PrivacySignal
Enforcement

Consumer Reports: Companies Make It Hard to Access Your Personal Data Under State Privacy Laws, CR Finds

EPIC · · US Federal · Enforcement

A Consumer Reports investigation found that companies frequently obstruct consumers trying to exercise their personal data rights under state privacy laws. Experts note that fines and warning letters may do little to change behavior at large data companies, which reportedly treat noncompliance as a manageable business cost.

Why this matters: State privacy laws gave you rights on paper. This shows those rights are hard to use in practice. If a company can just absorb the fine and ignore your data request, the law mostly protects the company's reputation, not you. The enforcement gap here is not an accident. When penalties are small and predictable, noncompliance becomes a line item. That is not a technical problem. It is a political choice about whether privacy rights have any teeth.

Who should care: Lawyers · Privacy officers · Compliance · General readers · Policy

This summary is AI-assisted and may contain errors. It is an original briefing to help you gauge significance quickly — not a reproduction of the source. Always read the linked original before relying on it. See our methodology.

Analysis

All analysis →

Weekly Editorial Analysis from Experts and Editors

The Attacker Did Not Need to Sleep

Spain received its first reported personal-data breach carried out by an AI agent. The techniques were familiar. The speed and autonomy were not.

· 4 min read Read →

Related stories

Enforcement
BBC — Tech · · International

US criticises Australia's proposed algorithm opt-out laws as 'censorship'

Australia is considering laws that would require tech companies to give users the ability to opt out of algorithmic content ranking, with fines for firms that fail to comply. The United States has pushed back on the proposal, framing it as censorship.

Who should care: Lawyers · Privacy officers · Compliance · AI governance · Administrators · General readers · Policy

#enforcement#ai-governance#ai#privacy Read original →
Enforcement
EDPB · · EU

The Spanish DPA fined Securitas Direct 100 000 EUR for making the exercise of data subject rights more difficult by directing individuals to a chargeable telephone number

Spain's data protection authority fined Securitas Direct €100,000 after the security company directed people to a paid-rate phone number to exercise their GDPR rights. A consumer association brought the complaint, citing video surveillance notices that routed access and objection requests through a chargeable 902 number.

Who should care: Lawyers · Privacy officers · Compliance · AI governance · Cybersecurity · General readers · Policy

#enforcement#gdpr#regulation#surveillance#privacy Read original →
Enforcement
T tech-insider.org · · International

Google Fined €403M Over Location Data Privacy [2026]

A European regulator has fined Google €403 million over violations related to how the company handled user location data. The penalty reflects ongoing enforcement action against the tech giant's data collection practices under European privacy law.

Who should care: Lawyers · Privacy officers · Compliance · General readers · Policy

#enforcement#privacy Read original →
Enforcement
G Gizmodo · · International

This Unregistered Data Broker Holds 54 Million Mobile Numbers: California's Fine Won't Erase Yours

A data broker operating without registering under California law holds approximately 54 million mobile phone numbers, according to reporting by Gizmodo. California has issued a fine against the company, but the penalty does not require the broker to delete the data it collected.

Who should care: Lawyers · Privacy officers · Compliance · General readers · Policy

#enforcement#privacy Read original →