Data Privacy

PlayOn Sports Fined $1.10M for Privacy Violations

The California Privacy Protection Agency has fined PlayOn Sports $1.10 million for privacy violations related to student data and targeted advertising. The company must also change its data collection and opt-out practices.

EDPB Conference on Cross-Regulatory Cooperation

The European Data Protection Board (EDPB) announced a conference on cross-regulatory cooperation in the EU, focusing on data protection perspectives. The event took place on March 17, 2026, and aimed to provide an overview of the EDPB's work in this area.

GDPR Fine of €4,000,000 Imposed on MODEL REYNA, C.B.

The Spanish Data Protection Agency (AEPD) has imposed a fine of €4,000,000 on MODEL REYNA, C.B. for violations of the GDPR. The company failed to respond to information requests from the agency during an investigation, leading to the sanction.

JATC Data Breach Notification

The UA Sprinkler Fitters Local 669 Joint Apprenticeship and Training Committee (JATC) has issued a data breach notification following suspicious activity detected on May 23, 2024. The breach potentially exposed names, Social Security numbers, driver's license numbers, and medical information of 518 Washington residents.

Phia Group Data Security Incident Notification

The Phia Group has notified the Washington Attorney General's office of a data security incident affecting approximately 2,802 residents. Personal information including clinical data, DOB, and SSN may have been compromised between July 8-9, 2024.

Fried Frank Data Breach Notice

Fried Frank, Harris, Shriver & Jacobson LLP is issuing a data breach notice to affected individuals following a cybersecurity incident discovered on October 27, 2025. The incident involved unauthorized access to a user account, leading to the potential exposure of personal information. The firm is offering two years of free credit and identity monitoring services.

Gravity Payments Data Security Incident Notification

Gravity Payments is notifying consumers of a data security incident that occurred around August 22, 2025, due to a vulnerability in a third-party service provider's software. Personal information may have been accessed, and affected individuals are being offered credit monitoring services.

TABB Inc. Data Breach Notification

TABB Inc., a business partner of The Brooklyn Hospital Center, is notifying individuals of a data breach discovered on August 14, 2024, which may have involved personal information including name and variable data elements. The company is offering 12 months of free identity protection services.

EU Commission Hosts Digital Services Act Implementation Roundtable

The EU Commission held its 4th roundtable on Digital Services Act (DSA) implementation with Civil Society Organisations (CSOs) on February 27, 2026. The meeting provided updates on DSA enforcement activities and discussed support for CSOs.

FTC v. Walmart - Driver Pay Deception Settlement

The FTC and several states have reached a $100 million settlement with Walmart to resolve allegations that the company deceived delivery drivers about their base pay, incentives, and tips. This judgment aims to compensate drivers for lost earnings due to these deceptive practices.