Texas AG Ken Paxton has announced an investigation into Carnival Corporation following an April 2026 data breach that allegedly compromised 6 million people’s personal information, including over 800,000 Texans. On April 14, 2026, Carnival’s information technology security team identified unauthorized activity involving an employee account and determined that techniques were used to deceive an employee…

Read More

California AG Rob Bonta led a coalition of 18 AGs and state privacy and consumer-protection authorities urging Congress to reject the SECURE Data Act, arguing the proposed federal privacy bill would preempt stronger state privacy laws and leave consumers with fewer protections. In the letter, the coalition warns that the bill would make it harder…

Read More

The FTC announced proposed consent orders with CMG Media Corporation d/b/a Cox Media Group, MindSift LLC, and 1010 Digital Works LLC to resolve allegations that the companies deceptively marketed an “Active Listening” ad-targeting service to small businesses.

Read More

Oklahoma AG Gentner Drummond sued Temu and related entities for allegedly violating the Oklahoma Consumer Protection Act through undisclosed data collection and deceptive retail practices. In the petition, the AG’s office alleges that the Temu app collects sensitive user data beyond what is necessary and without adequate disclosure or meaningful consumer consent, and uses evasion…

Read More

California AG Rob Bonta, with several California district attorneys and investigative support from the California Privacy Protection Agency, reached a $12.75 million settlement with General Motors and OnStar resolving allegations that the companies violated the various state consumer protection laws by selling consumers’ driving and location data without adequate notice or consent.

Read More