On February 9, 2024, a California appellate court reversed a state trial court decision that delayed enforcement of California Privacy Rights Act (CPRA) regulations by one year. The CPRA—an approved ballot initiative that...more
A recent spate of successful legal challenges has provided some relief from the ever-swelling wave of state privacy laws. The legal bases of these challenges vary, but taken together, they highlight that state privacy laws –...more
10/6/2023
/ California Consumer Privacy Act (CCPA) ,
California Privacy Rights Act (CPRA) ,
COPPA ,
Corporate Counsel ,
Data Collection ,
Data Management ,
Data Protection Impact Assessments (DPIAs) ,
First Amendment ,
New Regulations ,
Online Safety for Children ,
State Privacy Laws
California continues to forge ahead on potential new privacy, cybersecurity, and artificial intelligence (AI) obligations, including through its California Consumer Privacy Act (CCPA) rulemaking process and by launching a new...more
9/14/2023
/ Artificial Intelligence ,
Audits ,
Automated Systems ,
California ,
California Consumer Privacy Act (CCPA) ,
California Privacy Protection Agency (CPPA) ,
California Privacy Rights Act (CPRA) ,
Cybersecurity ,
Data Protection ,
Executive Orders ,
Governor Newsom ,
Machine Learning ,
Recordkeeping Requirements ,
Risk Assessment ,
Training Requirements
California Attorney General Rob Bonta (California AG) recently announced that his office issued several inquiry letters to large California employers requesting information about their compliance with the California Consumer...more
On Friday, June 30, 2023, a California state superior court ruled that any California Privacy Rights Act (CPRA) regulation may not be enforced until one year after the regulation is promulgated. Practically speaking, this...more
March wrapped up with several significant state privacy developments. First, on March 28, Iowa Governor Kim Reynolds signed Senate File 262 (SF 262) into law, making Iowa the sixth state to adopt comprehensive data privacy...more
4/7/2023
/ California Consumer Privacy Act (CCPA) ,
California Privacy Rights Act (CPRA) ,
Consent ,
Consumer Privacy Rights ,
Data Collection ,
Data Privacy ,
New Legislation ,
Opt-Outs ,
Personal Information ,
Sensitive Personal Information ,
State Privacy Laws
At its February 3 meeting, the California Privacy Protection Agency (CPPA) Board took steps pursuant to the California Privacy Rights Act (CPRA) towards (1) finalizing its updated California Consumer Privacy Act (CCPA)...more
2023 already is a landmark year for privacy regulation. As of January 1, 2023, two new privacy laws are now in effect: (1) the California Privacy Rights Act (CPRA), which amends the California Consumer Privacy Act (CCPA), and...more
Of the five new state-level omnibus privacy laws that are going into effect in 2023, two authorize state-level rulemakings: the California Privacy Rights Act (CPRA) and the Colorado Privacy Act (CPA). These two states’...more
The California Attorney General (AG) made headlines in August by issuing a $1.2 million fine against online retailer Sephora to resolve allegations that the business violated the California Consumer Privacy Act (CCPA). This...more
On May 27, 2022, the California Privacy Protection Agency (CPPA or Agency) released a much-anticipated draft of the regulations that would implement certain provisions of the California Privacy Rights Act (CPRA)....more
6/29/2022
/ Audits ,
California Privacy Rights Act (CPRA) ,
Consent ,
Consumer Requests ,
Data Collection ,
Data Processors ,
Disclosure Requirements ,
Enforcement Actions ,
New Regulations ,
Personal Information ,
Privacy Policy ,
Sensitive Personal Information
On May 10, 2022, Connecticut became the fifth state in the nation to pass its own omnibus privacy legislation, joining California, Virginia, Colorado, and Utah. While Senate Bill 6, the Personal Data Privacy and Online...more
5/23/2022
/ Attorney General ,
California Privacy Rights Act (CPRA) ,
Connecticut ,
Data Controller ,
Data Privacy ,
Gramm-Leach-Blilely Act ,
Health Insurance Portability and Accountability Act (HIPAA) ,
Opt-Outs ,
Right To Cure ,
Right To Know ,
State Privacy Laws
As artificial intelligence (AI) becomes increasingly embedded into products, services, and business decisions, state and local lawmakers have been considering and passing a range of laws addressing AI....more
Big changes are underway in California privacy, with a brand new privacy agency, forthcoming new privacy rules due by July, and a new comprehensive privacy framework going into effect in January 2023. As businesses subject to...more
Privacy In Focus®-
The last several years have seen major developments in state privacy laws. While Congress remains gridlocked on the federal privacy front, states enacted omnibus data privacy bills that will impact...more
1/19/2022
/ California ,
California Consumer Privacy Act (CCPA) ,
California Privacy Rights Act (CPRA) ,
CDPA ,
Colorado ,
Comment Period ,
Compliance ,
Consumer Privacy Rights ,
Corporate Counsel ,
Data Collection ,
Data Mapping ,
Data Privacy ,
Data Protection ,
Privacy Policy ,
Proposed Amendments ,
State Data Privacy Laws ,
State Privacy Laws ,
Third-Party ,
Virginia
As 2021 draws to a close, businesses subject to California’s privacy laws should pay close attention to developments underway in that state that will have broad impacts on compliance strategies. On September 22, 2021, the...more
On September 22, 2021, the California Privacy Protection Agency (CPPA or Agency)—the new agency established by the California Privacy Rights and Enforcement Act (CPRA)—released an Invitation for Preliminary Comments on...more
Companies subject to the California Consumer Privacy Act (CCPA) are required to update their online privacy policies “at least once every 12 months,” as detailed in the statute. For many companies that updated their CCPA...more
In March 2021, with the passage of the Consumer Data Protection Act (CDPA), Virginia took its place as the second state to enact comprehensive data privacy legislation. Virginia follows California, where voters recently...more
The California Privacy Rights Act (CPRA) – passed by voters in November – amends the California Consumer Privacy Act (CCPA) in a number of critical ways. Join us for a discussion of the CPRA’s key provisions, the issues on...more
On November 3, 2020, mere months after the California Consumer Protection Act (CCPA) took effect, California voters approved a ballot initiative that will significantly change that law and the privacy obligations for entities...more
Next month, California voters will cast their votes on Proposition 24, a ballot initiative that, if passed, will enact the California Privacy Rights and Enforcement Act of 2020 (CPRA). The CPRA would significantly amend the...more
10/27/2020
/ Ballot Measures ,
California Consumer Privacy Act (CCPA) ,
California Privacy Rights Act (CPRA) ,
Comment Period ,
Consumer Privacy Rights ,
Cybersecurity ,
Data Collection ,
Data Management ,
Data Privacy ,
Data Protection ,
Health Insurance Portability and Accountability Act (HIPAA) ,
Information Governance ,
Legislative Agendas ,
Personal Data ,
State and Local Government