Privacy & Cybersecurity Law Blog

On May 8, 2026, the California Attorney General announced a record $12.75 million settlement with General Motors to resolve allegations that it illegally sold Californians’ location and driving behavior data without adequate notice or consent, in violation of the California Consumer Privacy Act and California’s Unfair Competition Law.

Illinois Department of Human Rights recently issued regulations governing the use of Artificial Intelligence (AI) in making employment decisions.

On April 30, 2026, the New York State Department of Financial Services announced a $2.25 million settlement with Delta Dental following a cybersecurity incident that led to violations of the agency’s Cybersecurity Regulation.

On April 28, 2026, Maryland Governor Wes Moore signed into law House Bill 895, the Protection From Predatory Pricing Act, which regulates certain personalized pricing practices used by grocery stores and grocery delivery services.

On April 29, 2026, the UK Information Commissioner’s Office published the final updated version of its guidance on storage and access technologies such as cookies, pixels and similar technologies.