On June 30, 2026, New Jersey quietly enacted one of the most onerous and sweeping data broker regimes in the nation. The law, A5328 (P.L.2026, c.25), requires entities that qualify as “data brokers”—or entities that sell...

One year after the TAKE IT DOWN Act (TIDA) became law, the statute’s notice-and-takedown obligations are now in effect. Ahead of the May 19 effective date, the Federal Trade Commission (FTC) made clear that it...

How did it come to this? Last year you got a new cookie consent management platform (CMP), and you worked with your web team to implement it. You even took a conservative approach and tried...

On 15 April 2026, European Commission President Ursula von der Leyen and Executive Vice-President Henna Virkkunen announced that the EU’s long-anticipated age-verification app is now “technically ready”. Positioned as a “gold standard” to protect minors...

The UK has taken another step in moving online safety compliance beyond content moderation into formal law enforcement reporting. Since 7 April 2026, regulated user-to-user (‘U2U’) services covered by the UK’s Online Safety Act (‘OSA’)...

Many businesses have opted to deploy website cookie banners in response to the barrage of litigation under the California Invasion of Privacy Act (“CIPA”). That same mitigation measure, however, is increasingly the target of a...