On May 4, 2026, the Federal Trade Commission announced a stipulated final order resolving its enforcement action against data broker Kochava Inc. and its subsidiary Collective Data Solutions (CDS). The order bans them from selling or sharing sensitive precise location data without affirmative express consumer consent. Kochava and CDS provide a range of digital analytics

On April 29, 2025, Michigan Attorney General Dana Nessel filed a lawsuit against Roku, Inc., alleging that the company collects and monetizes personal data from children without proper consent. The lawsuit claims that Roku’s practices violate the Children’s Online Privacy Protection Act (COPPA) and other privacy laws.
Continue Reading Michigan Attorney General Takes Action Against Roku, Alleging COPPA Violations

On April 16, 2025, eight state regulators announced the formation of a collaborative privacy enforcement and information sharing consortium. This coalition signals a more unified and robust approach to privacy enforcement.
Continue Reading State Attorneys General Form Bipartisan Privacy Enforcement Consortium

On Nov. 12, 2024, the Consumer Financial Protection Bureau (CFPB) released a report examining federal and state privacy protections for consumers’ financial data. In the report, the CFPB “critiques” the privacy protections available under the Gramm-Leach-Bliley Act (GLBA) and the Fair Credit Reporting Act (FCRA), asserting that the federal framework has “limitations.” The CFPB then

On Oct. 22, 2024, the CFPB issued a final rule that will require covered financial institutions to provide consumers and authorized third parties with access and portability options for their financial data. The CFPB’s final rule, called the “Personal Financial Data Rights Rule,” implements Section 1033 of Title X of the Dodd-Frank Act, a to-date

On March 13, at the Financial Data Exchange Global Summit, CFPB Director Rohit Chopra delivered a keynote address that focused on “the role of standard setters and standard-setting” as the CFPB pushes towards finalizing is its proposed Personal Financial Data Rights Rule.
Continue Reading Setting the Standard: CFPB to Codify Attributes for Standard-Setters Before Finalizing Personal Financial Data Rights Rule