Privacy & Cybersecurity Law Blog https://www.hunton.com/privacy-and-cybersecurity-law-blog/2026/ Mon, 07 Sep 2026 11:02:52 -0400 European Commission Designates ChatGPT, Reddit, and Roblox Under the Digital Services Act https://www.hunton.com/privacy-and-cybersecurity-law-blog/european-commission-designates-chatgpt-reddit-and-roblox-under-the-digital-services-act european-commission-designates-chatgpt-reddit-and-roblox-under-the-digital-services-act Fri, 04 Sep 2026 09:00:01 -0400 On August 31, 2026, the European Commission announced that it had designated ChatGPT as a Very Large Online Search Engine (“VLOSE”) and Reddit and Roblox as Very Large Online Platforms (“VLOPs”) under the Digital Services Act (“DSA”).

Continue Reading ›

]]> China Issues New Rules on Cyberspace Security Inspection https://www.hunton.com/privacy-and-cybersecurity-law-blog/china-issues-new-rules-on-cyberspace-security-inspection china-issues-new-rules-on-cyberspace-security-inspection Wed, 02 Sep 2026 09:00:02 -0400 The Ministry of Public Security of the People’s Republic of China (“MPS”) recently promulgated the Measures for Public Security Organs’ Supervision and Inspection of Cyberspace Security (the “New Rules on Cyberspace Inspection”). The New Rules on Cyberspace Inspection will take effect October 1, 2026, and replace the 2018 Provisions on Internet Security Supervision and Inspection by Public Security Organs, which are simultaneously repealed.

Continue Reading ›

]]> Court Approves Meta Settlement With 29 States Over Alleged Harms to Children and Teens https://www.hunton.com/privacy-and-cybersecurity-law-blog/court-approves-meta-settlement-with-29-states-over-alleged-harms-to-children-and-teens court-approves-meta-settlement-with-29-states-over-alleged-harms-to-children-and-teens Mon, 31 Aug 2026 09:00:03 -0400 On August 26, 2026, U.S. District Judge Yvonne Gonzalez Rogers approved a settlement between Meta Platforms Inc. and 29 state attorneys general in a federal bellwether case concerning alleged harms to children and teens from Facebook and Instagram.

Continue Reading ›

]]> FTC Proposes Enforcement Policy Statement on Personalized Pricing https://www.hunton.com/privacy-and-cybersecurity-law-blog/ftc-proposes-enforcement-policy-statement-on-personalized-pricing ftc-proposes-enforcement-policy-statement-on-personalized-pricing Mon, 24 Aug 2026 09:00:04 -0400 On August 19, 2026, the FTC announced that it is seeking public comment on a proposed enforcement policy statement regarding personalized pricing. The proposed policy statement outlines the FTC’s legal concerns with the practice and signals the agency’s intent to pursue enforcement actions against businesses that fail to make adequate disclosures to consumers.

Continue Reading ›

]]> White House Memorandum Establishes Framework for Government-Directed Private-Sector Cyber Operations https://www.hunton.com/privacy-and-cybersecurity-law-blog/white-house-memorandum-establishes-framework-for-government-directed-private-sector-cyber-operations white-house-memorandum-establishes-framework-for-government-directed-private-sector-cyber-operations Thu, 20 Aug 2026 09:00:05 -0400 On August 12, 2026, President Trump issued a memorandum directing the creation of a federal program under which vetted U.S. companies may be authorized to conduct certain cyber operations against foreign cyber-enabled transnational criminal organizations under U.S. government control and oversight.

Continue Reading ›

]]> New Jersey Enacts the Kids Code Act with Privacy-by-Default and Safety-by-Design Obligations   https://www.hunton.com/privacy-and-cybersecurity-law-blog/new-jersey-enacts-the-kids-code-act-with-privacy-by-default-and-safety-by-design-obligations new-jersey-enacts-the-kids-code-act-with-privacy-by-default-and-safety-by-design-obligations Thu, 20 Aug 2026 09:00:06 -0400 On August 11, 2026, New Jersey Governor Mikie Sherrill's signed the Kids Code Act,   imposing a range of privacy-by-default and safety-by-design obligations on online service providers whose services are reasonably likely to be accessed by minors.

Continue Reading ›

]]> FTC, California and Utah Sue Telehealth Company Hims & Hers for Deceptive and Unlawful Privacy Practices https://www.hunton.com/privacy-and-cybersecurity-law-blog/ftc-california-and-utah-sue-telehealth-company-hims-hers-for-deceptive-and-unlawful-privacy-practices ftc-california-and-utah-sue-telehealth-company-hims-hers-for-deceptive-and-unlawful-privacy-practices Wed, 19 Aug 2026 09:00:07 -0400 The Federal Trade Commission, along with the Utah and California State Attorneys General, recently sued Hims & Hers Health, Inc., alleging that the telehealth company unlawfully shared consumers’ sensitive health information and engaged in deceptive billing and subscription cancellation practices.

Continue Reading ›

]]> New York Attorney General Releases Final Rules for SAFE for Kids Act https://www.hunton.com/privacy-and-cybersecurity-law-blog/new-york-attorney-general-releases-final-rules-for-safe-for-kids-act new-york-attorney-general-releases-final-rules-for-safe-for-kids-act Tue, 18 Aug 2026 09:00:08 -0400 Last month, the New York Attorney General released final rules implementing the Stop Addictive Feeds Exploitation for Kids Act, which takes effect on January 25, 2027.

Continue Reading ›

]]> CalPrivacy Settles with Two Data Brokers over Registration Failures and Privacy Violations https://www.hunton.com/privacy-and-cybersecurity-law-blog/calprivacy-settles-with-two-data-brokers-over-registration-failures-and-privacy-violations calprivacy-settles-with-two-data-brokers-over-registration-failures-and-privacy-violations Tue, 18 Aug 2026 09:00:09 -0400 On August 11, 2026, and August 13, 2026, the California Privacy Protection Agency (“CalPrivacy”) announced settlements with two data brokers, LocateSmarter LLC (“LocateSmarter”) and Cybba, Inc. (“Cybba”), respectively, resolving allegations that both companies failed to register as data brokers under California’s data broker law, the Delete Act.

Continue Reading ›

]]> EDPB Adopts Guidelines on Anonymous Data, Web Scraping, and Blockchain https://www.hunton.com/privacy-and-cybersecurity-law-blog/edpb-adopts-guidelines-on-anonymous-data-web-scraping-and-blockchain edpb-adopts-guidelines-on-anonymous-data-web-scraping-and-blockchain Mon, 17 Aug 2026 09:00:10 -0400 On July 8, 2026, the European Data Protection Board adopted draft guidelines on anonymization and on web scraping in the context of generative AI, and finalized its guidelines on the processing of personal data through blockchain technologies.

Continue Reading ›

]]>