October Privacy News: $25 Billion Verdicts, Robot Lawsuits & AI Surveillance

October brought another reminder that privacy issues can pop up just about anywhere. This month, Meta faced a massive $25 billion privacy verdict, delivery robots found themselves at the center of biometric privacy lawsuits, companies faced scrutiny over employee surveillance, and even email subject lines became a source of litigation. Meanwhile, AI continued to shake things up, creating new privacy concerns and new cybersecurity possibilities.

We’ve rounded up 10 of the month’s biggest privacy stories, the latest U.S. privacy bills we’re tracking, and upcoming events worth adding to your calendar. We also spoke with fintech and regulatory attorney Felix Shipkevich about why spam calls and unsolicited communications are still such a problem despite decades of legislation designed to stop them.

What’s new in privacy?

Below are some of the most notable news in privacy from this month:
 

1. Meta ordered to pay $25 billion to New Mexico in a privacy lawsuit. The jury members found that Facebook had made false or misleading statements by telling consumers that they controlled how their information was shared. The jury also found that Facebook misled consumers by claiming that it did not sell or share personal information with advertisers. Read more here. 
2. Lawsuits accuse robot delivery companies of violating BIPA. A pair of class-action lawsuits filed in Chicago accuse robot delivery companies Coco and Serve of violations of the Illinois Biometric Information Privacy Act. The lawsuits allege that the delivery robots collected people’s facial and hand data through the robots’ cameras without notice or consent. Read more here. 
3. Class action lawsuits target misleading email subject lines. Since April, 2025, more than 100 class action lawsuits have been filed for allegedly misleading promotional email subject lines under Washington’s Commercial Electronic Mail Act. Learn more here.
4. NOYB files privacy complaints against Scale AI. NOYB’s complaints allege that Scale AI illegally monitored freelance workers who produce training data for AI models. The complaints state that up to 19 trackers follow workers while they work, including recording keystrokes and mouse movements every few seconds. Learn more here.
5. Google updates its’ Privacy Policy for targeted advertising. On October 16th, Google published an update to its’ Privacy Policy, which states that users who allow AI services such as Gemini and Search to access their personal data to provide more personalized responses and recommendations may also be subject to more targeted ads, sparking privacy concerns. Read more here.  
6. Samsung TV accused of spying on users. A reverse engineer found that Samsung’s TV’s have a microphone that is always on  and capturing sounds from the user’s environment. The engineer also found that Samsung shares the data collected with over 400 other companies. Learn more here.
7. Pennsylvania expands telemarketing law. The changes to the law expands coverage beyond traditional phone calls to text messages, voicemails, ringless voicemails, and automated communications. The law also introduces new consent, opt-out, calling-hour and compliance obligations. Read more here.  
8. Researchers used AI to uncover vulnerabilities in PHP. The recent vulnerabilities uncovered in PHP were found using AI. AI is now being used not just for finding vulnerabilities, but also for exploiting them. Learn more here. 
9. Asos warns that customer data may be compromised. The online fashion retailer is investigating unauthorized access to its app system after shoppers received a notification claiming that hackers had “fully compromised” its data. Read more here. 
10. Privacy advocates call for workplace privacy as employers use AI to track staff. Many employers are turning to tools such as CCTV, monitoring card swipes, keystore monitoring, and tracking workplace instant messaging, using AI. The Human Technology Institute has called on the Australian government to build privacy protections into workplace laws to protect employee privacy with this monitoring. Learn more here.

What privacy bills are we tracking?

• Alaska – AK HB367;
• Arizona – AZ SB1815;
• Illinois – IL SB52;
• Illinois – IL HB3041;
• Illinois – IL SB2875;
• Illinois – IL SB3220;
• Illinois – IL HB5221;
• Illinois – IL SB3548;
• Illinois – IL SB3890;
• Massachusetts – MA SB33;
• Massachusetts – MA SB301;
• Massachusetts – MA SB2619;
• Massachusetts – MA HB4746;
• Massachusetts – MA HB5479;
• Michigan – MI SB359;
• Minnesota – MN SB4666;
• New York – NY S4276;
• New York – NY AB5827;
• New York – NY AB974;
• New York – NY AB4947;
• New York – NY SB8524;
• North Carolina – NC – HB462;
• North Carolina – NC – SB757;
• North Carolina – NC – SB1022;
• Pennsylvania – PA HB78;
• Pennsylvania – PA SB112;
• Vermont – VT H812;
• Washington – WA HB1671;
• West Virginia – WV HB5123.

Events

Here are some great virtual events that you can attend to learn more about the hottest issues in privacy and meet other privacy professionals: 

1. Smart Glasses: Balancing Innovation, Inclusion and Privacy – November 5, 2026;
2. The DPA’s and European Parliament’s View on EU and German Data Protection Law Reforms – November 10, 2026; 
3. 2027 Privacy and Emerging Technology National Institute – May 10, 2027.

Conclusion

And that’s a wrap on October’s privacy news! From massive privacy verdicts and new lawsuits to evolving regulations and emerging AI concerns, it’s clear that privacy continues to be a moving target for businesses and the professionals who advise them. We’ll keep tracking the latest developments, legislation, and industry news so you can stay informed and help your clients stay ahead of what’s coming next. See you next month!