Data Privacy

AEPD Resolution on Data Protection Access Right Procedure

The Spanish Data Protection Agency (AEPD) issued a resolution regarding a data protection rights procedure, specifically concerning the right of access. The resolution details the process followed after a complaint was filed and notes that the data controller ultimately provided the requested response.

AEPD resolves identity theft data use complaint against TELFY TELECOM

The Spanish Data Protection Agency (AEPD) has resolved a complaint against TELFY TELECOM for alleged misuse of personal data in an identity theft case. The company failed to respond to a data access request from a customer who was a victim of identity theft, leading to a formal resolution by the AEPD.

ICO Enforcement: Eight Guilty in Nuisance Call Investigation

The UK's Information Commissioner's Office (ICO) announced further convictions in its largest nuisance call investigation, bringing the total prosecuted to 10 individuals. The investigation involved the unlawful accessing and sale of personal data from garages and claims management companies.

EDPB Work Programme 2026-2027

The European Data Protection Board (EDPB) has adopted its work programme for 2026-2027, focusing on enhancing harmonisation, promoting compliance with GDPR, and strengthening enforcement cooperation. The programme outlines key initiatives including new guidelines on AI, consent, and anonymisation, alongside efforts to simplify GDPR compliance for stakeholders.

Tilting Point Media Fined $500K for CCPA/COPPA Children's Data Violations

California Attorney General Rob Bonta and Los Angeles City Attorney Hydee Feldstein Soto announced a $500,000 settlement with Tilting Point Media LLC for violating CCPA and COPPA. The company illegally collected and shared children's data from its mobile game "SpongeBob: Krusty Cook-Off" without parental consent.

Healthline.com Agrees to $1.55M CCPA Settlement with California AG

California Attorney General Rob Bonta announced a $1.55 million settlement with Healthline.com for alleged violations of the California Consumer Privacy Act (CCPA). The settlement resolves claims that Healthline failed to allow consumers to opt out of targeted advertising and shared sensitive health data with third parties without proper consent.

Sling TV Agrees to $530K Settlement for CCPA Privacy Violations

California Attorney General Bonta secured a $530,000 settlement with Sling TV for CCPA violations. The settlement resolves allegations that Sling TV failed to provide an easy opt-out for consumers to stop the sale of their personal information and lacked sufficient privacy protections for children. Sling TV must implement changes to comply with CCPA requirements.

State AGs Secure $5.1M Settlement from Education Software Company for Data Breach

California, Connecticut, and New York Attorneys General have secured a $5.1 million settlement with Illuminate Education, Inc. following a 2021 data breach that exposed sensitive student information. The company will pay $3.25 million in civil penalties to California and implement enhanced data security measures.

California AG Secures $1.4M CCPA Settlement with Jam City

California Attorney General Rob Bonta announced a $1.4 million settlement with mobile app gaming company Jam City, Inc. for violating the California Consumer Privacy Act (CCPA). The company failed to provide consumers with opt-out methods for the sale of their personal information and mishandled data of minors.

NY AG Probes Instacart Pricing and Data Privacy Compliance

The New York Attorney General's office has sent a letter to Instacart requesting information regarding its pricing practices and compliance with New York's Algorithmic Pricing Disclosure Act. The inquiry follows a report detailing significant price variations for the same products on the Instacart platform.