U.S. Senators call for a data security law after the Marriott breach.

A proposed bill would make San Francisco the first city to ban governmental adoption of facial recognition technology.

The Computer Fraud and Abuse Act doesn’t prevent a company from scraping LinkedIn’s site data, according to a recent Ninth Circuit decision.

SDNY found that a fashion startup waived attorney-client privilege by including its PR firm in emails about litigation strategy.

Hawaii’s governor vetoed a bill that would have been the first law to prohibit the sale of a customer’s location data without consent.

A federal court in California found that customers have the right to sue Facebook over a 2016 data breach—even though the leaked information was publicly available —potentially signaling an expansion of consumers’ ability to maintain data breach class actions.