On August 19, 2026, the Federal Trade Commission (FTC) announced that it is seeking public comment on a proposed enforcement policy statement regarding personalized pricing. The proposed statement makes clear that the FTC intends to scrutinize personalized pricing practices under Section 5 of the FTC Act and marks the latest development in the FTC’s ongoing […]
Consumer Protection/FTC
DROP Is Coming Due: What California’s Delete Act Means for Data Brokers in August
Beginning August 1, 2026, data brokers must begin accessing California’s Delete Request and Opt-Out Platform (“DROP”) at least once every 45 days to retrieve and process consumer deletion requests, as the consumer-facing launch transitions to operational obligations for data brokers. DROP allows California residents to submit a single deletion request to hundreds of registered data […]
FTC Targets EdTech Data Practices in Final Order Following Major Student Data Breach
On June 5, 2026, the Federal Trade Commission (“FTC”) gave final approval to a modified consent order against Illuminate Education, Inc. (“EdTech Provider”), a K-12 software vendor, settling allegations that the EdTech Provider did not adequately protect the personal data of more than 10 million students. The action — which follows a public comment period […]
Colorado Replaces Landmark AI Act—Creating New Trails for AI Rules and Private AI Litigation
On May 12, 2026, the Colorado legislature passed SB 26-189, which repeals and replaces its landmark Artificial Intelligence Act. Colorado is doing away with the concept of “algorithmic discrimination” and moving instead to a notice- and disclosure-based regime focused on automated decision-making. This time, it does so without a carve-out for deployers who are small […]
One Federal Privacy Bill to Rule Them All?
On April 21, 2026, Republican lawmakers on the House Energy & Commerce Committee, including Congressman Brett Guthrie and Congressman John Joyce, M.D., Leader of the Energy and Commerce Data Privacy Working Group, introduced the “Securing and Establishing Consumer Uniform Rights and Enforcement over Data Act”, the SECURE Data Act (the “Act”). The Act is designed […]