United States: Privacy

Subscribe
Privacy law and privacy regulation thought leadership, articles, podcasts, videos and webinars from expert sources across the legal world. Explore insights covering topics including GDPR, data protection, data privacy, and privacy protection.
Article
What Consumers Can Sue For In A Data Breach Class Action
Data breaches have surged to record levels, affecting millions of consumers across industries from financial services to healthcare. While receiving a breach notice is increasingly common, not all incidents grant victims the right to sue—and understanding when you can take legal action requires navigating complex privacy laws, common law theories, and the critical requirement of proving concrete harm.
United States Privacy
MS
Miller Shah
Article
Who Is A “Consumer?” The Supreme Court Takes Up The Video Privacy Protection Act
The Supreme Court will decide whether subscribing to any good or service from a video provider—such as a newsletter—makes someone a "consumer" under the Video Privacy Protection Act, or whether only subscriptions to audiovisual content qualify. The case involves allegations that a website disclosed a user's video-viewing history through Facebook tracking pixels after the user signed up for an online newsletter, creating a circuit split on how broadly the VPPA's consumer protections should apply.
United States Privacy
FH
Finnegan, Henderson, Farabow, Garrett & Dunner, LLP
Article
Delaware Adds New Requirements For Sensitive Data, Third-Party Contracts
Delaware has enacted significant amendments to its Personal Data Privacy Act, introducing stringent restrictions on sensitive data processing that take effect January 1, 2027. The state now prohibits the sale of sensitive data and requires that processing be "reasonably necessary and proportionate" to disclosed purposes, positioning Delaware among states with the most restrictive sensitive data requirements.
United States Privacy
W
WilmerHale
Article
California Cybersecurity Audits: Preparation Needs To Start Now
California's new cybersecurity audit requirements under CCPA are set to take effect in 2027, with phased implementation based on company revenue. Companies that derive significant revenue from selling or sharing personal information, or process data about large numbers of consumers, must prepare now for independent audits that evaluate the implementation and effectiveness of their cybersecurity controls.
United States Privacy
BT
Barnes & Thornburg LLP
See more

Related Country Guides

DP
Data Privacy

Data Protection

Article
What Consumers Can Sue For In A Data Breach Class Action
Data breaches have surged to record levels, affecting millions of consumers across industries from financial services to healthcare. While receiving a breach notice is increasingly common, not all incidents grant victims the right to sue—and understanding when you can take legal action requires navigating complex privacy laws, common law theories, and the critical requirement of proving concrete harm.
United States Privacy
MS
Miller Shah
Article
Who Is A “Consumer?” The Supreme Court Takes Up The Video Privacy Protection Act
The Supreme Court will decide whether subscribing to any good or service from a video provider—such as a newsletter—makes someone a "consumer" under the Video Privacy Protection Act, or whether only subscriptions to audiovisual content qualify. The case involves allegations that a website disclosed a user's video-viewing history through Facebook tracking pixels after the user signed up for an online newsletter, creating a circuit split on how broadly the VPPA's consumer protections should apply.
United States Privacy
FH
Finnegan, Henderson, Farabow, Garrett & Dunner, LLP
Article
Delaware Adds New Requirements For Sensitive Data, Third-Party Contracts
Delaware has enacted significant amendments to its Personal Data Privacy Act, introducing stringent restrictions on sensitive data processing that take effect January 1, 2027. The state now prohibits the sale of sensitive data and requires that processing be "reasonably necessary and proportionate" to disclosed purposes, positioning Delaware among states with the most restrictive sensitive data requirements.
United States Privacy
W
WilmerHale
See more

Privacy Protection

Article
Who Is A “Consumer?” The Supreme Court Takes Up The Video Privacy Protection Act
The Supreme Court will decide whether subscribing to any good or service from a video provider—such as a newsletter—makes someone a "consumer" under the Video Privacy Protection Act, or whether only subscriptions to audiovisual content qualify. The case involves allegations that a website disclosed a user's video-viewing history through Facebook tracking pixels after the user signed up for an online newsletter, creating a circuit split on how broadly the VPPA's consumer protections should apply.
United States Privacy
FH
Finnegan, Henderson, Farabow, Garrett & Dunner, LLP
Article
NO STANDING, BUT NOT SO FAST: NerdWallet CIPA Case Heads Back To State Court After Popa
A Northern District of California court remanded a CIPA privacy class action back to state court after both parties agreed the plaintiff lacked Article III standing under Popa v. Microsoft. The decision illustrates that while Popa provides defendants with a powerful standing argument in federal court, winning on jurisdictional grounds may simply return the case to state court rather than ending the litigation entirely.
United States Litigation
Troutman Amin LLP
See more

Latest Videos

See more