News

CDPI Privacy Newsletter

Get these breaking news updates in your inbox! Subscribe to our newsletter Subscribe
Categories : CDPI Privacy Newsletter

IT’S THE LAW (05/06/2025)

May 6, 2025
Georgia is the eighth US state challenged on an age-verification law, as NetChoice swipes at the Georgia Children on Social Media Act. The business tech advocacy group sued Georgia over the new law which is due to go into effect this summer. Intended to protect the privacy of young children, the law requires companies to use “commercially reasonable efforts” to verify someone’s age and requires parental consent for minors to use social media.
CDPI Privacy Newsletter

Children’s Privacy: Michigan sues Roku over COPPA and state consumer protection law violations

May 6, 2025
Michigan’s Attorney General has sued television platform Roku for ongoing violation of the Children’s Online Privacy Protection Act (COPPA) and the Michigan Consumer Protection Act. The company is accused of systematically collecting, processing, and disclosing children’s data, which is not allowed under COPPA. The company is also accused of misleading parents about what data it collects.
CDPI Privacy Newsletter

Breached: Blue Shield/CA, Yale New Haven Health, & CA Health Exchange

April 29, 2025
Blue Shield of California has admitted to a major data breach affecting 4.7 million members. It's due to a misconfigured Google Analytics setup. Meanwhile in Connecticut, Yale New Haven Health Service suffered a big cyberattack exposing sensitive patient data including social security numbers. Also, the website for Covered California, the health exchange that covers Californians under the Affordable Care Act, has been transmitting sensitive data to LinkedIn via trackers.
CDPI Privacy Newsletter

Advancing the Steal: Cybercriminals favoring login data stealing over ransomware use to lock up systems per IBM report

April 29, 2025
IBM’s X-Force 2025 Threat Intelligence Index reports cybercriminals are taking a new tack when it comes to data piracy, changing from ransomware system lockdowns to stealthily entering systems and then lying in wait for opportunities to steal login information. The report, which resulted from studying 150 billion security events from 130+ countries, notes an 84% jump in phishing attacks and expanded use of AI by cybercriminals.
CDPI Privacy Newsletter

Children’s Privacy: Six years in the making, FTC announces new, tougher version of COPPA!

April 29, 2025
The US Federal Trade Commission (FTC) has just published the updated and more forceful rule for the Children’s Online Privacy Protection Act (COPPA), putting more pressure on businesses, apps and websites to protect children’s privacy and data confidentiality. The stronger rules, which will go into effect this summer, include new disclosure requirements, required creation of information security programs, and additional restrictions designed to keep data from being shared with advertisers and data brokers.
CDPI Privacy Newsletter