California’s Senate Bill 690 aims to limit private claims under the California Invasion of Privacy Act related to website technologies, providing relief to businesses facing lawsuits for common practices. However, traditional wiretapping claims remain unaffected and risks persist nationwide.
On August 19, 2026, a Connecticut dealership settled for $4 million over deceptive pricing and unauthorized fees. This case highlights individual liability risks for dealership owners and management.
The California Consumer Privacy Act (CCPA) has introduced a dedicated enforcement agency, the CPPA, which proactively conducts audits on businesses for compliance. This marks a shift in privacy regulation, necessitating continuous compliance efforts from dealerships and other businesses, beyond mere reaction to complaints.
Dealerships are facing an increasing number of lawsuits and demand letters alleging violations of CIPA due to website tracking tools. These claims highlight the evolving legal risks surrounding website privacy, emphasizing the need for compliance and proactive management strategies.
Another Surge in Website Tracking Tool Claims Targets Auto Dealers Read Post »
On June 16, 2026, Vermont enacted VDPOSA, enhancing consumer privacy rights. Effective January 1, 2028, it mandates compliance from businesses handling significant consumer data, necessitating privacy program evaluations.
Vermont Enacts Comprehensive Privacy Law: What Auto Dealers Need to Know Read Post »
On March 20, 2026, Oklahoma became the 20th state to pass a comprehensive consumer privacy statute. The Oklahoma Consumer Data Privacy Act (“OKCDPA”) takes effect January 1, 2027.
Oklahoma Becomes 20th State With Comprehensive Consumer Privacy Law Read Post »
The FTC announced in December 2025 that Avast would pay more than $15.3 million to be distributed to over 103,000 consumers affected by Avast’s alleged deceptive and unfair practices.
Alaska Attorney General Stephen Cox announced a sweeping settlement with a prominent dealer group resolving allegations that multiple Alaska dealerships charged document fees that were not included in advertised vehicle prices.
New privacy laws in Kentucky, Indiana, Rhode Island, and updated rules in Oregon and California take effect on January 1, 2026.
State Privacy Law Deadline: January 1, 2026 Read Post »
