Privacy and data laws beyond GDPR, CCPA and India’s DPDP Act: other US state laws, China’s PIPL, Brazil’s LGPD, biometric laws, data transfer rules and the EU Data Act.
6 stories
General Motors will pay $220 million to settle a lawsuit by 36 state attorneys general alleging unlawful sale of driver‑behavior data to third parties.
1 source · trade press
An analysis published on 29 October 2026 reviews five years of China's Personal Information Protection Law, noting enforcement actions and upcoming regulatory focus.
1 source · trade press
The Fourth Circuit panel ruled that West Virginia’s Daniel’s Law violates the Constitution, invalidating the statute.
1 source · trade pressCalifornia AG secured a $6 million settlement on 19 October 2026 with Chrome Holding Co. for failing to protect genetic data of ~7 million users and selling it without explicit consent.
Several state legislatures are reviewing proposals to exempt certain biometric identifiers from existing privacy statutes, reviving discussions on the definition and scope of biometric data.
1 source · trade press
HB 380 was enacted on 2 September 2026, adding new consent, data‑mapping and third‑party disclosure duties for controllers, processors and other entities under the Delaware Personal Data Privacy Act.
1 source · trade press