NIST, ISO 27701, or Neither? Why Picking a Privacy Framework Is the Wrong First Question
In March 2025, the California Privacy Protection Agency fined American Honda Motor Co. $632,500. Honda is not a company without a privacy program. It had
The California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA) are landmark pieces of legislation designed to enhance consumer privacy rights in California.
The CCPA, enacted in 2018, grants California residents significant rights regarding their personal information, including the right to know what personal information is being collected, the right to delete personal information, and the right to opt-out of the sale of personal information.
The CPRA, which builds upon the CCPA, further strengthens consumer privacy rights by introducing new provisions such as the right to correct inaccurate personal information and the right to limit the use and disclosure of sensitive personal information. These laws have significant implications for businesses operating both inside and outside of California, requiring them to implement robust data privacy programs, provide consumers with clear and conspicuous privacy notices, and establish procedures for handling consumer requests.
Captain Compliance provides valuable resources and expertise to help organizations understand and comply with the CCPA and CPRA.
In March 2025, the California Privacy Protection Agency fined American Honda Motor Co. $632,500. Honda is not a company without a privacy program. It had

Vivek Shah is no longer merely a “serial plaintiff” in the vocabulary of defense lawyers and demand-letter recipients. On July 20, 2026, U.S. District Judge

If you run an agency, you are sitting on both sides of the most aggressive privacy litigation campaign in the country right now. Your own
When plaintiff firms draft a California privacy complaint, the wiretapping counts get the headlines. CIPA Section 631 and 632.7 claims against session replay tools, chatbots,

We broke the news the other day about CalPrivacy ramping up audits for specific industries. The California Privacy Protection Agency has opened its first formal

We have screamed at the top of our virtual lungs about the risks of having a broken cookie banner and having to deal with a
A statute written in 1967 to stop people from clipping alligator leads onto telephone lines is now the busiest privacy litigation engine in the United
In a development that underscores the growing regulatory heat on Big Tech, four US states are seeking a staggering $1.4 trillion (approximately S$1.81 trillion) in

Autonation just beat a CIPA case based on jurisdiction grounds but constant threats are lurking each and every week with new ads like the ones

The California Invasion of Privacy Act (CIPA) was passed in 1967. A time before the internet existed. Lyndon B. Johnson was in the White House,