FTC v. Kochava: The Data-Broker Reckoning Over Sensitive Geolocation Data (2026)
The FTC's long-running case against data broker Kochava ended in a sweeping ban on selling sensitive location data without affirmative express consent...
FTC
13 articles on FTC — privacy laws, security frameworks, and regulatory compliance.
The SCREEN Act: A Federal Age-Verification Mandate Lands on Top of a 20-State Patchwork
The SCREEN Act (S.737 / H.R.1623) would impose a federal age-verification mandate on platforms that host or profit from content harmful to minors, ban...
Unwinding the Orders: The FTC's Twitter/X Petition, the Rytr Walk-Back, and the Federal Privacy Retreat
On June 3, 2026, X Corp. petitioned the FTC to set aside or modify the long-running Twitter privacy consent order — the 2022 decree that carried a $15...
When 'We Take Security Seriously' Isn't Enough: The FTC's Final Illuminate Order and What It Means for Every Data-Handling Company
On June 5, 2026, the FTC gave final approval to a 10-year information-security order against edtech provider Illuminate Education after a breach expos...
Can a Company Unwind a Privacy Consent Order? X Corp.'s Petition to Set Aside Twitter's 2022 FTC Settlement
On June 3, 2026, the FTC opened a public comment period on X Corp.'s petition to set aside or modify the 2022 consent order that resolved Twitter's $1...
The SECURE Data Act: Federal Privacy Preemption, the Fate of State Laws, and What Compliance Teams Must Do Now
House Republicans released the SECURE Data Act in April 2026 — the most significant federal privacy bill since COPPA. Its sweeping preemption provisio...
FTC Settles With Cox Media Group Over 'Active Listening' AI: When Ad Tech Claims Become Federal Violations
The Federal Trade Commission settled with Cox Media Group and two co-defendants on May 21, 2026, for nearly $1 million over the company's promotion of...
FTC vs. OkCupid: How Sharing 3 Million User Photos With an Undisclosed Third Party Became a Federal Enforcement Action
On March 30, 2026, the FTC took action against OkCupid and parent company Match Group for sharing nearly three million user photos and location data w...
FTC Bans Kochava From Selling Sensitive Location Data: What Every Data Broker and App Publisher Needs to Know
On May 4, 2026, the FTC settled its four-year case against data broker Kochava and subsidiary Collective Data Solutions, permanently banning them from...
Digital Therapy Compliance in 2026: HIPAA, 42 CFR Part 2, FTC Health Breach Notification, and the Regulatory Patchwork Governing Mental Health Data
The 2026 HIPAA Security Rule final update is expected in May with a 180-day compliance window. 42 CFR Part 2 enforcement began February 16, 2026. The ...
Three Million Photos, No Fine: What the FTC's OkCupid-Clarifai Settlement Tells Us About AI Training Data Enforcement
In 2014, OkCupid secretly shared three million user photos and location data with facial recognition AI company Clarifai — whose founders OkCupid exec...
Congress Wants Every Operating System to Check Your Age — And Left the Hard Parts to Someone Else
H.R. 8250, the 'Parents Decide Act,' would require every operating system in the United States to collect date of birth from every user, verify parent...
The COPPA Clock Runs Out April 22: What Every Operator Must Have in Place This Week
The FTC's updated COPPA rule reaches its full compliance deadline on April 22, 2026. New obligations cover biometric identifiers as personal informati...