In June 2025, New York enacted a series of new consumer protection requirements as part of the Transportation, Economic Development and Environmental Conservation Article VII Legislation section of the FY 2026 New York State...more
Businesses that disclose personal information on the internet, in data platforms, or in commercial products have long been the target of privacy class actions. ...more
On Sept. 9, the California Privacy Protection Agency (CPPA), in collaboration with the Attorneys General of California, Connecticut, and Colorado, announced the launch of a multi-state privacy enforcement sweep targeting...more
States everywhere are considering whether and how to best regulate business use of artificial intelligence (“AI”). While the California Privacy Protection Agency (“CPPA”) recently struck all references to AI from its proposed...more
There is never a boring moment in California privacy law, and these past weeks have been no exception.
From major modifications to proposed California Consumer Protection Act (CCPA) rulemaking on automated decision-making...more
5/8/2025
/ California Consumer Privacy Act (CCPA) ,
California Privacy Protection Agency (CPPA) ,
CIPA ,
Consumer Privacy Rights ,
Data Protection ,
Enforcement Actions ,
Privacy Laws ,
Proposed Rules ,
Regulatory Agenda ,
Regulatory Reform ,
Retailers ,
State Privacy Laws
On April 22, FTC Commissioner Melissa Holyoak delivered the opening keynote at the IAPP Global Summit, where she emphasized the importance of vigorously enforcing privacy laws while warning against stretching the FTC’s...more
Automated decision-making, or ADM, is used for a wide range of use cases that impact individuals — from processing insurance claims and credit scoring, to ranking job candidates and offering personalized pricing or targeted...more
3/27/2025
/ Algorithms ,
Automated Decision Systems (ADS) ,
California Privacy Protection Agency (CPPA) ,
Consumer Privacy Rights ,
Corporate Counsel ,
Court of Justice of the European Union (CJEU) ,
Data Privacy ,
Disclosure Requirements ,
EU ,
General Data Protection Regulation (GDPR) ,
Privacy Laws ,
Regulatory Requirements ,
Rulemaking Process
On March 10, the California attorney general’s office announced an “ongoing investigative sweep into the location data industry” (“investigative sweep”) for compliance with the California Consumer Privacy Act’s (“CCPA”)...more
3/17/2025
/ California ,
California Consumer Privacy Act (CCPA) ,
Consumer Privacy Rights ,
Data Management ,
Data Privacy ,
Enforcement Actions ,
Information Governance ,
Location Data ,
Privacy Laws ,
State Attorneys General ,
State Privacy Laws
On Jan. 16, the Federal Trade Commission (FTC) announced long-awaited and significant updates to the Children’s Online Privacy Protection Act (COPPA) Rule, the first revisions since 2013. These updates apply to online...more
On Nov. 8, the California Privacy Protection Agency (CPPA) Board voted to advance several significant privacy regulations, including new provisions under the CCPA affecting data brokers, as well as the initiation of the...more
As it did with data privacy, California seeks to lead the charge when it comes to regulating the use and deployment of Artificial Intelligence (AI) tools. Joining Colorado and Utah, the other two states with enacted AI laws,...more