Twenty States, One Patchwork: The 2026 State Privacy Map and Why Enforcement Just Got Real
As of mid-2026, twenty US states have comprehensive privacy laws in effect — with Indiana, Kentucky, and Rhode Island the newest arrivals — and Congre...
privacy enforcement
10 articles on privacy enforcement — privacy laws, security frameworks, and regulatory compliance.
When 'We Take Security Seriously' Isn't Enough: The FTC's Final Illuminate Order and What It Means for Every Data-Handling Company
On June 5, 2026, the FTC gave final approval to a 10-year information-security order against edtech provider Illuminate Education after a breach expos...
Can a Company Unwind a Privacy Consent Order? X Corp.'s Petition to Set Aside Twitter's 2022 FTC Settlement
On June 3, 2026, the FTC opened a public comment period on X Corp.'s petition to set aside or modify the 2022 consent order that resolved Twitter's $1...
FTC Settles With Cox Media Group Over 'Active Listening' AI: When Ad Tech Claims Become Federal Violations
The Federal Trade Commission settled with Cox Media Group and two co-defendants on May 21, 2026, for nearly $1 million over the company's promotion of...
GM's $12.75 Million CCPA Settlement: California's Record Penalty and the First Data Minimization Enforcement Action
California regulators settled with General Motors for $12.75 million over its OnStar program's unauthorized sale of detailed driving behavior data to ...
FTC vs. OkCupid: How Sharing 3 Million User Photos With an Undisclosed Third Party Became a Federal Enforcement Action
On March 30, 2026, the FTC took action against OkCupid and parent company Match Group for sharing nearly three million user photos and location data w...
Reddit Fined £14.47 Million by ICO: Why Age Self-Declaration Is No Longer a Defense
The UK Information Commissioner's Office fined Reddit £14.47 million in February 2026 for unlawfully processing children's personal data. The central ...
California's CPPA Is Fining Real Companies Now: Lessons from Disney, Ford, Honda, and Tractor Supply
The California Privacy Protection Agency issued multiple enforcement decisions in Q1 2026 against well-known companies including Disney/ABC ($2.75M), ...
FTC Bans Kochava From Selling Sensitive Location Data: What Every Data Broker and App Publisher Needs to Know
On May 4, 2026, the FTC settled its four-year case against data broker Kochava and subsidiary Collective Data Solutions, permanently banning them from...
Three Million Photos, No Fine: What the FTC's OkCupid-Clarifai Settlement Tells Us About AI Training Data Enforcement
In 2014, OkCupid secretly shared three million user photos and location data with facial recognition AI company Clarifai — whose founders OkCupid exec...