The number of enforcement actions under state consumer privacy laws is “building” and could soon explode, said Troutman privacy attorney David Stauss on his firm’s webinar Thursday. For companies, injunctive relief could be just as costly as the monetary penalty, he cautioned.
Privacy Daily is providing readers with the top stories from last week, in case you missed them. All articles can be found by searching the title or clicking on the hyperlinked reference number.
CHICAGO -- Work in the House on a national privacy bill has continued even during the government shutdown, Venable’s Michael Signorelli said during a panel Tuesday at the Association of National Advertisers (ANA) ad law conference. But with a year to go until the 2026 midterm elections, timing could be a problem, the privacy and advertising attorney said. “The calendar is no one’s friend right now.”
CHICAGO -- States’ comprehensive privacy laws are not “dead letters” or “paper tigers,” Perkins Coie privacy attorney Meredith Halama said during a panel at the Association of National Advertisers ad law conference. “We see real, active enforcement, particularly in California.”
SAN DIEGO -- The right to delete seems simple, maybe deceptively so, though California's new Deletion Request and Opt-Out Platform (DROP) is attempting to reduce complications, panelists said during IAPP's privacy and security conference Friday.
The right to cure in Oregon's comprehensive privacy law sunsets -- and a universal opt-out requirement dawns -- in two months, Oregon DOJ warned businesses in an October enforcement report released Wednesday.
Vermont House Rep. Monique Priestley will run for state Senate in 2026, the Democrat announced Wednesday. Priestley has authored various privacy bills, including this year’s age-appropriate design code law (see 2506120094) and comprehensive privacy legislation (see 2510060010).
No states have enacted new comprehensive privacy laws in 2025, so far, but “half of those with laws already on the books have made significant amendments to their scopes and requirements,” IAPP said Monday in releasing its revised report on state privacy laws. The report found that eight states updated their privacy laws in 2025: Colorado, Connecticut, Kentucky, Montana, Oregon, Texas, Utah and Virginia.
As the scope and usage of facial recognition technology increases, privacy advocates are increasingly concerned about a lack of regulation as well as carve-outs in instances where rules exist, they said in interviews with Privacy Daily. But there are existing laws that cover the technology, some contended.
Interactive Advertising Bureau Tech Lab updated its Global Privacy Protocol (GPP) and released the second version of its Data Deletion Request Framework (DDRF), IAB Tech Lab said Thursday. The organization seeks comments by Dec. 1 on both Global Privacy Working Group projects by Dec. 1.