The Pennsylvania Supreme Court held that employers have a common law duty to protect their employees’ personal information from unauthorized access.

FDA will update its medical device approval process.

A federal court in California found that customers have the right to sue Facebook over a 2016 data breach—even though the leaked information was publicly available —potentially signaling an expansion of consumers’ ability to maintain data breach class actions.

‘Brobilize’—the act of a tech company leveraging its customers for public policy purposes. Fascinating topic; horrible name.

A GDPR-like privacy bill in Washington State failed to pass the House.

California’s AG is backing an amendment to CCPA that expands the private right of action and removes the cure period.