Commission Proposes Expansion to Records of Processing Derogation
• OCR Reaches Settlement with Small Radiology Provider Over HIPAA Violations Stemming from Breach
• EDPB and EDPS Support GDPR Record-Keeping Simplification Proposal
• UK Data (Use and Access) Bill Status Update
• CPPA Opens Formal Comment Period on Modifications to Proposed CCPA Regulations for Cybersecurity Audits, Risk Assessments, ADMT and Insurance Companies
• Colorado Legislature Passes Amendments to Colorado Privacy Act
• Texas AG Announces $1.375 Billion Settlement with Google for Privacy Violations
• Michigan Attorney General Files Lawsuit Against Roku Over Alleged COPPA Violations
• CIPL to Convene June Roundtable on Data Governance in NYC
• Texas Legislature Advances App Store Accountability Act
• Missouri AG Files Rule Requiring Social Media Platforms to Permit Alternative Content Moderators
• EDPB Adopts Opinion on UK Adequacy Decision Extension
• Cyberspace Administration of China Cracks Down on Improper use of Minors’ Images
• California Privacy Protection Agency Fines Retailer $345,000 for Alleged CCPA Privacy Rights Violations
• OCR Announces Settlement with Neurology Practice Following Ransomware Attack
• Virginia Governor Signs into Law Bill Restricting Minors’ Use of Social Media
• National Computer Virus Center of China Identifies Violations of Cross-border Transfer Requirements
• OCR Reaches Settlement with Health Care Network Health Over HIPAA Violations Stemming from Phishing Attack
• State Regulators form Privacy Consortium for Collaboration and Enforcement
• CPPA and UK ICO Sign Declaration of Cooperation
• Montana Amends Consumer Data Privacy Act
• FTC Regulators Remark on Agency’s Priorities Under Trump Administration