Key point: The Utah legislature just passed a first-of-its-kind digital identity law that gives residents new rights over what personal information they share when verifying their identity. If your business chooses to...more
3/13/2026
/ Compliance ,
Consent ,
Consumer Privacy Rights ,
Data Privacy ,
Data Protection ,
Digital Wallets ,
Electronic Identification ,
New Legislation ,
Personal Information ,
Privacy Laws ,
Regulatory Oversight ,
Regulatory Requirements ,
State Legislatures ,
State Privacy Laws
Key point: Whether your business runs a retail loyalty program, a restaurant rewards app, a software referral campaign, or an online sweepstakes, these programs often collect customer information, and that can trigger real...more
3/2/2026
/ CAN-SPAM Act ,
Contests & Promotions ,
COPPA ,
Customer-Loyalty Programs ,
Data Collection ,
Data Privacy ,
Disclosure Requirements ,
Federal Trade Commission (FTC) ,
FTC Act ,
Parental Consent ,
Personal Information ,
Privacy Laws ,
Regulatory Requirements ,
State Data Privacy Laws ,
State Privacy Laws ,
TCPA
With three new state privacy laws that took effect on January 1, 2026 (Indiana, Kentucky, and Rhode Island), adding to an extensive list of others, many organizations are discovering that their website privacy practices...more
2/18/2026
/ Automated Decision Systems (ADS) ,
Consumer Data Requests ,
Consumer Privacy Rights ,
Cookie Banners ,
Cookies ,
Data Privacy ,
Data Protection ,
Disclosure Requirements ,
Do Not Sell ,
Opt-Outs ,
Privacy Laws ,
Privacy Policy ,
State Privacy Laws ,
Targeted Digital Advertising ,
Web Tracking ,
Websites
In October 2023, California passed the Delete Act, which, in addition to requiring data brokers to register with the state, directed Cal Privacy (f/k/a the California Privacy Protection Agency or CPPA) to create a data...more
2/11/2026
/ California ,
California Privacy Protection Agency (CPPA) ,
Consumer Privacy Rights ,
Data Brokers ,
Data Privacy ,
New Legislation ,
Opt-Outs ,
Personal Information ,
Registration Requirement ,
Regulatory Requirements ,
Right to Erasure ,
State Privacy Laws
Litigation targeting website tracking technologies—such as cookies, pixels, session replay, and analytics tools—remains a major risk for businesses in 2025 and beyond. Courts continue to shape the boundaries of liability,...more
11/21/2025
/ Analytics ,
Artificial Intelligence ,
California ,
CIPA ,
Class Action ,
Consent ,
Cookies ,
Corporate Counsel ,
Data Privacy ,
Litigation Strategies ,
Privacy Laws ,
Risk Mitigation ,
State Privacy Laws ,
Third-Party Service Provider ,
Video Privacy Protection Act ,
VPPA ,
Web Tracking ,
Wiretapping
California continues to set the pace for digital privacy reform, enacting three groundbreaking laws that will reshape how personal information is handled across the state. On October 8, 2025, Governor Newsom signed three new...more
10/14/2025
/ California ,
California Privacy Protection Agency (CPPA) ,
Consumer Privacy Rights ,
Corporate Counsel ,
Data Brokers ,
Data Privacy ,
Data Protection ,
Enforcement Actions ,
New Legislation ,
Opt-Outs ,
Personal Information ,
Popular ,
Privacy Laws ,
State Privacy Laws
Key point: Recent legislative efforts in Massachusetts, seeking to add another comprehensive data privacy law to the national patchwork of state laws, and in California enacting a law to regulate AI development, occurred this...more
10/1/2025
/ Artificial Intelligence ,
California ,
Consumer Privacy Rights ,
Data Privacy ,
Data Protection ,
Disclosure Requirements ,
Enforcement Actions ,
New Legislation ,
Personal Data ,
Privacy Laws ,
Regulatory Requirements ,
State Data Privacy Laws ,
State Legislatures ,
State Privacy Laws
Key point: The California Legislature is considering a bill that would impose comprehensive requirements on the development, deployment, and use of artificial intelligence (AI) systems, with a focus on transparency,...more
9/19/2025
/ Artificial Intelligence ,
California ,
Corporate Counsel ,
Enforcement Actions ,
Impact Assessments ,
New Legislation ,
Popular ,
Proposed Legislation ,
Regulatory Oversight ,
Regulatory Reform ,
Regulatory Requirements ,
Risk Assessment ,
Risk Mitigation ,
Transparency
Key point: The European General Court has upheld the European Commission’s adequacy decision for the EU-U.S. Data Privacy Framework, confirming that the United States ensures an adequate level of protection for personal data...more
9/9/2025
/ Appeals ,
Court of Justice of the European Union (CJEU) ,
Data Privacy ,
Data Protection ,
EU ,
European Commission ,
General Court of the European Union (GCEU) ,
General Data Protection Regulation (GDPR) ,
International Data Transfers ,
Privacy Framework ,
Privacy Laws ,
Schrems I & Schrems II
Key point: CMMC took another step towards reality, with OIRA clearing for publication the DFARS proposed rule that will add CMMC requirements as a condition of award for new contracts.
What happened: On August 25, 2025, the...more
9/2/2025
/ Cybersecurity ,
Cybersecurity Maturity Model Certification (CMMC) ,
Department of Defense (DOD) ,
DFARS ,
Federal Contractors ,
National Security ,
OIRA ,
OMB ,
Procurement Guidelines ,
Proposed Rules ,
Rulemaking Process ,
Supply Chain