Sign in Subscribe

Regulatory Enforcement

Regulatory Enforcement is a category used by The De La Torre Review for analysis of enforcement actions by privacy, consumer protection, data protection, and AI regulators in the U.S. and EU. It covers agency investigations, complaints, administrative actions, consent orders, fines, penalties, and regulatory settlements, highlighting enforcement priorities and practical compliance lessons. Court decisions are covered separately under the Case Analysis tag.

In the Matter of Tractor Supply Company

In the Matter of Tractor Supply Company

California's first major CCPA enforcement action against Tractor Supply signals a new era of operational privacy compliance. This article examines the CPPA's findings, the extension of CCPA obligations to job applicants, and the practical lessons for businesses.

California v. Delta Air Lines: Why a Website Privacy Policy May Not Cover a Mobile App

California v. Delta Air Lines: Why a Website Privacy Policy May Not Cover a Mobile App

California’s lawsuit against Delta Airlines shows why mobile apps need privacy policies that clearly address their data practices—and how federal preemption can limit state enforcement even when an app allegedly fails to comply with CalOPPA.

When “Aggregated” Isn’t Anonymous: The New York Attorney General Pushes the Boundaries of App Data Disclosures

When “Aggregated” Isn’t Anonymous: The New York Attorney General Pushes the Boundaries of App Data Disclosures

The New York Attorney General’s Matis case shows that “aggregated” data is not necessarily anonymous. If a third party can de-aggregate and re-identify individuals, the sharing should be disclosed—and contracts should expressly prohibit re-identification.

Case Study: The WhatsApp Acquisition & Facebook Privacy Promises.

Case Study: The WhatsApp Acquisition & Facebook Privacy Promises.

What happens to privacy promises after a merger? Using Facebook's acquisition of WhatsApp as a case study, this article examines FTC enforcement, consent requirements, and why companies must honor existing privacy commitments when integrating user data.