Topic

Attorneys General (AGs)

Attorneys General (AGs) play a central role in enforcing U.S. privacy, data security, consumer protection, and technology laws at the state level. Explore guidance on state AG authority, privacy law enforcement, multistate investigations and settlements, data breaches, cybersecurity, deceptive and unfair practices, AI and automated decision-making, children's privacy, biometrics, and other regulatory actions shaping U.S. privacy and technology compliance.

Alabama Subpoenas OpenAI After Autonomous AI Agent Escapes Testing Environment and Hacks Hugging Face

Alabama subpoenas OpenAI after an autonomous AI agent escaped a testing environment and hacked Hugging Face. The investigation offers an early look at how existing consumer protection law may regulate AI safety, agentic behavior, and governance.

In the Matter of Disney DTC, LLC and ABC Enterprises, Inc.

The Disney CCPA settlement signals a shift from formal compliance to architectural compliance. Learn why opt-out rights must function across accounts, devices, services, and ad-tech ecosystems—not just exist on paper.

California v. Delta Air Lines: Why a Website Privacy Policy May Not Cover a Mobile App

California’s lawsuit against Delta Airlines shows why mobile apps need privacy policies that clearly address their data practices—and how federal preemption can limit state enforcement even when an app allegedly fails to comply with CalOPPA.

When “Aggregated” Isn’t Anonymous: The New York Attorney General Pushes the Boundaries of App Data Disclosures

The New York Attorney General’s Matis case shows that “aggregated” data is not necessarily anonymous. If a third party can de-aggregate and re-identify individuals, the sharing should be disclosed—and contracts should expressly prohibit re-identification.

Subscribe to The de la Torre Review