A federal court in California found that customers have the right to sue Facebook over a 2016 data breach—even though the leaked information was publicly available —potentially signaling an expansion of consumers’ ability to maintain data breach class actions.

An update in Facebook’s high-stakes biometric data case.

A proposed bill would make San Francisco the first city to ban governmental adoption of facial recognition technology.

In other biometric news, Home Depot was sued under BIPA by consumers who say the company collected “faceprints” and followed them around the store.

Google was hit with $57M GDPR fine by French regulators.

New Hampshire, Illinois, Virginia, and Washington were quick to introduce CCPA-style privacy bills early into the 2020 legislative sessions.