On April 2, 2024, the California Privacy Protection Agency's (CPPA) Enforcement Division issued its first enforcement advisory, titled "Applying Data Minimization to Consumer Requests," to further emphasize the importance of...more
5/9/2024
/ California ,
California Consumer Privacy Act (CCPA) ,
California Privacy Protection Agency (CPPA) ,
Data Collection ,
Data Deletion ,
Data Protection ,
Data Selling ,
Data-Sharing ,
Enforcement ,
New Regulations ,
Opt-Outs ,
Personal Data ,
Regulatory Requirements
The effective dates of new U.S. data privacy laws are closing in. Currently, thirteen states have passed comprehensive data privacy laws in the United States: California, Virginia, Colorado, Connecticut, Utah, Iowa, Indiana,...more
The effective dates of new U.S. data privacy laws are closing in. Currently, thirteen states have passed comprehensive data privacy laws in the United States: California, Virginia, Colorado, Connecticut, Utah, Iowa, Indiana,...more
2/7/2024
/ California Consumer Privacy Act (CCPA) ,
Data Collection ,
Data Privacy ,
Data Protection ,
Data Protection Acts ,
Data Security ,
New Legislation ,
Personal Information ,
Privacy Laws ,
Regulatory Reform ,
Regulatory Requirements ,
State and Local Government ,
State Privacy Laws
In 2023, the privacy landscape saw a proliferation of comprehensive state data privacy laws being enacted in several jurisdictions, as well as a few that have also taken effect. Although, many of the laws are similar,...more
12/27/2023
/ Artificial Intelligence ,
Biden Administration ,
Data Collection ,
Data Privacy ,
Data Protection ,
Data Security ,
Enforcement Actions ,
Executive Orders ,
Legislative Agendas ,
Machine Learning ,
New Legislation ,
Personal Data ,
Privacy Laws ,
Regulatory Reform ,
State and Local Government ,
State Privacy Laws
Florida Governor Ron DeSantis recently signed Senate Bill 262 into law, adopting the "Digital Bill of Rights" proposed by his office in February. Florida joins the rapidly increasing group of states, California, Utah,...more
9/21/2023
/ Cure Periods ,
Data Collection ,
Data Processors ,
Enforcement ,
Florida ,
Gramm-Leach-Blilely Act ,
Health Insurance Portability and Accountability Act (HIPAA) ,
Jurisdiction ,
Minor Children ,
Nonprofits ,
Online Gaming ,
Opt-Outs ,
Popular ,
Sensitive Personal Information ,
Social Media ,
Software ,
State Privacy Laws
The California Attorney General's (the "Cal AG") office appears to be moving forward with enforcement activities, despite a recent court ruling delaying enforcement of CPRA regulations. In the past month, since the amendments...more
8/16/2023
/ California ,
California Consumer Privacy Act (CCPA) ,
California Privacy Rights Act (CPRA) ,
Compliance ,
Consumer Privacy Rights ,
Data Collection ,
Data Privacy ,
Employees ,
Employer Liability Issues ,
Employment Policies ,
Enforcement Actions ,
Hiring & Firing ,
Mobile Apps ,
New Regulations ,
Personal Information ,
Privacy Laws ,
Regulatory Agenda ,
State Privacy Laws
California employers' reprieve from obligations to employees to disclose data privacy practices and provide access rights to employees appears to be coming to an end as the California Privacy Rights Act (CPRA) becomes...more
10/12/2022
/ California ,
California Consumer Privacy Act (CCPA) ,
California Privacy Rights Act (CPRA) ,
Compliance ,
Confidential Communications ,
Data Collection ,
Data Privacy ,
Disclosure Requirements ,
Notice Requirements ,
Opt-Outs ,
Personal Information ,
Policies and Procedures ,
Privacy Laws
This week, on Tuesday May 10, 2022, Connecticut Gov. Ned Lamont approved Connecticut Senate Bill 6, an Act Concerning Personal Data Privacy and Online Monitoring (the "Connecticut Privacy Act"). Governor Lamont’s approval...more
5/19/2022
/ Connecticut ,
Consent ,
Consumer Privacy Rights ,
Data Collection ,
Data Protection ,
Enforcement ,
GLBA Privacy ,
Governor Lamont ,
Health Insurance Portability and Accountability Act (HIPAA) ,
New Legislation ,
Opt-Outs ,
Personal Data ,
State Privacy Laws
As state and federal legislatures across the United States continue to contemplate comprehensive data protection legislation, two pending laws—the California Privacy Rights Act (CPRA) and the Virginia Consumer Data Protection...more
Colorado has joined California and Virginia in enacting comprehensive data privacy legislation after Governor Jared Polis signed the Colorado Privacy Act into effect yesterday. The enactment of the Colorado Privacy Act...more
On March 2, 2021, Governor Ralph Northam of Virginia signed the Consumer Data Protection Act ("CDPA") into law, after it passed both houses of the legislature with overwhelming support. This new legislation is set to take...more
Hot on the heels of the California Attorney General's rulemaking process for the California Consumer Privacy Act ("CCPA"), California voters have passed a ballot initiative to expand and create new privacy rights for...more
As companies across industries continue to take advantage of existing and emerging technologies that involve the collection and use of human biometric identifiers, corporate privacy programs must take into account the unique...more
11/9/2020
/ Article III ,
Artificial Intelligence ,
Big Tech ,
Biometric Information ,
Biometric Information Privacy Act ,
Compliance ,
Cybersecurity ,
Data Collection ,
Data Retention ,
Emerging Technologies ,
IL Supreme Court ,
Innovative Technology ,
Popular ,
Regulatory Oversight ,
Robotics ,
Standing ,
State Data Breach Notification Statutes
The CCPA took effect on 1 January 2020, introducing significant compliance burdens for most businesses that collect personal information about California residents. The reach of the CCPA extends beyond California and the US;...more
2/1/2020
/ California Consumer Privacy Act (CCPA) ,
Compliance ,
Consumer Protection Laws ,
Consumer Rights Directive ,
Corporate Liability ,
Data Collection ,
Data Sellers ,
Data Subjects Rights ,
EU ,
Extraterritoriality Rules ,
General Data Protection Regulation (GDPR) ,
Multinationals ,
Personal Data ,
Personal Information ,
Risk Assessment ,
UK ,
UK Data Protection Act
Your business complies with the General Data Protection Regulation ("GDPR") and/or Turkish Personal Data Protection Law numbered 6698 and its secondary legislation ("PDPL"); but does it comply with the California Consumer...more
1/8/2020
/ California Consumer Privacy Act (CCPA) ,
Compliance ,
Consumer Protection Laws ,
Covered Entities ,
Cross-Border Transactions ,
Data Buyers ,
Data Collection ,
Data Processors ,
Data Sellers ,
Disclosure Requirements ,
E-Commerce ,
Electronic Payment Transactions ,
General Data Protection Regulation (GDPR) ,
Internet Streaming ,
Online Gaming ,
Opt-Outs ,
Personal Information ,
Portability ,
Privacy Laws ,
Right of Access ,
Right to Be Forgotten ,
Risk Assessment ,
Risk Mitigation ,
Transparency ,
Turkey ,
Turkish Personal Data Protection Law (PDPL)
White & Case Technology Newsflash With only 100 days left in 2019 as of the date of this publication, the California Consumer Privacy Act (CCPA) will be here before you know it. As we have described previously, the CCPA...more
9/24/2019
/ Amended Rules ,
California Consumer Privacy Act (CCPA) ,
Compliance ,
Consumer Protection Laws ,
Corporate Counsel ,
Data Collection ,
Data Sellers ,
Data-Sharing ,
Employee Training ,
Personal Information ,
Privacy Policy ,
Proposed Amendments ,
Transparency
While businesses have been focused on meeting the looming January 1, 2020 deadline of the California Consumer Privacy Act ("CCPA"), Nevada just ratchetted up the heat by imposing an earlier October 2, 2019 deadline for...more
6/10/2019
/ Amended Legislation ,
California Consumer Privacy Act (CCPA) ,
Consumer Privacy Rights ,
Consumer Rights Directive ,
Data Brokers ,
Data Collection ,
Data Privacy ,
GLBA Privacy ,
Governor Sisolak ,
Health Insurance Portability and Accountability Act (HIPAA) ,
Internet ,
Internet Retailers ,
Notice Requirements ,
Online Platforms ,
Personal Data ,
Personally Identifiable Information ,
Privacy Laws ,
State Legislatures