California passed an Internet of Things cybersecurity law.

A federal court in California found that customers have the right to sue Facebook over a 2016 data breach—even though the leaked information was publicly available —potentially signaling an expansion of consumers’ ability to maintain data breach class actions.

New Hampshire, Illinois, Virginia, and Washington were quick to introduce CCPA-style privacy bills early into the 2020 legislative sessions.

The IAB has proposed a CCPA compliance framework for programmatic publishers and ad tech companies.

A variety of amendments to California’s CCPA—some backed by industry, others backed by consumer groups—advanced out of committee in the Senate and Assembly.

Hawaii’s governor vetoed a bill that would have been the first law to prohibit the sale of a customer’s location data without consent.