Version Notes
Overview of changes in the Second Edition (major changes bolded):
-
Added a discussion of the Take it Down Act in Chapter 2.
-
Added a note on actual privacy expectations following the Jones case in Chapter 3.
-
Added a lengthy note on , 2025 WL 447498 (E.D.N.Y. Dec. 2, 2024) at the end of Chapter 4.
-
Added a note on Paul v. Davis following Reporter’s Committee in Chapter 6.
-
Shortened Dinh Tran v. Department of Treasury, 351 F.Supp.3d 130 (D.D.C. 2019) somewhat.
-
Added a note on reidentification of HIPAA data in Chapter 7.
-
Added a note on the use of My Health My Data in privacy class actions in Chapter 7.
-
Expanded the definition of “financial institutions” under GLBA in Chapter 8.
-
Added a note reviewing an empirical paper on the effects of in Chapter 8.
-
Added details of the Epic Games settlement in Chapter 9.
-
Added a note with the holding of to Chapter 9.
-
Added a note on device identifiers under the VPPA in Chapter 9.
-
Added Gardner v. Me-TV National Limited Partnership, 132 F.4th 1022 (7th Cir. 2025) as a VPPA case in Chapter 9.
-
Added a discussion of GPC to the CCPA section in Chapter 9.
-
Removed Doordash as a CCPA case in Chapter 9.
-
Added , California Privacy Protection Agency Board (Mar. 7, 2025) as a CCPA case in Chapter 9.
-
Added a discussion of dark patterns to the CCPA section in Chapter 9.
-
Added a discussion of the California Delete Act to Chapter 9.
-
Updated the Connecticut privacy law excerpts to reflect the June 2025 amendments.
-
Fixed paragraph numbering in the Von Hannover case in Chapter 12.
In short, this edition is mostly California’s fault. But I’m grateful for the chance to clean up the small stuff.
Various wording and typographical changes were made throughout. Also line spacing was adjusted, which had the effect of substantially shortening the document.
​
Prior Editions can be downloaded here: