Twenty States, One Patchwork: The 2026 State Privacy Map and Why Enforcement Just Got Real
As of mid-2026, twenty US states have comprehensive privacy laws in effect — with Indiana, Kentucky, and Rhode Island the newest arrivals — and Congre...
CPPA
7 articles on CPPA — privacy laws, security frameworks, and regulatory compliance.
GM's $12.75 Million CCPA Settlement: California's Record Penalty and the First Data Minimization Enforcement Action
California regulators settled with General Motors for $12.75 million over its OnStar program's unauthorized sale of detailed driving behavior data to ...
California's CPPA Is Fining Real Companies Now: Lessons from Disney, Ford, Honda, and Tractor Supply
The California Privacy Protection Agency issued multiple enforcement decisions in Q1 2026 against well-known companies including Disney/ABC ($2.75M), ...
The CPRA Cybersecurity Audit Mandate Is Now Active: What California Businesses Must Do in 2026
As of January 1, 2026, California businesses meeting CPRA thresholds must conduct annual, independent cybersecurity audits. Enforcement is already und...
California's Privacy Risk Assessment Rules Are Live. The 2028 Deadline Isn't the Starting Gun.
California's CPPA risk assessment regulations took effect January 1, 2026 — making it the first state to require businesses to actually file their ass...
California's Delete Act Is Live: What Data Brokers Must Do Before August 1, 2026
The California Delete Act's DROP platform opened to consumers on January 1, 2026. Data brokers now have until August 1, 2026 to begin processing delet...
Ford Motor Company Fined $375,703 by California Privacy Agency for Blocking Consumer Opt-Out Rights
The California Privacy Protection Agency's enforcement action against Ford reveals how a seemingly minor UX decision — requiring email confirmation fo...