Josh Stevens

July 1, 2026
A California Court Just Handed Website Operators a Win on CIPA

For the past several years, plaintiffs’ lawyers have been testing the outer limits of California’s Invasion of Privacy Act (CIPA), wielding a statute originally designed to combat telephone wiretapping as

June 22, 2026
Is That Bot in Your Meeting Breaking the Law?

If you’ve been in a virtual meeting lately, you’ve probably seen one: a participant named “Otter.ai” or “Fireflies notetaker” sitting quietly in the corner, recording everything. AI notetaking tools are

February 17, 2026
Disney’s $2.75M CCPA Settlement Sends a Clear Message: Opt-Out Means Everywhere

California has delivered its clearest message yet on what “opt out” actually means under the California Consumer Protection Act (CCPA). In a $2.75 million settlement with the Walt Disney Company—the

February 6, 2026
Unlocking the TCPA’s Do Not Call Safe Harbor

When a TCPA lawsuit arrives, it’s easy for panic to set in. Many businesses feel pressure to settle quickly or rush into litigation just to make the problem go away.

January 2, 2026
TCPA Requirements FAQ
Understand the regulatory requirements of the Telephone Consumer Protection Act (TCPA), Do Not Call Registry, and penalties for noncompliance…
December 17, 2025
Consent-Based Text Campaigns in Texas: Are You Really Exempt?

One of the biggest compliance developments in 2025 was the passage and implementation of Texas Senate Bill 140, which significantly expanded the state’s telephone solicitation statute to cover text message

November 25, 2025
CCPA Enforcement: Lessons from the Sling TV Settlement

California’s Attorney General recently announced a settlement with Sling TV over alleged violations of the California Consumer Privacy Act (CCPA). While the details of this case echo themes we’ve seen

November 17, 2025
FTC’s National Do Not Call Registry Back Online Following Government Shutdown

On November 13, 2025, the federal government shutdown ended when President Trump signed a funding bill to reopen federal agencies. As a result, the FTC’s National Do Not Call Registry, which

October 31, 2025
Maryland’s MODPA: A New Standard for Data Privacy—and Data Minimization

On October 1, 2025, the Maryland Online Data Privacy Act (MODPA) became effective, joining the growing list of states with comprehensive consumer data privacy laws. With enforcement beginning April 1,

October 23, 2025
California’s Privacy Law Is “A Total Mess”: What the ERC Case Reveals About CIPA’s Outdated Language

In a sharply worded opinion, U.S. District Judge Vince Chhabria recently granted summary judgment in favor of the Eating Recovery Center (ERC) in a privacy lawsuit that has reignited debate