A comprehensive bill strengthening data privacy protections for Oklahomans has been signed into law. Senate Bill 546 (the “Oklahoma Data Privacy Act” or the “Act”) will become effective January 1, 2027. The Act establishes...more
On March 3, 2026, the California Privacy Protection Agency (CPPA or "Agency") Board issued a decision requiring PlayOn Sports to pay a $1.10 million fine and change its practices following a settlement reached by the Agency's...more
3/12/2026
/ Advertising ,
California Consumer Privacy Act (CCPA) ,
California Privacy Protection Agency (CPPA) ,
Consumer Privacy Rights ,
Cookies ,
Data Collection ,
Enforcement Actions ,
Fines ,
Information Technology ,
Internet ,
Minors ,
Opt-Outs ,
Personal Information ,
Risk Assessment ,
State Privacy Laws ,
Statutory Violations ,
Web Tracking
As organizations across the country adapt to an ever-changing digital environment, 2025 brought a wave of important updates in data privacy and cybersecurity at both the federal and state levels. New and amended state laws,...more
1/21/2026
/ COPPA ,
Cyber Threats ,
Cybersecurity ,
Data Privacy ,
Data Protection ,
Data Security ,
Department of Justice (DOJ) ,
Enforcement Actions ,
Federal Trade Commission (FTC) ,
New Legislation ,
New Regulations ,
Popular ,
Privacy Laws ,
Regulatory Requirements ,
State Attorneys General ,
State Privacy Laws
The rapidly evolving patchwork of state data privacy laws has created increasing compliance obligations for businesses who operate in the United States. Currently, 20 states have enacted comprehensive data privacy laws in the...more
1/20/2026
/ Consumer Privacy Rights ,
Data Collection ,
Data Mapping ,
Data Privacy ,
Data Protection ,
Data Security ,
New Legislation ,
Personal Data ,
Personal Information ,
Privacy Policy ,
Regulatory Requirements ,
State Data Privacy Laws ,
State Privacy Laws
On October 30, 2025, following a 2024 investigative sweep, California Attorney General Rob Bonta ("Cal AG") announced a $530,000 settlement with a company providing streaming services (the "Company") for alleged violations of...more
11/12/2025
/ California ,
California Consumer Privacy Act (CCPA) ,
Consumer Privacy Rights ,
Data Brokers ,
Data Privacy ,
Data Protection ,
Enforcement Actions ,
Minors ,
Opt-Outs ,
Settlement ,
State Attorneys General ,
State Data Privacy Laws ,
State Privacy Laws
In 2019, the US data privacy framework changed significantly with the emergence of the California Consumer Privacy Act which created a significant compliance burden for most businesses that collect personal information about...more
10/8/2025
/ Consumer Privacy Rights ,
Data Collection ,
Data Mapping ,
Data Privacy ,
Data Security ,
New Legislation ,
Opt-Outs ,
Personal Data ,
Personal Information ,
Privacy Policy ,
Regulatory Requirements ,
State Privacy Laws ,
Vendors
On September 30, 2025, the California Privacy Protection Agency (CPPA) announced a record $1.35 million settlement with Tractor Supply Company for violations of the California Consumer Privacy Act (CCPA). The settlement...more
On September 23, 2025, the California Office of Administrative Law (OAL) approved the final regulations proposed by the California Privacy Protection Agency (CPPA) on July 24, 2025 related to automated decision-making...more
On October 16, 2024, the New York State Department of Financial Services (the "DFS"), under its Cybersecurity Regulation—23 NYCRR Part 500—issued a memorandum providing guidance on the risks posed by artificial intelligence...more
11/26/2024
/ Artificial Intelligence ,
Consumer Privacy Rights ,
Covered Entities ,
Cybersecurity ,
Cybersecurity Framework ,
Enforcement ,
Financial Institutions ,
Financial Services Industry ,
NYDFS ,
Regulatory Agenda ,
Regulatory Requirements ,
Risk Assessment ,
Risk Management ,
Technology Sector
In June 2024, California Attorney General Rob Bonta and Los Angeles City Attorney Hydee Feldstein Soto announced a $500,000 settlement1 with Tilting Point Media LLC (Tilting Point). After a joint investigation by the...more
Rhode Island became the latest state to enact comprehensive data privacy legislation, when the Rhode Island Data Transparency and Privacy Protection Act (the "Rhode Island Data Privacy Act") passed into law on June 28, 2024....more
On May 24, 2024, Minnesota Governor Tim Walz signed into law the nation's 19th comprehensive data privacy law, the Minnesota Consumer Data Privacy Act (the "Minnesota Act"), which will take effect on July 31, 2025. This law...more
6/4/2024
/ Consumer Privacy Rights ,
Data Controller ,
Data Privacy ,
Data Protection ,
Governor Walz ,
Legislative Agendas ,
New Legislation ,
Personal Data ,
Regulatory Agenda ,
Regulatory Requirements ,
State Privacy Laws
On May 9, 2024, Maryland Governor Wes Moore signed into law Senate Bill 541 (the "Maryland Online Data Privacy Act") making Maryland the eighteenth state to adopt comprehensive data privacy legislation in the United States...more
5/15/2024
/ Consumer Privacy Rights ,
Consumer Protection Laws ,
Data Privacy ,
Data Protection ,
Enforcement ,
New Legislation ,
Online Privacy Protection Act ,
Personal Data ,
Privacy Acts ,
Privacy Laws ,
Privacy Policy ,
State and Local Government ,
State Privacy Laws
On April 2, 2024, the California Privacy Protection Agency's (CPPA) Enforcement Division issued its first enforcement advisory, titled "Applying Data Minimization to Consumer Requests," to further emphasize the importance of...more
5/9/2024
/ California ,
California Consumer Privacy Act (CCPA) ,
California Privacy Protection Agency (CPPA) ,
Data Collection ,
Data Deletion ,
Data Protection ,
Data Selling ,
Data-Sharing ,
Enforcement ,
New Regulations ,
Opt-Outs ,
Personal Data ,
Regulatory Requirements
On March 6, 2024, New Hampshire joined the steadily expanding number of states adopting a comprehensive data privacy law, when Governor Chris Sununu signed SB 225 (the "New Hampshire Privacy Act"). The law will take effect...more
5/7/2024
/ Consumer Privacy Rights ,
Data Privacy ,
Data Protection ,
Data Protection Acts ,
Legislative Agendas ,
New Legislation ,
Personal Data ,
Privacy Acts ,
Privacy Laws ,
Privacy Policy ,
Regulatory Requirements ,
State and Local Government ,
State Legislatures ,
State Privacy Laws
On 17 April, 2024, Nebraska Governor Jim Pillen signed into law omnibus Legislative Bill 1074, which includes the Nebraska Data Privacy Act, making Nebraska the seventeenth state to adopt comprehensive data privacy...more
On April 4, 2024, Kentucky joined the rapidly growing number of states adopting a comprehensive data privacy law, when Governor Andy Beshear signed, the Kentucky Consumer Data Protection Act ("Kentucky CDPA"). The law will...more
4/16/2024
/ Consent ,
Consumer Privacy Rights ,
Data Privacy ,
Enforcement ,
Exemptions ,
GLBA Privacy ,
Health Insurance Portability and Accountability Act (HIPAA) ,
Opt-Outs ,
Penalties ,
Personal Data ,
Personally Identifiable Information ,
Sensitive Personal Information ,
State Privacy Laws
On February 21, 2024, California Attorney General Rob Bonta ("Cal AG") announced that his office reached a settlement with DoorDash, the food delivery service company, for violating the California Consumer Privacy Act...more
3/25/2024
/ California Consumer Privacy Act (CCPA) ,
Consumer Privacy Rights ,
Data Selling ,
DoorDash ,
Enforcement Actions ,
Opt-Outs ,
Personal Information ,
Privacy Policy ,
Settlement ,
State Attorneys General ,
State Privacy Laws ,
Third-Party Service Provider
As 2024 gets underway, California's regulators have continued to press forward in seeking to enforce the California Consumer Privacy Act (CCPA). Two recent developments warrant mentioning....more
3/1/2024
/ California Privacy Protection Agency (CPPA) ,
Data Privacy ,
Data Protection ,
Digital Platforms ,
Enforcement Actions ,
Internet Streaming ,
Mobile Apps ,
Privacy Laws ,
Regulatory Agenda ,
Regulatory Oversight ,
State Privacy Laws ,
Technology Sector
The Connecticut Office of the Attorney General ("CT AG") has released its first report on enforcement of the Connecticut Data Privacy Act ("CTDPA"), revealing its focus on companies’ privacy policies, protections of...more
On January 16, 2024, New Jersey Governor Phil Murphy signed into law Senate Bill 332 (the "New Jersey Data Privacy Law") making New Jersey the thirteenth state to adopt comprehensive data privacy legislation. This signing...more
2/6/2024
/ Consumer Privacy Rights ,
COPPA ,
Data Privacy ,
Data Protection ,
Data Security ,
New Jersey ,
New Legislation ,
New Regulations ,
Opt-Outs ,
Personal Data ,
Sensitive Personal Information ,
State Privacy Laws ,
Targeted Digital Advertising
In 2023, the privacy landscape saw a proliferation of comprehensive state data privacy laws being enacted in several jurisdictions, as well as a few that have also taken effect. Although, many of the laws are similar,...more
12/27/2023
/ Artificial Intelligence ,
Biden Administration ,
Data Collection ,
Data Privacy ,
Data Protection ,
Data Security ,
Enforcement Actions ,
Executive Orders ,
Legislative Agendas ,
Machine Learning ,
New Legislation ,
Personal Data ,
Privacy Laws ,
Regulatory Reform ,
State and Local Government ,
State Privacy Laws
On October 30, 2023, the US Securities and Exchange Commission ("SEC") announced that it filed charges against SolarWinds Corp. ("SolarWinds" or the "Company") and its Chief Information Security Officer ("CISO") in connection...more
11/15/2023
/ Breach Notification Rule ,
Chief Information Security Officer (CISO) ,
Civil Monetary Penalty ,
Cyber Attacks ,
Cybersecurity ,
Disclosure Requirements ,
Enforcement ,
Fraud ,
Information Technology ,
Initial Public Offering (IPO) ,
Injunctive Relief ,
Insurance Industry ,
Internal Controls ,
Investors ,
Material Misstatements ,
Misleading Statements ,
NIST ,
Omissions ,
Popular ,
Publicly-Traded Companies ,
Reporting Requirements ,
Sarbanes-Oxley ,
Securities Act of 1933 ,
Securities and Exchange Commission (SEC) ,
Securities Exchange Act of 1934 ,
Software ,
Vulnerability Assessments
On July 18, 2023, Oregon Governor Tina Kotek signed into law Senate Bill 619 (the "Oregon Consumer Privacy Act"), Oregon's new state consumer privacy law, which will become effective July 1, 2024. Oregon now joins California,...more
Florida Governor Ron DeSantis recently signed Senate Bill 262 into law, adopting the "Digital Bill of Rights" proposed by his office in February. Florida joins the rapidly increasing group of states, California, Utah,...more
9/21/2023
/ Cure Periods ,
Data Collection ,
Data Processors ,
Enforcement ,
Florida ,
Gramm-Leach-Blilely Act ,
Health Insurance Portability and Accountability Act (HIPAA) ,
Jurisdiction ,
Minor Children ,
Nonprofits ,
Online Gaming ,
Opt-Outs ,
Popular ,
Sensitive Personal Information ,
Social Media ,
Software ,
State Privacy Laws