With a private right of action and ambiguous and undefined terms, businesses deploying consumer-facing interactive AI will want to ensure they are not unintentionally triggering the bill’s provisions.
...more
3/17/2026
/ Artificial Intelligence ,
Disclosure Requirements ,
Emerging Technologies ,
Innovative Technology ,
Machine Learning ,
Minors ,
New Legislation ,
Pending Legislation ,
Private Right of Action ,
Regulatory Agenda ,
Regulatory Requirements ,
State Legislatures ,
Washington
Key point: If enacted, the bill will require GenAI systems to provide a conspicuous warning that GenAI outputs may be inaccurate.
...more
3/13/2026
/ Algorithms ,
Artificial Intelligence ,
Corporate Counsel ,
Disclosure Requirements ,
Emerging Technologies ,
Enforcement Actions ,
Innovative Technology ,
Machine Learning ,
New York ,
Proposed Legislation ,
Regulatory Agenda ,
Regulatory Oversight ,
Regulatory Requirements ,
State Legislatures
With a private right of action, statutory damages, and ambiguous and undefined terms, businesses deploying consumer-facing interactive AI will want to make sure they are not unintentionally triggering the bill’s provisions.
...more
3/10/2026
/ Artificial Intelligence ,
Corporate Counsel ,
Innovative Technology ,
Machine Learning ,
Minors ,
New Legislation ,
Oregon ,
Private Right of Action ,
Regulatory Requirements ,
State and Local Government ,
State Legislatures ,
Statutory Damages
Key point: The California attorney general announced a $2.75 million fine against a company for CCPA violations for failing to honor requests to opt out of the sale or sharing of personal information across all devices and...more
2/13/2026
/ California ,
California Consumer Privacy Act (CCPA) ,
California Privacy Protection Agency (CPPA) ,
Consumer Privacy Rights ,
Data Privacy ,
Enforcement Actions ,
Opt-Outs ,
Personal Information ,
Privacy Laws ,
Settlement ,
State Attorneys General ,
State Privacy Laws
Key point: The Connecticut Office of the Attorney General issued the third annual enforcement report under the Connecticut Data Privacy Act, focusing on the office’s privacy and security efforts, consumer complaints, data...more
Key point: Kentucky attorney general files a lawsuit against an artificial intelligence chatbot company, eight days after the Kentucky Consumer Data Protection Act went into effect.
On January 8, the Kentucky attorney...more
1/12/2026
/ Artificial Intelligence ,
Bots ,
Consumer Protection Laws ,
COPPA ,
Data Collection ,
Data Privacy ,
Enforcement Actions ,
Minors ,
New Legislation ,
Online Safety for Children ,
Parental Consent ,
State Attorneys General ,
State Privacy Laws ,
Unfair or Deceptive Trade Practices
Key point: Businesses subject to the CCPA now must conduct risk assessments for certain types of processing activities and, starting in 2028, must certify to California regulators that they completed the assessments.
The...more
1/6/2026
/ California ,
California Consumer Privacy Act (CCPA) ,
California Privacy Protection Agency (CPPA) ,
Compliance ,
Corporate Counsel ,
Data Privacy ,
Data Protection ,
Privacy Laws ,
Regulatory Requirements ,
Risk Assessment ,
Risk Management
The California AG’s fifth CCPA-related enforcement action focuses on the CCPA’s right to opt out of sales/shares and on children’s privacy provisions and, with respect to the right to opt out, it should trigger businesses to...more
11/4/2025
/ California ,
California Consumer Privacy Act (CCPA) ,
Consumer Privacy Rights ,
Cookies ,
Data Privacy ,
Data Protection ,
Data-Sharing ,
Enforcement Actions ,
Mobile Apps ,
Online Safety for Children ,
Opt-Outs ,
State Attorneys General ,
Unfair Competition Law (UCL) ,
Web Tracking
A federal district court judge rejected the claim that the disclosure law violates the First Amendment.
...more
10/13/2025
/ Algorithms ,
Automated Decision Systems (ADS) ,
Constitutional Challenges ,
Corporate Counsel ,
Disclosure Requirements ,
First Amendment ,
Goods or Services ,
New York ,
Pricing ,
Retail Market ,
State Attorneys General
Our new chart identifies and analyzes the rights provided by the 19 state consumer data privacy laws.
One way state consumer data privacy laws vary is in the rights they provide to consumers. In 2025, this patchwork became...more
The enforcement action alleges that the retailer failed to provide adequate privacy disclosures to website visitors and job applicants, failed to effectuate opt-out requests, including recognizing the Global Privacy Control...more
10/1/2025
/ California ,
California Consumer Privacy Act (CCPA) ,
California Privacy Protection Agency (CPPA) ,
Consumer Privacy Rights ,
Data Privacy ,
Data Protection ,
Enforcement Actions ,
Opt-Outs ,
Regulatory Violations ,
Retailers ,
State Privacy Laws ,
Website Owner Liability ,
Websites
Businesses subject to the CCPA must comply with extensive new regulations....more
9/24/2025
/ Automated Decision Systems (ADS) ,
California ,
California Consumer Privacy Act (CCPA) ,
California Privacy Protection Agency (CPPA) ,
Cyber Insurance ,
Cybersecurity ,
Data Privacy ,
Data Protection ,
New Regulations ,
Office of Administrative Law ,
Risk Assessment ,
Rulemaking Process