On February 27, 2026, the California Privacy Protection Agency (“CalPrivacy”) issued an order (the “Order”) requiring a sports-focused media and technology company (the “Company”) to pay a $1.10 million administrative fine for violations of the California Consumer Privacy Act (“CCPA”). The action continues California regulators’ scrutiny of how companies deploy cookies, software development kits and […]
Privacy & Cybersecurity Litigation
Genetic Goldmine or Legal Landmine? Tempus AI Confronts GIPA Exposure
On February 13, 2026, a putative class filed a Complaint in the U.S. District Court for the Northern District of Illinois alleging that Tempus AI, Inc. (“Tempus AI”) violated the Illinois Genetic Information Privacy Act (410 ILCS 513/1 et seq., “GIPA”). The plaintiffs claim Tempus AI unlawfully obtained and disclosed genetic information belonging to customers […]
California Attorney General Announces Investigative Sweep into “Surveillance Pricing”
On January 28, 2026, California Attorney General (“AG”) Rob Bonta announced an investigative sweep targeting “surveillance pricing” practices among businesses in the retail, grocery, and hotel sectors. The investigation focuses on companies that use consumers’ personal information to set individualized prices. According to the AG’s press release, surveillance pricing practices could violate the California Consumer […]
Texas Court Blocks Smart TV Data Collection
A Texas state court has issued a temporary restraining order (“TRO”) blocking Hisense, a major Chinese smart TV manufacturer, from collecting data on the content viewers watch via Automatic Content Recognition (“ACR”) technology. Background The TRO follows lawsuits that Texas Attorney General (“AG”) Ken Paxton filed on December 15, 2025, against Hisense and four other […]
SEC Dismisses Remaining Claims Against SolarWinds
On November 20, 2025, the Securities and Exchange Commission (SEC) dismissed its landmark enforcement action against SolarWinds Corp. and the company’s Chief Information Security Officer, Tim Brown. In 2023, the SEC’s enforcement action broke new ground as the first formal action by the Commission against a CISO and the first civil fraud action litigated by […]