On September 30, 2026, Governor Newsom signed Senate Bill 690 (“SB 690”). The law ends private plaintiffs’ ability to sue over website and app tracking under the “pen register” and “trap and trace” provisions of the California Invasion of Privacy Act (“CIPA”), Cal. Penal Code § 638.51. Over the past two years, those provisions have
On July 20, 2026, Pennsylvania Governor Josh Shapiro signed into law Senate Bill 992 (“SB 992”), which significantly amends the Pennsylvania Telemarketer Registration Act (the “Act”), 73 P.S. §§ 2241 et seq. The legislation has important implications for companies that engage in telemarketing, SMS/text message marketing, customer outreach campaigns, and other consumer-facing communications with Pennsylvania
One of the most significantly litigated areas of privacy law is biometric privacy. Tools that collect biometric information and biometric identifiers—including facial geometries, fingerprint scans, and voiceprints—are increasingly common for businesses across industries. Unfortunately, such tools in recent years have become focuses of the plaintiffs’ bar.
2025 saw continued developments in litigation under Illinois’ Biometric Information Privacy Act (BIPA), one of the first and most important biometric privacy laws in the country, as well as other, lesser-litigated biometric laws. Squire Patton Boggs’ globally ranked “Elite” Data Disputes team is well experienced defending businesses and their data practices, including in the realm of biometric privacy, in both litigation and arbitration, including mass arbitration. See also https://www. privacyworld.blog/2025/12/2025-mass-arbitration-year-in-review/
In this article, informed by our practical experience litigating and arbitrating biometric cases, we: (I) provide a brief primer on BIPA and then take a look at some highlights of the 2025 biometric privacy litigation space, including (II) class action and mass arbitration activity under BIPA, (III) key questions regarding defenses to BIPA claims on appeal at the Seventh Circuit, (IV) a decision contrasting BIPA with New York City’s biometric regime, (V) developments under other biometric laws enforced by attorneys general, and (VI) the intersection of AI and biometric privacy laws.
Continue Reading 2025 Year-In-Review: Biometric Privacy Litigation
In case you missed it, below are recent posts from Privacy World covering the latest developments on data privacy, security and innovation. Please reach out to the authors if you are interested in additional information.
In case you missed it, below are recent posts from Privacy World covering the latest developments on data privacy, security and innovation. Please reach out to the authors if you are interested in additional information.
Biden Budget Proposal Advances AI Priorities | Privacy World
US Regulators Lift the Curtain on Data Practices With Assessment, Reporting
In case you missed it, below are recent posts from Privacy World covering the latest developments on data privacy, security and innovation. Please reach out to the authors if you are interested in additional information.
In Narrow Vote California Moves Next Generation Privacy Regs Forward | Privacy World
Today, in a unanimous opinion, the Supreme Court of the United States ruled that agencies of the federal government can be sued by individual consumers for violations of the Fair Credit Reporting Act (“FCRA”), 15 U.S.C. § 1681, et seq. The decision is significant in that it paves the way for more FCRA
2023 was an eventful year for privacy legislation, regulation and regulatory enforcement. The compliance landscape continues to develop and evolve rapidly, making it difficult for covered businesses to keep up with the myriad requirements. In this post, we discuss some of the year’s most interesting privacy compliance developments globally.
Continue Reading 2023 Privacy Compliance Year in Review
In a decision last week, the Ninth Circuit Court of Appeals affirmed dismissal of a putative class action concerning allegations that Shopify violated various California privacy and unfair competition laws by purportedly concealing its involvement in online consumer transactions. Briskin v. Shopify, Inc., No. 22-15815, 2023 WL 8225346 (9th Cir. Nov. 28, 2023). In
In case you missed it, below are recent posts from Privacy World covering the latest developments on data privacy, security and innovation. Please reach out to the authors if you are interested in additional information.
The French CNIL’s New Guidance on Whistleblowing | Privacy World
SEC Adopts Final Cybersecurity Risk Management and Incident Disclosure Regulations