Consumer Privacy

The Federal Trade Commission announced on July 2, 2026, that travel-booking app Hopper has agreed to pay $35 million to resolve allegations that it charged consumers hidden fees despite marketing itself as a “no hidden fees” service. The settlement is the latest in a string of federal actions targeting so-called “junk fees” — charges that are omitted or buried until late in a transaction — and reinforces a regulatory throughline that now spans travel, ticketing, lodging, and auto sales.

On June 16, 2026, Vermont enacted VDPOSA, enhancing consumer privacy rights. Effective January 1, 2028, it mandates compliance from businesses handling significant consumer data, necessitating privacy program evaluations.

On March 20, 2026, Oklahoma became the 20th state to pass a comprehensive consumer privacy statute. The Oklahoma Consumer Data Privacy Act (“OKCDPA”) takes effect January 1, 2027.

With a growing number of states enacting comprehensive privacy laws year after year, California’s reputation and influence as a regulatory trendsetter continues to accelerate. But the most significant recent development is not just the spread of privacy legislation—it is the spread of privacy enforcement.