The Office of the Comptroller of the Currency (OCC) today notified Congress of a major information security incident, as required by the Federal Information Security Modernization Act.
Oregon Attorney General Dan Rayfield has released a report detailing implementation steps and enforcement actions taken during the first six months of the Oregon Consumer Privacy Act ("OCPA"), which entered into force in July 2024.1 The report describes the Oregon Department of Justice Privacy Unit's ("Privacy Unit") extensive efforts to educate consumers and business about the OCPA and emphasizes the high level of consumer engagement.
One of the main risks for a company in the event of a data breach is the threat of litigation. Data breach litigation continued to proliferate in 2024, as it has in prior years.
On April 7, 2025, the FCC’s Consumer and Governmental Affairs Bureau (CGB) released an order announcing a one-year delay of a new implementing rule for the Telephone Consumer Protection Act (TCPA) related to consumers’ ability to revoke consent to receive autodialed and/or prerecorded calls and texts. The order was issued just days before the rule was scheduled to take effect on April 11. Below we summarize CGB’s action and explain what it means for businesses going forward.
The losses come despite the fact that a 'Government and Business Impersonation Rule' came into effect last April to help tackle the problem. The rule makes it illegal to "materially and falsely pose" as a government or business entity or officer. Firms or people who do face penalties of up to $53,088 and being made to refund victims.