Privacy & Information Security Law Blog

On January 28, 2026, the Federal Trade Commission will hold a public workshop on age verification technologies.

In January 2026, new and amended comprehensive U.S. state privacy laws, as well as U.S. state laws regulating social media platforms and artificial intelligence, went into effect.

The Consumer and Governmental Affairs Bureau (“CBG”) has extended, to January 31, 2027, the effective date of the Federal Communications Commission’s (“FCC”) Telephone Consumer Protection Act (“TCPA”) “global revocation” rule.

On January 8, 2026, the California Privacy Protection Agency announced enforcement activity against Rickenbacher Data LLC d/b/a Datamasters and S&P Global Inc. for failing to register as data brokers in California.

On December 15, 2025, the Federal Trade Commission announced that it, along with 21 states and the District of Columbia, filed an amended complaint in the U.S. District for the Northern District of California alleging that Uber used unfair and deceptive billing and cancellation practices. 

On December 31, 2025, the Federal Trade Commission announced that a federal judge had approved a $10 million settlement of its complaint against Disney for alleged violation of the Children’s Online Privacy Protection Act (“COPPA”).

On December 17, 2025, the California Privacy Protection Agency announced the release of its Enforcement Advisory No. 2025-01, reminding data brokers of their obligations under California’s Delete Act.

On December 16, 2025, the Federal Trade Commission announced an enforcement action against Illusory Systems Inc., a Utah-based company doing business as Nomad, following a major data breach in which hackers stole $186 million from consumers.

On December 19, 2025, the European Commission announced the renewal of the two UK adequacy decisions originally adopted in 2021, reaffirming that personal data may continue to move freely between the European Economic Area and the UK.

On December 11, 2025, New York Governor Kathy Hochul signed SB-8420A into law, which regulates the use of AI generated “synthetic performers” in advertising.