Regulatory, privacy & security news.
Live wire · updated dailyBreaches, lawsuits, enforcement actions and new law — tracked as they happen and decoded for the teams who have to respond. Captain Compliance reads the rulings so you don’t have to, then ships the default changes that keep you covered.
Latest dispatches
RSS feed →EU Cyber Resilience Act Makes Cybersecurity a Requirement to Sell in Europe
The European Union’s Cyber Resilience Act is about to change the economics of cybersecurity compliance.
CNIL Issues GDPR Rules for School Cloud and Collaboration Tools
France’s data protection authority is warning primary and secondary schools that the growing use of cloud-based collaboration platforms creates far more than…
ANPD Fines TikTok R$153.7 Million Over Children’s Data Protection Failures Under Brazil’s LGPD
Brazil’s data protection authority has issued one of its most significant child-privacy enforcement actions to date, fining ByteDance, the parent company of…
Is Swigart Law and these CIPA Claims Legit?
People land on this question from two very different directions.
Google Bids $10 Million for Spirit Airlines’ Internal Data to Train AI — Privacy Questions Follow
Google has agreed to pay $10 million for a large package of internal business data from bankrupt Spirit Airlines, saying the material…
The Real Landscape of CIPA Serial Plaintiffs
While we broke the story of the vexatious California litigant Vivek Shah you may want to go on an easter egg hunt…
New Jersey Supreme Court Strengthens Daniel’s Law: Data Brokers Face Liability for Ignoring Deletion Requests
Data brokers that continue publishing the home addresses and unpublished phone numbers of New Jersey judges, police officers, prosecutors, and certain other…
NEWS 6 min read
Rodriguez v. Sacramento CDJR LLC (C.D. Cal.): Browsewrap Arbitration Fails, ECPA One-Party Consent Holds, and Crime-Tort Exception Narrowed
On August 12, 2026, the Central District of California issued a notable order in Rodriguez v.
NEWS 3 min read
CalPrivacy Hits Second Data Broker in Days: Cybba Fined $52,400 for Skipping Registry
Just two days after fining LocateSmarter, the California Privacy Protection Agency has issued its second data broker enforcement action of the week.
Colorado Releases Draft Rules for Automated Decision-Making and Chatbot Safety Laws
The Colorado Attorney General’s Office has published draft regulations to implement two significant artificial intelligence laws that take effect on January 1,…
Secret Service Gains Approval for New Facial Recognition Tools as Privacy Oversight Questions Remain
The U.S. Department of Homeland Security has approved the Secret Service’s use of facial recognition and surveillance tools from Helix, a move…
Ireland’s Data Protection Commission Poised to Fine Match Group €8–11 Million Over Tinder GDPR Failures
Ireland’s Data Protection Commission is expected to impose a fine of between €8 million and €11 million on Match Group, the U.S.