Businesses in the US will be subject to a lot more scrutiny from consumers and regulators in 2025. With eight new data privacy laws going into effect over the course of the year, attorneys general will be eager to show...more
Navigating the stringent requirements of data subject access requests (DSARs) can feel like summitting a mountain—the path forward isn’t always clear, pitfalls abound, and you’re fighting gravity all the way....more
It’s official. Kentucky will join Indiana, New Hampshire, and a slew of other states with the enactment of a comprehensive data privacy act.
The Kentucky Consumer Data Protection Act (KCDPA)–at least this iteration of...more
New Hampshire has joined the many other states implementing comprehensive data privacy laws in the absence of an overarching federal regulation. While this means greater complexity for businesses, we’ve got you covered. Read...more
Most people find data privacy compliance to be complicated enough. So, when they encounter the concept of data mapping—something that isn’t an explicit requirement in any data privacy law—many find themselves scratching their...more
Preference centers sit at the intersection of user experience and compliance. Whether you’re a compliance professional, marketer, or engineer, a well-designed preference center can help you make an impact on how your audience...more
For your business’s audience, choice and control are paramount. Nobody likes having no say in how they engage with a business or what that business does with their information....more
CPRA enforcement has gone through many twists and turns over the years, and it’s completely reasonable to be a bit confused about what’s happened.
After a last-minute reversal, the CPRA is fully enforceable as of July...more
With so much of our society’s data flowing through digital platforms, keeping it safe is increasingly crucial. If your business has access to any personal information (PI)—a person's full name, phone number, email address,...more
Consumers in the Garden State now have comprehensive data privacy protections. But what does that mean for New Jerseyans?
With Gov. Phil Murphy signing Senate Bill 332 (S332/A1971), businesses and entities such as...more
Indiana is now part of a growing list of states that extend data protection to its residents, all thanks to the Indiana Consumer Data Protection Act (INCDPA). Just like other states, they're making sure consumers have their...more
Tennessee has entered the consumer privacy playing field with the Tennessee Information Protection Act (TIPA), joining a growing cohort of American states that refuse to wait for a privacy law at the federal level....more
Oregon has joined the ranks of states to pass a comprehensive consumer privacy act. Senate Bill 619 (SB 619), also known as the Oregon Consumer Privacy Act or OCPA, is the culmination of four years of work by the Oregon...more
In the absence of a federal privacy law, states have been enacting their own, creating a patchwork of compliance laws with their own nuances.
On June 18, 2023, Texas Gov. Greg Abbot signed the Texas Data Privacy and...more
Any business interested in serving the fifth largest economy in the world needs to become compliant with the California Privacy Rights Act (CPRA). But that’s easier said than done.
The law has so many individual...more
It isn’t always easy for non-privacy experts to understand the point of all these data privacy regulations—surely, we’re all used to the idea that our data is up for grabs?...more
Jurisdictions across the globe are implementing their own unique take on data privacy legislation, and Canada’s Quebec province is no exception. Read on to learn all about what makes this law unique and how you can comply....more
Data subject access requests (DSARs), records of processing activities (RoPAs), vendor risk management, a dozen other data privacy compliance requirements—all of them depend upon or are significantly facilitated by a map of...more