The California Consumer Privacy Act provided plaintiffs with a private right of action to pursue statutory damages following data security breaches that impact certain sensitive categories of information and are caused by a business’s failure to institute reasonable and appropriate security. Although the CCPA does not permit private suits with respect to alleged violations of

In a unanimous decision released on April 22, 2021, the U.S. Supreme Court upended decades of lower court precedent by finding that Section 13(b) of the Federal Trade Commission Act (FTC Act) does not authorize the FTC to seek, or a court to award, equitable monetary relief such as restitution or disgorgement. Instead, in AMG