A federal court in California found that customers have the right to sue Facebook over a 2016 data breach—even though the leaked information was publicly available —potentially signaling an expansion of consumers’ ability to maintain data breach class actions.

New York beefed up their breach notification statutes.

Hawaii’s governor vetoed a bill that would have been the first law to prohibit the sale of a customer’s location data without consent. New York City is considering a similar measure.

AGs from 38 states are lobbying Congress to pass the SAFE Banking Act and give cannabis businesses access to the federal banking system.

The FTC has beefed up its data security enforcement.

New Hampshire, Illinois, Virginia, and Washington were quick to introduce CCPA-style privacy bills early into the 2020 legislative sessions.