Data Privacy

FTC v. Walmart - Driver Pay Deception Settlement

The FTC and several states have reached a $100 million settlement with Walmart to resolve allegations that the company deceived delivery drivers about their base pay, incentives, and tips. This judgment aims to compensate drivers for lost earnings due to these deceptive practices.

CalPrivacy Launches Data Broker Enforcement Strike Force

The California Privacy Protection Agency (CalPrivacy) has launched a Data Broker Enforcement Strike Force to investigate privacy violations within the data broker industry. This initiative aims to enhance compliance with the CCPA and the Delete Act, building on previous enforcement actions.

CalPrivacy Fines ROR Partners for Data Broker Violations

The California Privacy Protection Agency has fined ROR Partners LLC $56,600 for failing to register as a data broker as required by the Delete Act. The marketing firm was found to have collected and sold extensive consumer data without proper registration, highlighting the agency's focus on data broker compliance.

CalPrivacy Data Broker Registration Enforcement Advisory

CalPrivacy has issued an enforcement advisory reminding data brokers of their registration requirements, including disclosing trade names and websites, and registering independently. Data brokers must register by January 31 annually and face fines of $200 per day for non-compliance.

CPPA Fines Data Brokers for Registration Violations

The California Privacy Protection Agency (CPPA) has issued enforcement actions against two data brokers, Rickenbacher Data LLC (d/b/a Datamasters) and S&P Global, Inc., for failing to register as required by California's Delete Act. Datamasters was fined $45,000 and ordered to stop selling personal information, while S&P Global was fined $62,600.

California Bill for CCPA Whistleblower Protections and Awards

The California Privacy Protection Agency (CalPrivacy) is sponsoring AB 2021, a bill to establish whistleblower protections and an award program under the California Consumer Privacy Act (CCPA). The bill aims to incentivize individuals to report violations and protect them from retaliation.

FTC and States Secure $100M Judgment Against Walmart for Deceptive Earnings Claims

The FTC and 11 states have secured a $100 million judgment against Walmart to settle allegations of deceptive earnings claims made to delivery drivers in its Spark Driver program. The company allegedly misled drivers about base pay, incentives, and tips, causing drivers to lose tens of millions of dollars.

EDPB Opinion on Dutch Authority's Draft Decision for Arcadis Group

The European Data Protection Board (EDPB) has issued an opinion on a draft decision by the Dutch Data Protection Authority concerning Arcadis Group's Binding Corporate Rules (BCRs). This opinion addresses the international transfer of data and the adequacy of the BCRs.

EDPB Opinion on ABN AMRO Binding Corporate Rules

The European Data Protection Board (EDPB) has issued Opinion 06/2026 regarding the Binding Corporate Rules (BCRs) of ABN AMRO. This opinion addresses the draft decision from the Dutch supervisory authority concerning these BCRs.

New York v. Valve Corporation - Loot Boxes and Gambling

The New York Attorney General has sued Valve Corporation, alleging that its video game loot boxes function as illegal gambling. The complaint argues that Valve's monetization of virtual items through loot boxes violates New York's gambling laws and seeks to hold the company accountable for these practices.