On December 2, Greystar agreed to a $24 million settlement over allegations it misled renters by omitting mandatory fees from advertised monthly rents. This settlement underscores the FTC’s continuing scrutiny of “junk fees” and signals that the FTC may pursue rulemaking requiring greater transparency in rental fee advertising.
Continue Reading Greystar’s $24 Million Settlement Signals FTC Crackdown on Hidden Rental FeeCalifornia AG Announces $1.4 Million Settlement with Mobile App Gaming Developer Over CCPA Violations
Posted in Privacy
On November 21, 2025, California Attorney General Rob Bonta announced a $1.4 million settlement with Jam City, Inc. (“Jam City”), a mobile app gaming company, for alleged violations of the California Consumer Privacy Act (“CCPA”) and Unfair Competition Law (“UCL”). The Jam City settlement marks Attorney General Bonta’s sixth settlement obtained under the CCPA and reflects a continued focus on how businesses present opt-out rights mechanisms to California consumers, including minors.
Continue Reading California AG Announces $1.4 Million Settlement with Mobile App Gaming Developer Over CCPA ViolationsNew Sanctions Authorities in the FY 2026 NDAA
After passing the House the preceding week, the National Defense Authorization Act for Fiscal Year 2026 (FY 2026 NDAA) passed the Senate on December 17 by a vote of 77-20 and was signed into law by President Trump the following day. As is frequently the case, this annual “must pass”…
Continue Reading New Sanctions Authorities in the FY 2026 NDAAFrench CNIL Imposes €1M GDPR Fine on Israeli Ad Tech Firm
On December 11, 2025, the CNIL fined an Israeli company €1 million for failing to comply with its GDPR obligations after providing personalized advertising services to an EU music-streaming platform. The service helped the platform to personalize and optimize marketing campaigns to promote its streaming services.
The CNIL held that the GDPR applied to the non-EU processor under Article 3(2), on the basis that it had monitored the behavior of EU users by creating audience segments based on demographics and listening habits, on behalf of the controller.
Continue Reading French CNIL Imposes €1M GDPR Fine on Israeli Ad Tech FirmEuropean Commission Launches Consultations on the EU AI Act’s Copyright Provisions and AI Regulatory Sandboxes
By Marianna Drake, Fredericka Argent & Lisa Peets on
Posted in Artificial Intelligence (AI), Technology
The European Commission (“Commission”) recently launched two stakeholder consultations under the EU AI Act. The first (see here), closing on 9 January 2026, relates to the copyright-related obligations for General Purpose AI (“GPAI”) providers under the AI Act and GPAI Code of Practice. The second (see here)…
Continue Reading European Commission Launches Consultations on the EU AI Act’s Copyright Provisions and AI Regulatory SandboxesUK Employment Rights Act Finally Becomes Law
On December 18, 2025, the UK Government passed the Employment Rights Bill, which will now be referred to as the Employment Rights Act 2025 (the “Act“). This represents the “biggest upgrade in employment rights for a generation” and introduces a wide-ranging suite of reforms to be…
Continue Reading UK Employment Rights Act Finally Becomes LawIndiana Attorney General Releases Data Consumer Bill of Rights
By Lindsey Tonsager, Jayne Ponder & Rosie Moss on
Posted in Privacy
In advance of the Indiana Consumer Data Protection Act’s (“Act”) effective date on January 1, 2026, the Indiana Attorney General released a Data Consumer Bill of Rights (“Bill of Rights”) that summarizes the rights created in the Act.
Continue Reading Indiana Attorney General Releases Data Consumer Bill of RightsEuropean Biotech Act: Potential new extension for supplementary protection certificates (SPCs) for ATMPs and biotechnology medicines
This is one in a series of Inside EU Life Sciences blogs on the European Commission’s (“Commission’s”) latest proposal for a European Biotech Act.
On 16 December 2025, the Commission announced a proposal to introduce a new draft Regulation (“Proposed Regulation”) aimed at boosting the EU’s competitiveness in the biotech…
Continue Reading European Biotech Act: Potential new extension for supplementary protection certificates (SPCs) for ATMPs and biotechnology medicinesInfluencer Marketing – German court sets new Guardrails for Pharmaceutical Advertising on Social Media
In a landmark judgement, the Higher Regional Court of Cologne has set new standards for pharmaceutical advertising with influencers. First, a key point from the decision is that the court qualifies paid influencers as agents of the drug company with respective consequences for the company (discussed below). Second, the court treats promotional social media reels/videos like TV ads which leads to subsequent disclosure obligations. Third, influencers can regularly qualify as “known persons” so that the restrictions under German law for drug advertising with known/famous persons can apply. Continue reading for more details on the case and its implications for pharmaceutical companies.
Continue Reading Influencer Marketing – German court sets new Guardrails for Pharmaceutical Advertising on Social MediaCJEU Clarifies Responsibilities Of Online Marketplace Operators
By Dan Cooper, Kristof Van Quathem & Alix Bertrand on
On December 2, 2025, the Court of Justice of the European Union (“CJEU”) issued a decision clarifying the obligations of online marketplace operators with regard to content posted on their platform, where such content includes personal data. This blogpost provides an overview of the decision and its key takeaways.
Continue Reading CJEU Clarifies Responsibilities Of Online Marketplace Operators