Privacy Law and Privacy Regulations

TikTok has agreed to pay $400 million to resolve allegations that it violated the Children's Online Privacy Protection Act by collecting personal information from children under 13 without proper parental consent. This settlement represents one of the largest COPPA recoveries ever and comes alongside efforts to vacate a 2019 consent decree against TikTok's predecessor, Musical.ly. The case highlights the evolving landscape of children's privacy enforcement and the serious regulatory scrutiny facing companie

California's new Delete Request and Opt-Out Platform (DROP) has triggered a wave of enforcement actions against data brokers, with regulators issuing substantial fines for registration failures and CCPA violations. These cases reveal how a simple compliance misstep can expose deeper vulnerabilities in a company's privacy practices, raising critical questions about whether your business qualifies as a data broker and what steps are necessary to avoid regulatory scrutiny.

A sophisticated social engineering campaign has compromised dozens of major U.S. financial institutions through phone-based attacks that bypass traditional security measures. Attackers posing as IT helpdesk staff manipulate employees into surrendering credentials and MFA tokens, gaining unauthorized access to cloud environments containing sensitive customer data.