Enforcement

Europe’s data watchdogs already have all the evidence they need to reject Pay or OK In July 2025, ICCL Enforce submitted a submission to each of Europe’s data protection authorities and the European Data Protection Board that summarises relevant case law and enforcement decisions, which show that consent to RTB can not…

The CRTC has published an enforcement decision known as VT250813-Jimmy Genesse under Canada’s Anti-Spam Legislation (CASL). In this case, the CRTC determined that a party (Jimmy Genesse) violated the law by installing or causing to be installed computer programs in connection with commercial activity, without meeting the legal requirements under CASL. As a result,…

The California Privacy Protection Agency, the state’s main data privacy regulator, just announced its largest fine yet – a record-setting $1.35 million – against an employer that it found to have violated job applicant and consumer privacy rights. Today’s announcement marks the first-ever enforcement action involving job applicants, kicking off…

Three companies – Flo Health, Google and Flurry – have each agreed to shell out millions of dollars to fund a nearly $60 million settlement of a proposed class action lawsuit that accused Flo of using tracking codes in its fertility app that shared women’s sensitive information with Google and…

News: September 30, 2025 SACRAMENTO – The California Privacy Protection Agency (CPPA) Board has issued a decision requiring Tractor Supply Company, the nation’s largest rural lifestyle retailer with more than 2,500 stores in 49 states, to change its business practices and pay a $1,350,000 fine to resolve claims that the company violated the…

The European Court of Justice issued a landmark ruling on Tuesday (5 December) that is set to facilitate the imposition of fines for infringements of the General Data Protection Regulation (GDPR). The European Court of Justice (ECJ) put out a verdict that will make it easier for data protection authorities…

California Superior Court Stays Some Areas of Enforcement By now, you have likely heard about the California Superior Court decision delaying enforcement until March 29, 2024, of the California Privacy Protection Agency regulations issued on March 29, 2023. The CPPA’s regulations supplement the California Consumer Privacy Act, and the CPRA…

On Friday, July 14, the California Privacy Protection Agency (“CPPA”) Board held a public meeting to address a broad, fourteen-point agenda that ranged from updates on the Agency’s budget to the status of ongoing rulemaking to enforcement. On the issue of enforcement, the Agency’s new Deputy Director of Enforcement, Mr.…

A new year is upon us, and with it will come major changes in how organizations handle personal data. Of course, this is not the first time we’ve seen significant changes: 2018 brought enormous changes to Europe as the General Data Protection Regulation (GDPR) became effective; 2020 brought major changes to the U.S. as…

The European Union is (finally) coming to grips with the dysfunctionalities of its most famous tech law of all: the General Data Protection Regulation. The European Commission will propose a new law before the summer that’s aimed at improving how EU countries’ privacy regulators enforce the GDPR, a newly published page on its website showed.…