Photo of Bryan K. Clark

Bryan Clark is a Shareholder at Vedder Price and a member of the Litigation group in the firm’s Chicago office.

Since our last TCPA update, the biggest development was the Supreme Court’s ruling in McLaughlin Chiropractic Associates, Inc. v. McKesson Corp., which we wrote about here, which established that federal courts are not bound by the FCC’s interpretation of the TCPA.  In the wake of McLaughlin, courts and litigants alike have wrestled with how much deference (if any) to give to the FCC’s many regulations interpreting the TCPA, as parties are now free to challenge agency rulings that they believe are not in line with the law, and district courts can independently interpret the TCPA.  We summarize here the major developments since our last update, listed in alphabetical order by topic area.Continue Reading TCPA Turnstile: Living in a Post-McLaughlin World (TCPA Update Vol. 21)

The recent announcement by the states of California, Colorado and Connecticut that they are working together to carry out a joint investigative sweep has raised eyebrows across the privacy world. Last week, California Attorney General Rob Bonta, the California Privacy Protection Agency (CPPA), and the attorneys general of Colorado and Connecticut announced that they are working together to investigate businesses that refuse to honor consumers’ right to opt out of the sale or sharing of their personal data. The sweep aims especially at companies that are not processing opt-out requests made via the Global Privacy Control tool (GPC), even though it is required by law in each of the three states involved.Continue Reading Cross-State Regulatory Sweep Highlights Growing Legal Risk Around Consumer Data Opt-Outs

When we speak to clients about online privacy issues, they almost always mention the CCPA – California’s Consumer Privacy Act that regulates the collection and use of personal data. But unless they have already faced a lawsuit, pre-suit demand, or arbitration demand, our clients rarely mention the other four-letter California statute that has been the source of significant litigation over the past few years.  And that’s CIPA – California’s Invasion of Privacy Act.Continue Reading CIPA: The “Other” California Privacy Statute You Should Be Worried About

With its recent ruling in McLaughlin Chiropractic Associates, Inc. v. McKesson Corp., 606 U.S. ___ (2025), the U.S. Supreme Court has continued its trend of reining in the power of agencies and giving litigants more avenues to push back against administrative rulemaking.  This will have significant consequences in the context of statutes like the Telephone Consumer Protection Act (“TCPA”), which has steadily increased in scope over the years thanks to the Federal Communications Commission (“FCC”).  More generally, the Court’s decision in McLaughlin Chiropractic, paired with last year’s decision in Loper Bright Enterprises v. Raimondo, 144 S. Ct. 2244 (2024) (which we discussed here), raises significant questions about whether those FCC regulations carry any meaningful weight at this point.Continue Reading SCOTUS Ruling Tips the Scales in Favor of District Courts, Not the FCC, When it Comes to Interpreting TCPA

California is a bellwether for privacy laws, which is why we’ve been watching carefully as recent events suggest that business-friendly interests may be gaining a foothold in what has historically been one of the most restrictive states in the country.  Since the landmark California Consumer Privacy Act (“CCPA”) went into effect in 2020, interest groups, regulators, and politicians have been battling to impact the future of the statute and related regulations.  Meanwhile, creative plaintiffs’ lawyers have turned their focus to the California Invasion of Privacy Act (“CIPA”) to argue that California’s eavesdropping statute also applies to online tracking technologies.  But recent developments related to both the CIPA and the CCPA may give businesses reason for hope.Continue Reading Is California cooling to privacy law run amok?

On April 21, 2025, a Ninth Circuit en banc panel revived (by a 10-1 decision) a putative class action against Shopify, Inc. alleging violations of privacy and data rights via use of cookies. In reversing both the district court and the original Ninth Circuit three-judge panel, the en banc panel adopted an alarmingly expansive view of specific personal jurisdiction over Internet-based companies. We hope Shopify seeks and the U.S. Supreme Court grants certiorari.Continue Reading Opening Door to Universal Jurisdiction in Internet Cases, En Banc Ninth Circuit Finds Specific Personal Jurisdiction Over Shopify

TCPA litigation, like spring flowers, is in full bloom this season. Over the past several months, major decisions have come down related to the FCC’s one-to-one consent rule (which we covered in our last update) as well as other issues that continue to delineate claims under the TCPA. We summarize here developments since our last update, listed in alphabetical order by topic area.Continue Reading TCPA Turnstile: TCPA Litigation Continues to Spring to Life in 2025 (TCPA Update Vol. 20)

As we reach the peak of this year’s Spooky Season, we thought it would be helpful to revisit some of the scariest recent developments in the realm of TCPA litigation and compliance.  The conventional wisdom is that some of the new rules and regulations coming into play around the TCPA are going to lead to even more litigation under the statute.  But at the same time, the Supreme Court’s ruling earlier this year in Loper Bright Enterprises v. Raimondo, 144 S. Ct. 2244 (2024), has called into question much of what we thought we knew about administrative law, leading to ambiguity and uncertainty surrounding the TCPA and many other statutes. 

One-to-One Consent Rule

We’re now just under three months away from the January 27, 2025 effective date of the FCC’s one-to-one consent rule.  Formally adopted in December 2023, the rule requires that prior express written consent be obtained separately for each company seeking to use such consent.  This raises significant concerns about a company’s ability to communicate with not only third-party leads but also many first-party leads, if consent is not adequate under the new rule. 

The TCPA has long required prior express written consent for calls and texts that contain an artificial or prerecorded voice or are sent using an “automatic telephone dialing system.”  But the new rule states, in relevant part, that:Continue Reading TCPA Turnstile: Four Scariest Developments (and a Potential Ray of Light Amid the Fright) (TCPA Update Vol. 19)

A federal court last week sustained a First Amendment challenge to a Utah law aimed at addressing the use of social media platforms by minors, holding that the law’s proponents failed to demonstrate that the law served a compelling interest or was narrowly tailored.Continue Reading NetChoice Succeeds in Striking Down Utah Social Media Law Under First Amendment