Generate your Privacy Policy for free, Get started now →
Virginia's Consumer Data Protection Act caps civil penalties at $7,500 per violation and covers any business controlling data on 100,000 or more Virginia consumers, per Code of Virginia section 59.1-584. See how VCDPA's cure period, threshold, and 2026 scope expansions compare to the three other states that followed Virginia into effect in 2023.
Read article
Connecticut's CTDPA caps civil penalties at $5,000 per willful violation under CUTPA, and the Attorney General's office logged 1,830 data breach notifications in 2025, per the OAG's own 2025 CTDPA Enforcement Report. See the law's first dedicated settlement, the full tally of privacy-related payments to the state, and how its scope expands in 2026.
Read article
FTC Chairman Andrew Ferguson says the agency is about to bring more privacy cases than it can easily track in the second half of 2026. Four enforcement actions since March, against Match/OkCupid, Kochava, Amazon and RentGrow, show what is already driving the surge.
Read article