Josh Stevens

November 17, 2025
FTC’s National Do Not Call Registry Back Online Following Government Shutdown

On November 13, 2025, the federal government shutdown ended when President Trump signed a funding bill to reopen federal agencies. As a result, the FTC’s National Do Not Call Registry, which

October 31, 2025
Maryland’s MODPA: A New Standard for Data Privacy—and Data Minimization

On October 1, 2025, the Maryland Online Data Privacy Act (MODPA) became effective, joining the growing list of states with comprehensive consumer data privacy laws. With enforcement beginning April 1,

October 23, 2025
California’s Privacy Law Is “A Total Mess”: What the ERC Case Reveals About CIPA’s Outdated Language

In a sharply worded opinion, U.S. District Judge Vince Chhabria recently granted summary judgment in favor of the Eating Recovery Center (ERC) in a privacy lawsuit that has reignited debate

October 16, 2025
From GPC to AB 566: California’s Next Big Move in Data Privacy

Governor Gavin Newsom recently signed Assembly Bill 566, also known as the California Opt Me Out Act, into law. This legislation marks a significant shift in how consumers exercise their

October 6, 2025
The $1.35M Wake-Up Call: CPPA Signals a New Era of Enforcement

On September 30, the California Privacy Protection Agency (CPPA) issued a landmark $1.35 million enforcement order against Tractor Supply Company for violations of the California Consumer Privacy Act (CCPA). While

September 10, 2025
One Year into Oregon’s Consumer Privacy Act: Insights, Updates, and What Comes Next

On August 29, 2025, Oregon Attorney General Dan Rayfield released the first annual enforcement report detailing the state’s activity under the Oregon Consumer Privacy Act (OCPA). The findings underscore the

August 22, 2025
The FTC’s $145M Blitz on Deceptive Lead Gen Practices

In a recent significant enforcement move, the Federal Trade Commission (FTC) has reached settlements totaling $145 million with two major players in the lead generation and health insurance marketing space: Assurance IQ,

August 20, 2025
FCC Cracks Down on VSPs: Nearly 200 Voice Providers Blocked from U.S. Networks

On August 6, 2025, the FCC’s Enforcement Bureau issued a sweeping order, removing 185 voice service providers from the Robocall Mitigation Database (RMD), effectively banning them from U.S. networks. This decisive

July 31, 2025
Subject Line Liability: The Rising Risk of Deceptive Email Marketing

If your business uses email marketing to reach consumers and you’re compliance-minded, you’re no doubt paying attention to the content within those emails. But crafting the best subject line, one that’s compelling

June 16, 2025
New Jersey Proposes Enhanced Data Privacy Regulations

The New Jersey Division of Consumer Affairs recently released a set of proposed regulations under the New Jersey Data Privacy Act. These rules mark the third robust state-level regulatory framework implementing a