Starting August 1, 2026, registered data brokers will need to access California’s new one-stop-shop deletion platform to process deletion requests or risk significant fines.
Last month the California Office of...more
12/5/2025
/ California ,
California Privacy Protection Agency (CPPA) ,
Consumer Privacy Rights ,
Corporate Counsel ,
Data Brokers ,
Data Privacy ,
Data Protection ,
New Legislation ,
New Regulations ,
Opt-Outs ,
Penalties ,
Personal Information ,
Regulatory Requirements ,
Right to Delete ,
State Privacy Laws
Key point: This is the eighth fine CalPrivacy has issued against an entity for failing to register as a data broker and comes just days after CalPrivacy announced a new Data Broker Enforcement Strike Force and only months...more
12/4/2025
/ California Consumer Privacy Act (CCPA) ,
California Privacy Protection Agency (CPPA) ,
Corporate Counsel ,
Data Brokers ,
Data Privacy ,
Enforcement Actions ,
Penalties ,
Personal Information ,
Privacy Laws ,
Regulatory Requirements ,
State Privacy Laws
Key point: The court held that NetChoice’s complaint adequately states constitutional claims against Maryland’s age-appropriate design code act and allowed NetChoice’s lawsuit to continue but did not rule on the merits of the...more
12/1/2025
/ Constitutional Challenges ,
COPPA ,
Covered Entities ,
Data Protection Impact Assessments (DPIAs) ,
Due Process ,
First Amendment ,
Maryland ,
Minors ,
Motion to Dismiss ,
Online Safety for Children ,
Preemption ,
Privacy Laws ,
Section 230 ,
State Data Privacy Laws ,
State Privacy Laws
Key point: The most recent CCPA enforcement action focuses on the CCPA’s right to opt out of sales and shares and treatment of minor’s data.
On November 21, 2025, the California Attorney General (AG) announced its latest...more
11/24/2025
/ California ,
California Consumer Privacy Act (CCPA) ,
Data-Sharing ,
Enforcement Actions ,
Minors ,
Online Gaming ,
Opt-Outs ,
Personal Information ,
Privacy Laws ,
Settlement ,
State Attorneys General ,
State Privacy Laws
Key point: The California Privacy Protection Agency’s announcement places even more scrutiny on the compliance practices of data brokers.
On November 19, 2025, the California Privacy Protection Agency (now calling itself...more
11/20/2025
/ California ,
California Consumer Privacy Act (CCPA) ,
California Privacy Protection Agency (CPPA) ,
Consumer Privacy Rights ,
Data Brokers ,
Enforcement Actions ,
New Legislation ,
Opt-Outs ,
Registration Requirement ,
Regulatory Oversight ,
State Privacy Laws
Although 2025 may end as the first year since 2020 in which no new state comprehensive privacy law is enacted, this year was anything but quiet. We saw hundreds of consumer privacy bills introduced, newly enacted amendments...more
11/18/2025
/ California ,
California Consumer Privacy Act (CCPA) ,
Consumer Privacy Rights ,
Data Privacy ,
Data Protection ,
Enforcement Actions ,
Gramm-Leach-Blilely Act ,
New Legislation ,
Online Safety for Children ,
Personal Data ,
Privacy Laws ,
Regulatory Reform ,
Rulemaking Process ,
State Data Privacy Laws ,
State Privacy Laws
The California AG’s fifth CCPA-related enforcement action focuses on the CCPA’s right to opt out of sales/shares and on children’s privacy provisions and, with respect to the right to opt out, it should trigger businesses to...more
11/4/2025
/ California ,
California Consumer Privacy Act (CCPA) ,
Consumer Privacy Rights ,
Cookies ,
Data Privacy ,
Data Protection ,
Data-Sharing ,
Enforcement Actions ,
Mobile Apps ,
Online Safety for Children ,
Opt-Outs ,
State Attorneys General ,
Unfair Competition Law (UCL) ,
Web Tracking
California expands the scope of the California AI Transparency Act by adding compliance obligations and extends the operative date to August 2, 2026. -
...more
California’s new Digital Age Assurance Act will likely create significant compliance challenges for many businesses....more
10/28/2025
/ California ,
Consent ,
Cooperative Compliance Regime ,
Data Privacy ,
Digital Platforms ,
Internet ,
Mobile Apps ,
Mobile Devices ,
New Legislation ,
Online Safety for Children ,
Operating System Developers ,
Regulatory Reform ,
Regulatory Requirements ,
State Privacy Laws
Our new chart identifies and analyzes several remaining provisions in U.S. state consumer data privacy laws that are not already covered in our prior charts.
In our next comparison chart of U.S. state consumer data...more
Of the 15 privacy and AI-related bills passed by the California legislature in the 2025 session that we have been tracking, Governor Gavin Newsom signed 10 into law and vetoed five.
...more
10/15/2025
/ Algorithms ,
Artificial Intelligence ,
California ,
Consumer Privacy Rights ,
Data Brokers ,
Data Collection ,
Data Privacy ,
Data Protection ,
Governor Vetoes ,
Mobile Apps ,
New Legislation ,
Opt-Outs ,
Popular ,
State Privacy Laws ,
Transparency
The rules provide further guidance to controllers subject to the law’s children’s privacy protections.
...more
10/14/2025
/ Colorado ,
Comment Period ,
Consumer Privacy Rights ,
Data Controller ,
Data Privacy ,
Data Protection ,
Final Rules ,
Geolocation ,
Minors ,
Rulemaking Process ,
Sensitive Personal Information ,
State Privacy Laws
A federal district court judge rejected the claim that the disclosure law violates the First Amendment.
...more
10/13/2025
/ Algorithms ,
Automated Decision Systems (ADS) ,
Constitutional Challenges ,
Corporate Counsel ,
Disclosure Requirements ,
First Amendment ,
Goods or Services ,
New York ,
Pricing ,
Retail Market ,
State Attorneys General
California lawmakers once again increase the disclosure and transparency requirements for registered data brokers.
...more
California enacts first-in-the-nation law focused on regulating frontier artificial intelligence models.
On September 29, 2025, California Governor Gavin Newsom signed SB 53 — the Transparency in Frontier Artificial...more
10/7/2025
/ Artificial Intelligence ,
California ,
Disclosure Requirements ,
Enforcement Actions ,
Innovative Technology ,
Machine Learning ,
New Legislation ,
Regulatory Requirements ,
Reporting Requirements ,
Risk Management ,
Whistleblowers
Our new chart identifies and analyzes the rights provided by the 19 state consumer data privacy laws.
One way state consumer data privacy laws vary is in the rights they provide to consumers. In 2025, this patchwork became...more
The enforcement action alleges that the retailer failed to provide adequate privacy disclosures to website visitors and job applicants, failed to effectuate opt-out requests, including recognizing the Global Privacy Control...more
10/1/2025
/ California ,
California Consumer Privacy Act (CCPA) ,
California Privacy Protection Agency (CPPA) ,
Consumer Privacy Rights ,
Data Privacy ,
Data Protection ,
Enforcement Actions ,
Opt-Outs ,
Regulatory Violations ,
Retailers ,
State Privacy Laws ,
Website Owner Liability ,
Websites
Our new chart identifies and analyzes the varying and changing applicability standards for the 19 state consumer data privacy laws....more
Businesses subject to the CCPA must comply with extensive new regulations....more
9/24/2025
/ Automated Decision Systems (ADS) ,
California ,
California Consumer Privacy Act (CCPA) ,
California Privacy Protection Agency (CPPA) ,
Cyber Insurance ,
Cybersecurity ,
Data Privacy ,
Data Protection ,
New Regulations ,
Office of Administrative Law ,
Risk Assessment ,
Rulemaking Process
Children’s privacy remained a hot topic during the 2025 state legislative session, with multiple states passing laws, adding to the growing patchwork of children’s privacy laws....more
9/18/2025
/ California Consumer Privacy Act (CCPA) ,
COPPA ,
Corporate Counsel ,
Data Privacy ,
Data Protection Impact Assessments (DPIAs) ,
Minors ,
New Legislation ,
New Regulations ,
Online Safety for Children ,
Regulatory Agenda ,
Regulatory Reform ,
State Privacy Laws
One area in which state consumer data privacy laws differ is their definitions of sensitive data. States like Virginia and Utah contain narrower definitions, while other states like Oregon, Delaware, and New Jersey passed...more
The California legislature closed its 2025 legislative session by passing 14 privacy and AI-related bills....more
9/15/2025
/ Algorithms ,
Artificial Intelligence ,
Automated Decision Systems (ADS) ,
California ,
California Privacy Protection Agency (CPPA) ,
Cloud Computing ,
Corporate Counsel ,
Cybersecurity ,
Data Brokers ,
Data Privacy ,
Data Protection ,
Information Technology ,
Pending Legislation ,
Personal Data ,
Personal Information ,
Popular ,
Regulatory Agenda ,
Regulatory Reform ,
State Privacy Laws
The investigative sweep is part of a growing multistate approach to privacy enforcement actions....more
9/12/2025
/ California Consumer Privacy Act (CCPA) ,
California Privacy Protection Agency (CPPA) ,
Consumer Privacy Rights ,
Data Privacy ,
Data Protection ,
Enforcement Actions ,
Opt-Outs ,
Security and Privacy Controls ,
State Attorneys General ,
State Data Privacy Laws ,
Web Tracking
The number of instances in which businesses must conduct risk assessments and impact assessments under state privacy and AI laws has exploded. In recent months, California and Connecticut have added additional — and...more
9/10/2025
/ Artificial Intelligence ,
California ,
California Consumer Privacy Act (CCPA) ,
Connecticut ,
Data Collection ,
Data Controller ,
Data Privacy ,
Data Protection ,
Impact Assessments ,
Minors ,
Online Safety for Children ,
Personal Data ,
Regulatory Requirements ,
Risk Assessment ,
Sensitive Personal Information ,
State Privacy Laws
The California legislature heads into its final week with more than 20 privacy and AI bills still under consideration....more
9/8/2025
/ Artificial Intelligence ,
Automated Decision Systems (ADS) ,
California ,
Data Privacy ,
Legislative Agendas ,
New Legislation ,
Privacy Legislation ,
Proposed Legislation ,
Regulatory Reform ,
Regulatory Requirements ,
State Privacy Laws