Melanie Ptok reports: A Luxembourg court has ordered Amazon to pay a €746 million fine imposed for data protection breaches by the national data watchdog, throwing out an appeal brought by the online retail giant. The administrative court dismissed the appeal against the penalty in a hearing on Tuesday, still the second-largest ever imposed since…
CPPA Advances Proposed Regulations for Data Broker Deletion Mechanism
Hunton Andrews Kurth writes: On March 7, 2025, the California Privacy Protection Agency (“CPPA”) voted to authorize the agency to advance proposed data broker regulations concerning the Delete Request and Opt-Out Platform (“DROP”) to formal rulemaking. The CPPA’s proposed DROP regulations are part of the agency’s efforts to implement California’s Delete Act. The Delete Act requires the CPPA to establish…
The differences between non-disclosure, exfiltration and notice – a court’s view
David Kessler and Sue Ross write: Although there is scant case law on the question, it is generally accepted that it is not a violation of one’s duty not to disclose information if it is stolen from you. Put another way, disclosure is an affirmative act, and, absent an affirmative duty to protect information from…
Anti-Musk Hackers Share Names and Addresses of Tesla Owners
Tom Sanders reports: A website called “Dogequest” has posted a searchable map with the alleged names, addresses, location and phone numbers of every single Tesla owner in the United States, in an attempt to shame them into selling their cars. The website also shows the location of every Tesla showroom, charging station and the known addresses of Department of Government…