December 2025

This Client Alert is a monthly update on privacy and cybersecurity developments as posted on our Privacy & Information Security Law Blog. If you would like to receive email alerts when new posts are published, please visit our blog and enter your email address in the subscribe field.

• California Privacy Protection Agency Issues Enforcement Advisory for Data Brokers
• Personal Information Protection Certification – One Data Export Mechanism in China
• FTC Takes Action Against Illusory Systems Over $186 Million Data Breach
• European Commission Renews UK Data Adequacy Decisions
• New York Enacts Law Regulating the Use of AI Generated “Synthetic Performers” in Advertising
• Trump Signs Executive Order Targeting State AI Laws
• Indiana Privacy Law To Take Effect January 1, 2026 
• CPPA Fines Nevada Marketing Firm for Violation of California’s Delete Act
• California AG Reaches Settlement with Sling TV for Alleged CCPA Violations As Part of CCPA Investigative Sweep of Streaming Services
• Connecticut, California and New York Reach Landmark Settlement for Student Data Breach
• UK ICO Launches Review of Children’s Privacy in Mobile Gaming