Loading…

Compliance News

Compliance News & Updates

Daily AI-analyzed compliance news covering HIPAA breaches, GDPR fines, PCI DSS updates, SOC 2 changes, and regulatory developments across every major framework.

All HIPAA GDPR SOC 2 ISO 27001 PCI DSS CCPA/CPRA NIST CSF

Navigating AI and Privacy in the Workplace: CCPA/CPRA Compliance and Employment Decisions

A JD Supra webinar on October 8, 2026, examines how employers using AI for hiring and employment decisions must navigate CCPA/CPRA obligations and rising privacy claims. The session addresses automated decision-making transparency, employee data rights, and litigation risks under California privacy law.

Google NewsOct 8, 2026

Fairchild Medical Center and Boone Health Settle Meta Pixel HIPAA Lawsuits

Fairchild Medical Center and Boone Health have agreed to settle class action lawsuits alleging that Meta Pixel tracking code on their patient portals disclosed protected health information to third parties without consent. The settlements underscore the ongoing HIPAA enforcement and litigation risk tied to website tracking technologies on healthcare platforms.

Stay compliant with confidence

PoliWriter generates all the policies and documentation you need for compliance, customized to your organization. AI-powered, audit-ready, hours not months.

Get Started Free

HIPAA

NIST CSF

CCPA/CPRA

Google NewsOct 2, 2026

Saber Healthcare & Buchalter Data Breaches: HIPAA Compliance Lessons

Saber Healthcare and law firm Buchalter both announced data breaches in October 2026, exposing protected health information and personal data. The incidents highlight rising third-party risk, notification obligations, and enforcement exposure under HIPAA and state laws. Affected individuals should monitor accounts and review breach notices carefully.

Google NewsOct 1, 2026

Astrana Health Discloses Social Engineering Incident to SEC: HIPAA Compliance Lessons

Astrana Health filed a notice with the SEC regarding a social engineering incident that may have compromised protected health information. The disclosure highlights growing regulatory scrutiny of cybersecurity events in healthcare. Organizations should review their incident response and employee training programs to mitigate social engineering risks.

Google NewsSep 29, 2026

Aristocrat Interactive CXS Achieves ISO/IEC 27001:2022 Certification Across All Global Offices

Aristocrat Interactive's Customer Experience Solutions (CXS) division has secured ISO/IEC 27001:2022 certification across all global offices. The certification validates the company's information security management system for gaming technology operations. This milestone strengthens Aristocrat's compliance posture for global gaming regulators and enterprise clients.

Google NewsSep 29, 2026

PrivacyHawk Achieves SOC 2 Type II Compliance Milestone

PrivacyHawk has successfully completed its SOC 2 Type II audit covering security, confidentiality, and privacy Trust Services Criteria. The audit validates the effectiveness of PrivacyHawk's controls over a sustained period, providing assurance to enterprise customers relying on the platform for data privacy management.

Google NewsSep 26, 2026

Labcorp Pays $2.3 Million in Multistate HIPAA Data Breach Settlement: Key Compliance Lessons

Labcorp has agreed to a $2.3 million multistate settlement following an investigation into a HIPAA data breach that exposed patient information. The agreement resolves allegations of insufficient security safeguards and requires Labcorp to strengthen its data protection program.

Google NewsSep 25, 2026

CVS Health and Criteo Agree to $20.5 Million Settlement Over Website Tracking Litigation

CVS Health and advertising technology company Criteo have agreed to pay $20.5 million to resolve class action litigation alleging that tracking pixels on CVS websites unlawfully disclosed patients' health information to third parties, including search terms and medication pages viewed, in potential violation of HIPAA and state privacy laws.

Google NewsSep 24, 2026

Psynth Achieves SOC 2 Type II Attestation for Psychological Assessment AI

Psynth has earned SOC 2 Type II attestation for its AI-powered psychological assessment platform, confirming its security, availability, and confidentiality controls over an extended audit period. The certification applies to organizations using AI for mental health screening and psychological evaluations.

Google NewsSep 24, 2026

California Moves to Regulate AI in Mental Health Treatment: What HIPAA-Covered Entities Must Know

California regulators are advancing AI guardrails for mental health treatment, requiring transparency, human oversight, and patient consent. HIPAA-covered providers and AI vendors face new compliance obligations for AI-driven therapy, triage, and documentation tools.

Google NewsSep 23, 2026

Google Fined €403 Million Over Location Data Tracking Violations Under GDPR

European regulators fined Google €403 million in September 2026 for unlawfully tracking users' location data without valid consent. The ruling affects Android users and advertisers across the EU and signals stricter GDPR enforcement for data-driven business models.

Google NewsSep 22, 2026

Identity Authentication Services: Essential Compliance Considerations for 2026

Identity authentication services are becoming critical for SOC 2 and other compliance frameworks as organizations strengthen security controls. This comprehensive guide examines the top 8 providers and essential compliance considerations that organizations must address when implementing identity authentication solutions.

Google NewsMay 26, 2026

GM Settles Record-Breaking $12.75M CCPA Fine for Privacy Violations

General Motors agreed to pay $12.75 million to settle California privacy allegations, marking the largest CCPA fine ever imposed. The settlement addresses violations of the California Consumer Privacy Act related to data collection and consumer rights practices. This unprecedented penalty signals California's aggressive enforcement of privacy regulations and sets new expectations for corporate compliance.

Google NewsMay 23, 2026

GM Faces $12+ Million California Privacy Settlement Over Driver Data Collection

General Motors agreed to pay over $12 million to settle California privacy violations related to the unauthorized collection and use of driver data. The settlement highlights critical CCPA compliance requirements for automotive companies collecting consumer data through connected vehicle technologies.

Google NewsMay 9, 2026

CCPA Encyclopedia: Your Complete Guide to California Consumer Privacy Act Compliance in 2026

Ad Age has released an encyclopedia-style guide to the California Consumer Privacy Act (CCPA), providing comprehensive coverage of privacy compliance requirements. This resource addresses the evolving CCPA landscape and its impact on businesses handling California consumer data, offering essential guidance for organizations navigating complex privacy obligations in 2026.

Google NewsApr 15, 2026

Stransact and Doftwerks Achieve ISO 27001 Certification for Enhanced Data Protection

Stransact and Doftwerks have successfully secured ISO 27001 certification, demonstrating their commitment to international data protection standards. This certification validates their information security management systems and positions both organizations as trusted partners for data-sensitive operations across various industries.

Google NewsApr 8, 2026

California Introduces Higher CCPA Fines and Age Assurance Requirements as Multi-State Enforcement Intensifies

California is advancing legislation to increase CCPA penalties and implement age verification requirements for data processing of minors. The state joins a growing trend of enhanced privacy enforcement as other states prepare to ramp up their own compliance oversight and penalty structures throughout 2026.

Google NewsApr 2, 2026

Youth Sports Media Company Faces $1.10 Million CCPA Enforcement Fine

A youth sports media company has agreed to pay $1.10 million in a California Consumer Privacy Act (CCPA) enforcement action, marking a significant penalty in the sports media sector. This enforcement highlights the growing scrutiny of data privacy practices in youth-focused digital platforms and underscores the importance of CCPA compliance for organizations handling minor's personal information.

Google NewsMar 20, 2026

Ford Settlement Reinforces CCPA Requirement: Consumer Opt-Outs Must Be Simple and Accessible

Ford's recent settlement under the California Consumer Privacy Act (CCPA) highlights a critical compliance requirement that opt-out mechanisms for data sales must be easy for consumers to use. The case demonstrates how complex or difficult-to-find opt-out processes can lead to enforcement action and financial penalties.

Google NewsMar 20, 2026