Photo of Courtney Achee

Courtney Achee assists clients across industries with litigation and compliance needs. Courtney advises clients on compliance obligations under federal statutes and regulations, state privacy and data security laws, global data protection laws, and industry standards including GLBA, FCRA, FACTA, TCPA, CAN-SPAM, UDAP/UDAAP, COPPA, CCPA, GDPR, Privacy Shield, PCR, PCI DSS, and other laws.

Courtney has also assisted financial institutions with regulatory examinations conducted by the Consumer Financial Protection Bureau (CFPB), including examinations on regulations such as TILA RESPA Integrated Disclosures Act (TRID) and Know Before You Owe.

Retailers and consumer brands will soon have more flexibility in handling requests to stop automated calls and texts. On September 30, 2026, the Federal Communications Commission (FCC) adopted changes to its consent-revocation rules under the Telephone Consumer Protection Act (TCPA). The report and order, released October 1, 2026, allow businesses to limit certain informational…

For retailers, consumer brands, and digital commerce companies, text messaging has become a central part of the customer experience. The same consumer may receive promotional offers, loyalty updates, order confirmations, delivery notices, account alerts, and customer-service messages from the same brand, often through different platforms and vendors.

That makes a seemingly simple question increasingly complicated:…

The landscape of prior express written consent under the Telephone Consumer Protection Act (TCPA) has undergone a significant shift over the past 13 months. In a December 2023 order, the Federal Communications Commission (FCC) introduced two key consent requirements to alter the TCPA, with these changes set to take effect on January 27, 2025. First…

October is Cybersecurity Awareness Month, making it an ideal time to revisit the most impactful and widely-read blog posts on our Cybersecurity & Privacy blog from the past year. As cyber threats become more sophisticated and widespread, staying informed is crucial. Our top five blog posts cover a range of vital issues: the alarming rise…

FTC Finalizes Updated Safeguards Rule Under GLBA to Dramatically Expand Data Security Requirements and Scope of RuleUntil now, companies primarily regulated by the Federal Trade Commission (FTC) were given only vague directives to implement systems sufficient to safeguard customer data, coupled with FTC “recommendations” as to best practices. That is about to change with the FTC’s finalization of its proposed amendments to the Standards for Safeguarding Customer Information (Safeguards Rule) on…

Privacy Litigation Updates for the Financial Services Sector: Claims Against Yodlee Survive and Limited Discovery of Envestnet AllowedIn November 2020, Yodlee and its parent company Envestnet filed separate motions to dismiss the class action lawsuit brought over Yodlee’s alleged data collection and use practices. Yodlee’s motion to dismiss argued that plaintiffs failed to state a claim under Federal Rule of Civil Procedure 12(b)(6), while Envestnet argued that its status as the parent…

Privacy Litigation Updates for the Financial Services Sector: Yodlee and Envestnet Sued for Data Disclosure and Processing PracticesConsumers are more aware than ever of data privacy and security issues. As technology develops, vast quantities of data are collected on individuals every minute of every day. Customers trust their institutions to keep the troves of financial data on them private and secure.

Wesch v. Yodlee, Inc. and Envestnet, Inc.

A recent class action…

No Unreasonable Searches or Seizures of Electronic Data in MichiganThe most intimate information can be found in the data on our cellphones and laptops, from geo-location data to search history. The level of privacy protections afforded to electronic data and communications have been unclear and ambiguous for years, but after this election, Michigan now has some clarity.

On November 03, 2020, Proposal 2 was…