U.S. companies and organizations have entered a new era of sweeping restrictions on cross-border data transfers. The Department of Justice's (DOJ) Final Rule, "Preventing Access to U.S. Sensitive Personal Data and...more
3/18/2025
/ Data Privacy ,
Data Protection ,
Data Security ,
Department of Justice (DOJ) ,
International Data Transfers ,
International Trade ,
National Security ,
Privacy Laws ,
Regulatory Requirements ,
Risk Management ,
Sensitive Personal Information
Last month, the United States District Court for the Western District of Texas enjoined parts of the state's Securing Children Online Through Parental Empowerment (SCOPE) Act, a law requiring certain digital service providers...more
3/12/2025
/ Advertising ,
Constitutional Challenges ,
Consumer Protection Laws ,
COPPA ,
Data Privacy ,
Digital Service Providers ,
First Amendment ,
Minors ,
Online Safety for Children ,
Privacy Laws ,
Regulatory Requirements ,
Social Media ,
State Attorneys General
The California Privacy Protection Agency (CPPA) is starting the year by implementing new data broker regulations, which took effect in late December, and continuing to move toward the completion of new rules for automated...more
1/20/2025
/ California Consumer Privacy Act (CCPA) ,
California Privacy Protection Agency (CPPA) ,
Consumer Privacy Rights ,
Data Brokers ,
Data Privacy ,
Personal Data ,
Personal Information ,
Popular ,
Privacy Laws ,
Regulatory Agenda ,
State Privacy Laws
On January 8, 2025, the Department of Justice (DOJ) published in the Federal Register a Final Rule, "Preventing Access to U.S. Sensitive Personal Data and Government Related Data by Countries of Concern or Covered Persons,"...more
1/17/2025
/ Compliance ,
Covered Person ,
Data Brokers ,
Data Privacy ,
Data Protection ,
Data Security ,
Department of Justice (DOJ) ,
Final Rules ,
International Data Transfers ,
Personal Data ,
Privacy Laws ,
Regulatory Requirements ,
Sensitive Personal Information
The California Privacy Protection Agency (CPPA) made headlines on November 14, 2024, by issuing its first significant monetary penalties related to data brokers, totaling nearly $70,000, in settlements with two data brokers,...more
11/20/2024
/ California Privacy Protection Agency (CPPA) ,
Civil Monetary Penalty ,
Compliance ,
Data Brokers ,
Enforcement Actions ,
Personal Data ,
Personal Information ,
Proposed Regulation ,
Registration Requirement ,
Reporting Requirements ,
State Privacy Laws
On September 19, 2024, the Federal Trade Commission (FTC or Commission) released a long-awaited staff report, A Look Behind the Screens: Examining the Data Practices of Social Media and Video Streaming Services (the Report),...more
9/26/2024
/ Advertising ,
Artificial Intelligence ,
Data Collection ,
Data Processors ,
Data-Sharing ,
Digital Advertising Alliance ,
Federal Trade Commission (FTC) ,
Information Reports ,
Internet Streaming ,
Marketing ,
Regulatory Reform ,
Social Media
With the 2024 elections well underway, advertisers of all stripes are seeking new and more efficient ways to reach potential voters, donors, and supporters across platforms. The market for political advertising on U.S....more
On June 18, 2024, California Attorney General (AG) Rob Bonta announced a third CCPA enforcement settlement, this one with Tilting Point Media LLC. Tilting Point was allegedly using its mobile app game "SpongeBob: Krusty...more
7/10/2024
/ California Consumer Privacy Act (CCPA) ,
Civil Monetary Penalty ,
COPPA ,
Data Collection ,
Data Privacy ,
Enforcement Actions ,
Minors ,
Mobile Apps ,
Personal Data ,
Settlement ,
State Attorneys General ,
Unfair Competition
On May 30, 2024, the Federal Trade Commission (FTC or the Commission) published finalized amendments to the Health Breach Notification Rule (HBNR) that augment the prior rule’s scope and application. The updated final rule...more
Last week, a federal district court in Texas issued a decision declaring unlawful and vacating a central component of a guidance document (the Bulletin) from the Department of Health and Human Services (HHS) Office for Civil...more
6/28/2024
/ Business Associates ,
Cookies ,
Covered Entities ,
Department of Health and Human Services (HHS) ,
Guidance Update ,
Health Care Providers ,
Health Insurance Portability and Accountability Act (HIPAA) ,
Mobile Apps ,
OCR ,
PHI ,
Tracking Systems ,
Web Tracking
On July 1, 2024, a new wave of state consumer privacy laws will go into effect in Florida, Oregon, and Texas, ushering in additional obligations for companies. This wave of new laws will be closely followed by a Montana...more
On April 20, 2024, the House of Representatives passed H.R.8038, the 21st Century Peace through Strength Act ("supplemental"), which includes a version of H.R.7520, the Protecting Americans' Data from Foreign Adversaries Act...more
4/26/2024
/ Biden Administration ,
China ,
Data Brokers ,
Data Protection ,
Department of Justice (DOJ) ,
Enforcement Authority ,
Executive Orders ,
Federal Trade Commission (FTC) ,
FTC Act ,
International Data Transfers ,
Iran ,
North Korea ,
Personal Data ,
Personally Identifiable Information ,
Russia ,
Sensitive Personal Information ,
Unfair or Deceptive Trade Practices
In 2020, New Jersey's Daniel's Law was enacted in response to the tragic death of Daniel Anderl, the son of a New Jersey judge. Daniel's Law established a new right for judges, law enforcement officers, certain other state...more
Washington's My Health My Data Act (MHMDA) goes into effect on March 31, 2024, for most entities subject to the law. The MHMDA imposes new notice and consent requirements for the processing of "consumer health data," with...more
In 2023, eight more states passed comprehensive data privacy legislation, adding to the six that had passed broadly applicable privacy laws in years prior. In addition, several issue-specific laws regulating health data, data...more
The Federal Trade Commission (FTC) and the U.S. Department of Health and Human Services' Office for Civil Rights (OCR) recently published a warning letter that they jointly sent to more than 130 hospital systems and...more
10/4/2023
/ Advertising ,
Breach Notification Rule ,
Business Associates ,
Consumer Privacy Rights ,
Data Privacy ,
Data Security ,
Department of Health and Human Services (HHS) ,
Federal Trade Commission (FTC) ,
Health Insurance Portability and Accountability Act (HIPAA) ,
Hospitals ,
Mobile Apps ,
Notice Requirements ,
PHI ,
Telehealth ,
Tracking Systems ,
Unauthorized Disclosure ,
Warning Letters ,
Websites
A number of new state privacy laws now govern and mandate certain contractual requirements for collecting, sharing, and processing of personal information. Personal information is generally defined as data that is linked or...more