A state consumer privacy bill failed to garner support in Illinois. The Illinois state House of Representatives adjourned its 2023 session without passing HB 3910, the Consumer Privacy Act.

On February 17th, Illinois ruled that under the Biometric Information Privacy Act (BIPA) companies violate the state's biometric privacy law each time they misuse a person's private information, not just the first time. This ruling could subject businesses to billions of dollars in penalties.

For more information about biometric data, read the Han Santos Biometric Data terms and reference page.

During President Biden’s State of the Union address, he highlighted the need for bipartisan legislation on the collection of minors' and others' personal data.

The President also focused on the need for protections against targeted advertising towards children and for social media platform transparency for US data subjects while highlighting the bipartisan opportunity for legislative action.

The Federal Trade Commission filed a proposed order against GoodRx, a U.S. healthcare company, for violating the Health Breach Notification Rule and the FTC Act. The proposed order prohibits GoodRx from disclosing user health data for advertising purposes and requires payment of a $1.5 million civil penalty.

This case signals an increase in the FTC's use of its unfairness authority in privacy cases, with some important takeaways for privacy programs that handle health-related data.

U.S. District Judge Vince Chhabria in San Francisco ordered Meta, Facebook’s parent company, and the law firm Gibson Dunn to pay about $925,000 in a data privacy lawsuit over the company’s sharing of user information with third-parties.

Judge Chhabria said Meta and Gibson Dunn attempted to make the litigation unnecessarily difficult and expensive for the plaintiffs. The court had ordered Facebook to turn over data it had collected on the plaintiffs in the case, regardless of whether it had been shared.