Privacy & Information Security Law Blog

On April 25, 2025, the California Privacy Protection Agency opened the formal public comment period on proposed regulations for the Delete Request and Opt-Out Platform.

Democratic State Senator Anna M. Caballero introduced Senate Bill 690 (S.B. 690), which aims to curb “abusive lawsuits” under the California Invasion of Privacy Act based on the use of cookies and other online technologies, on February 24, 2025, and the Bill is now scheduled to be heard by the Senate Public Safety Committee on April 29, 2025.

On April 22, 2025, the Federal Trade Commission published in the Federal Register final amendments to the Children’s Online Privacy Protection Act Rule, which will go into effect 60 days from publication, on or about June 21, 2025, with a compliance deadline of April 22, 2026.

On April 22, 2025, the European Commission announced its first two non-compliance decisions under the Digital Markets Act. In these decisions, the European Commission fined Apple EUR 500 million and Meta EUR 200 million.

On April 22, 2025, Google announced that it will continue to offer third-party cookies in its Chrome browser and will not roll out a new standalone prompt for third-party cookie preferences. 

On April 17, 2025, the Connecticut Office of the Attorney General issued a report highlighting key enforcement initiatives, complaint trends and legislative recommendations aimed at strengthening Connecticut’s privacy law.

The Department of Health and Human Services’ Office for Civil Rights recently announced two HIPAA enforcement actions involving failures to safeguard electronic protected health information in violation of the HIPAA Security Rule.

In April 2025, the European Commission published the AI Continent Action Plan, which aims to strengthen AI development and uptake in the EU, making the EU a global leader in AI.

On April 16, 2025, the U.S. District Court for the Southern District of Ohio Eastern Division issued a ruling permanently enjoining the Ohio Attorney General from enforcing the Parental Notification by Social Media Operators Act.

In April 2025, the Office of Management and Budget issued two revised policies on federal agencies’ use and procurement of artificial intelligence.