In other biometric news, Home Depot was sued under BIPA by consumers who say the company collected “faceprints” and followed them around the store.

Notes from the California AG’s CCPA roadshow.

New Prop 65 warning requirements went into effect on Aug. 30.

The House unanimously passed the SMART IoT Act, which directs the Department of Commerce to study the IoT industry and report back to Congress.

The U.K.s Information Commissioner’s Office will impose a $123M GDPR fine on Marriott as a result of newly-acquired Starwood’s data breach. For potential M&A implications, see here.

A federal court in California found that customers have the right to sue Facebook over a 2016 data breach—even though the leaked information was publicly available —potentially signaling an expansion of consumers’ ability to maintain data breach class actions.