Keypoint: Last week, Oregon’s legislature passed a bill to amend the state’s consumer data privacy law, the Connecticut Senate passed two bills, and there were developments with bills in New Jersey, Nebraska, Texas,...more
5/19/2025
/ California ,
California Consumer Privacy Act (CCPA) ,
Consumer Privacy Rights ,
Data Brokers ,
Data Collection ,
Data Privacy ,
New Legislation ,
Oregon ,
Privacy Laws ,
Proposed Legislation ,
Social Media ,
State Privacy Laws
Keypoint: In its second non-data broker enforcement action for violations of the CCPA, the California Privacy Protection Agency entered into a stipulated final order with a retailer for a $345,178 administrative fine and...more
5/7/2025
/ California Consumer Privacy Act (CCPA) ,
California Privacy Protection Agency (CPPA) ,
Consent ,
Corporate Counsel ,
Data Collection ,
Enforcement Actions ,
Opt-Outs ,
Penalties ,
Personal Information ,
Privacy Laws ,
Retailers
Keypoint: It was a busy week with the Kentucky legislature passing a bill to amend the state’s consumer data privacy law, bills crossing chambers in Vermont, Washington and Arkansas, and movement with bills in numerous other...more
On March 12, 2025, the California Privacy Protection Agency (Agency) announced its first non-data broker enforcement action requiring a vehicle manufacturer to pay an administrative fine of $632,500 in connection with the...more
Keypoint: Last week saw a flurry of activity across numerous states, including bills advancing in Virginia, Oklahoma, Washington, Utah, and South Carolina, while lawmakers continued to introduce bills across the country. ...more
2/17/2025
/ Artificial Intelligence ,
California Consumer Privacy Act (CCPA) ,
Compliance ,
Consent ,
Consumer Privacy Rights ,
Corporate Counsel ,
Data Brokers ,
Data Privacy ,
Data Protection ,
Online Safety for Children ,
Personal Data ,
Privacy Laws ,
Regulatory Agenda ,
State Privacy Laws
Throughout the 2024 legislative session, we have been tracking numerous privacy- and AI-related bills pending in California. Ten of those bills passed the state legislature before the legislative session ended on August 31...more
10/7/2024
/ Artificial Intelligence ,
California ,
California Consumer Privacy Act (CCPA) ,
Consumer Privacy Rights ,
Data Privacy ,
Data-Sharing ,
Machine Learning ,
Minors ,
Opt-Outs ,
Personal Information ,
State Privacy Laws ,
Training ,
Transparency
On Saturday, August 31, the California legislature closed its 2024 session. During the past calendar year, we tracked numerous privacy and AI-related bills with fourteen of them passing out of their chamber of origin prior to...more
9/3/2024
/ Algorithms ,
Artificial Intelligence ,
Bias ,
California ,
California Consumer Privacy Act (CCPA) ,
California Privacy Protection Agency (CPPA) ,
Corporate Counsel ,
Data Privacy ,
Discrimination ,
Online Safety for Children ,
Opt-Outs ,
State Privacy Laws ,
Training ,
Transparency
Keypoint: The California legislature enters into the final week of its session with many bills still under consideration. We are currently tracking thirteen privacy and AI-related bills that previously crossed chambers prior...more
Keypoint: The appellate court ruled that the California Age-Appropriate Design Code Act’s impact assessment provision is unconstitutional and remanded the case back to the trial court to consider the constitutionality of the...more
8/21/2024
/ Appellate Courts ,
California ,
California Consumer Privacy Act (CCPA) ,
Corporate Counsel ,
Data Collection ,
Data Protection ,
Data Protection Impact Assessments (DPIAs) ,
First Amendment ,
Goods or Services ,
Impact Assessments ,
Minors ,
Online Marketplace ,
Popular ,
Unconstitutional Condition
Keypoint: Last week, several privacy and AI bills passed out of committee (with some receiving amendments) while two bills died in committee. We are currently tracking thirteen privacy and AI-related bills that previously...more
8/19/2024
/ Algorithms ,
Artificial Intelligence ,
California ,
California Consumer Privacy Act (CCPA) ,
Corporate Counsel ,
Disclosure Requirements ,
Online Safety for Children ,
Personal Information ,
Social Media ,
State Privacy Laws ,
User-Generated Content
Keypoint: Last week, the California legislature returned from its summer recess and began moving forward with privacy and AI legislation prior to the August 31 session closing date.
We are currently tracking thirteen...more
8/12/2024
/ Algorithms ,
Artificial Intelligence ,
California ,
California Consumer Privacy Act (CCPA) ,
California Privacy Protection Agency (CPPA) ,
Consumer Privacy Rights ,
Corporate Counsel ,
Discrimination ,
Online Safety for Children ,
Opt-Outs ,
Social Media ,
State Privacy Laws ,
Transparency
Keypoint: The California legislature has many pending privacy and AI-related bills to consider before it closes on August 31. The California legislature left for its summer recess on July 3 and will reconvene on August 5....more
Keypoint: The settlement, which includes a $500,000 fine and injunctive relief, arises out of alleged violations of the CCPA’s children’s privacy provisions and COPPA. On June 18, 2024, the California Attorney General...more
6/20/2024
/ California ,
California Consumer Privacy Act (CCPA) ,
CARU ,
COPPA ,
Corporate Counsel ,
Mobile Apps ,
Online Gaming ,
Personal Information ,
Settlement ,
Software Developers ,
State Attorneys General
Keypoint: Last week, bills advanced in Colorado and California while, with legislatures in multiple states set to close this week, we will know the fate of significant bills in the coming days. Below is the fifteenth weekly...more
Keypoint: Maryland’s bill diverges from other Washington Privacy Act variants passed to date with unique data minimization, sensitive data, minor’s data privacy, and unlawful discrimination provisions (among others)....more
4/8/2024
/ California Consumer Privacy Act (CCPA) ,
Consumer Protection Laws ,
Corporate Counsel ,
Data Protection ,
Enforcement ,
Maryland ,
New Legislation ,
Opt-Outs ,
Personal Data ,
Sensitive Personal Information ,
State Privacy Laws
Keypoint: In only its second public enforcement settlement, the California Attorney General announced a $375,000 fine along with injunctive relief.
On February 21, 2024, the California Attorney General announced that it had...more
Keypoint: Last week Wisconsin inched closer to passing a consumer data privacy bill, Colorado’s biometric privacy bill advanced out of committee, and several CCPA-amendment bill were introduced.
Below is the fourth weekly...more
Keypoint: Based on the appellate court’s ruling, the new CCPA regulations are enforceable immediately instead of on March 29, 2024.
On February 9, 2024, a three-judge panel of the California Court of Appeals issued an...more
Keypoint: New Jersey is the thirteenth state to pass consumer data privacy legislation with a bill that is generally based on the Washington Privacy Act model but with some notable differences.
On January 8, 2024, the New...more
1/9/2024
/ Biometric Information ,
California Consumer Privacy Act (CCPA) ,
Consumer Privacy Rights ,
COPPA ,
Corporate Counsel ,
Data Processors ,
New Jersey ,
New Legislation ,
Opt-Outs ,
Popular ,
Privacy Laws ,
State Privacy Laws
Keypoint: The California Privacy Protection Agency continued its rulemaking efforts by releasing draft automated decisionmaking technology regulations although the Agency has yet to initiate the formal rulemaking process....more
11/28/2023
/ Artificial Intelligence ,
Automated Decision Systems (ADS) ,
California ,
California Consumer Privacy Act (CCPA) ,
California Privacy Protection Agency (CPPA) ,
Notification Requirements ,
Opt-Outs ,
Personal Information ,
Right-To-Access ,
Risk Assessment ,
State Privacy Laws
Keypoint: A California federal district court granted NetChoice’s motion for preliminary injunction, finding that the California Age-Appropriate Design Code Act likely violates the First Amendment.
On September 18, 2023, the...more
Keypoint: Pending the Governor’s signature, the California Delete Act requires all data brokers to register with the CPPA next year and comply with a one-stop consumer deletion mechanism by 2026.
Last week, the California...more
9/18/2023
/ Audits ,
California ,
California Consumer Privacy Act (CCPA) ,
California Privacy Protection Agency (CPPA) ,
Data Brokers ,
Disclosure Requirements ,
Duty to Delete ,
Fair Credit Reporting Act (FCRA) ,
GLBA Privacy ,
Health Insurance Portability and Accountability Act (HIPAA) ,
Insurance Information and Protection Act ,
New Legislation ,
State Privacy Laws
Keypoint: The Attorney General’s investigatory sweep focuses on how large California employers are handling the expiration of the CCPA’s employee data exemption.
On July 14, 2023, the California Attorney General announced a...more
Keypoint: Enforcement by the California Privacy Protection Agency of the new CCPA regulations will be delayed until March 2024, but the Agency can still enforce the CCPA statutory changes as of July 1, 2023....more
Keypoint: Texas is the fifth legislature to pass a broad consumer data privacy bill this year with a bill that is a more consumer-friendly version of the Virginia law.
On May 28, 2023, the Texas legislature passed...more