On July 1, 2025, the California Attorney General settled with Healthline for $1.55 million, the highest CCPA-related fine to date, citing failure to limit data purpose and lack of sufficient disclosures under the purpose-limitation principle.
Imagine having complete insight and control over how your personal information is collected, shared, and sold. That’s what the California Consumer Privacy Act (CCPA) brought in 2020. Then came the California Privacy Rights Act (CPRA), effective January 2023, expanding those rights and establishing the California Privacy Protection Agency (CPPA) to enforce them. These laws together position California at the forefront of privacy regulation in the United States.
On August 5, 2025, the Federal Deposit Insurance Corporation (FDIC) issued FIL-39-2025 to state that an FDIC-supervised institution can use pre-populated customer information to satisfy the requirements of the Customer Identification Program Rule, implementing part of the USA PATRIOT Act (CIP rule).
As part of the Federal Reserve Board’s Outlook Live Webinar series, on July 17, 2025, examiners from the Minneapolis and Chicago Federal Reserve Banks hosted a webinar to discuss the regulatory requirements related to adverse action notifications under the Equal Credit Opportunity Act (ECOA), as implemented by Regulation B, and the Fair Credit Reporting Act (FCRA). We thought the information that was presented would be helpful to our clients and friends who are just getting acquainted with these issues and would be a good refresher for our clients and friends who are longtime practitioners in consumer financial services law.
New analysis from the Federal Trade Commission shows a more than four-fold increase since 2020 in reports from older adults who say they lost $10,000 or more—sometimes their entire life savings—to scammers who impersonate trusted government agencies or businesses to convince consumers to transfer money to protect it, when in reality the scammers want to steal it.
Oregon has passed new legislation that updates the state’s rules surrounding telemarketing practices, including both phone calls and text messages. The Telemarketing Modernization Act (HB 3865) was finalized in July 2025 and introduces expanded definitions and specific restrictions on the timing and frequency of marketing communications.