PrivacySignal
Analysis ← Front page
Enforcement

CVS settles data privacy lawsuit for $20.5M: See if you qualify for a payout

firstcoastnews.com · · International · Enforcement

CVS has agreed to a $20.5 million settlement to resolve a data privacy lawsuit. Affected individuals may be eligible to file a claim for a share of the settlement fund.

Why this matters: When a company settles a privacy lawsuit for $20.5 million, that is not an admission of nothing. That is a company deciding it is cheaper to pay than to fight. The people whose data was involved often get a small check. CVS keeps operating the same way. If you think you were affected, it is worth checking whether you qualify — but the bigger point is that settlements like this rarely change how companies handle your data. They just put a price on what happened.

Who should care: Lawyers · Privacy officers · Compliance · General readers · Policy

#enforcement#privacy
Read the original at firstcoastnews.com → Browse the archive

This summary is AI-assisted and may contain errors. It is an original briefing to help you gauge significance quickly — not a reproduction of the source. Always read the linked original before relying on it. See our methodology.

Analysis

All analysis →

Weekly Editorial Analysis from Experts and Editors

The Attacker Did Not Need to Sleep

Spain received its first reported personal-data breach carried out by an AI agent. The techniques were familiar. The speed and autonomy were not.

· 4 min read Read →

Related stories

Enforcement
EDPB · · EU

The Irish Data Protection Commission fines Google 403 000 000 EUR following Inquiry into Google’s processing of location data

Ireland's Data Protection Commission fined Google €403 million on September 21, 2026, following an inquiry into how the company handled location data. The decision included a compliance order and found violations of GDPR rules on lawful processing, data principles, and transparency obligations.

Who should care: Lawyers · Privacy officers · Compliance · AI governance · General readers · Policy

#enforcement#gdpr#regulation#privacy Read original →
Enforcement
The Guardian — Tech · · International

New UK agency to fight ‘information warfare’ from likes of Russia, Burnham tells UN

The UK government is establishing a National Centre for Information Defence to detect and counter foreign disinformation and AI-generated deepfakes, particularly from hostile states such as Russia. The centre will bring together intelligence agencies, law enforcement, and social media companies.

Who should care: Lawyers · Privacy officers · Compliance · General readers · AI governance · Policy

#enforcement#ai Read original →
Enforcement
BBC — Tech · · International

US criticises Australia's proposed algorithm opt-out laws as 'censorship'

Australia is considering laws that would require tech companies to give users the ability to opt out of algorithmic content ranking, with fines for firms that fail to comply. The United States has pushed back on the proposal, framing it as censorship.

Who should care: Lawyers · Privacy officers · Compliance · AI governance · Administrators · General readers · Policy

#enforcement#ai-governance#ai#privacy Read original →
Enforcement
EDPB · · EU

The Spanish DPA fined Securitas Direct 100 000 EUR for making the exercise of data subject rights more difficult by directing individuals to a chargeable telephone number

Spain's data protection authority fined Securitas Direct €100,000 after the security company directed people to a paid-rate phone number to exercise their GDPR rights. A consumer association brought the complaint, citing video surveillance notices that routed access and objection requests through a chargeable 902 number.

Who should care: Lawyers · Privacy officers · Compliance · AI governance · Cybersecurity · General readers · Policy

#enforcement#gdpr#regulation#surveillance#privacy Read original →