On April 11, the Department of Justice's National Security Division (NSD) published new guidance on recent measures to restrict the ability of adversarial foreign governments and other foreign entities of concern to access...more
5/2/2025
/ Compliance Dates ,
Data Privacy ,
Data Security ,
Department of Justice (DOJ) ,
Enforcement Guidance ,
Final Rules ,
International Data Transfers ,
National Security ,
New Guidance ,
Risk Management ,
Time Extensions
U.S. companies and organizations have entered a new era of sweeping restrictions on cross-border data transfers. The Department of Justice's (DOJ) Final Rule, "Preventing Access to U.S. Sensitive Personal Data and...more
3/18/2025
/ Data Privacy ,
Data Protection ,
Data Security ,
Department of Justice (DOJ) ,
International Data Transfers ,
International Trade ,
National Security ,
Privacy Laws ,
Regulatory Requirements ,
Risk Management ,
Sensitive Personal Information
Last month, the United States District Court for the Western District of Texas enjoined parts of the state's Securing Children Online Through Parental Empowerment (SCOPE) Act, a law requiring certain digital service providers...more
3/12/2025
/ Advertising ,
Constitutional Challenges ,
Consumer Protection Laws ,
COPPA ,
Data Privacy ,
Digital Service Providers ,
First Amendment ,
Minors ,
Online Safety for Children ,
Privacy Laws ,
Regulatory Requirements ,
Social Media ,
State Attorneys General
The California Privacy Protection Agency (CPPA) is starting the year by implementing new data broker regulations, which took effect in late December, and continuing to move toward the completion of new rules for automated...more
1/20/2025
/ California Consumer Privacy Act (CCPA) ,
California Privacy Protection Agency (CPPA) ,
Consumer Privacy Rights ,
Data Brokers ,
Data Privacy ,
Personal Data ,
Personal Information ,
Popular ,
Privacy Laws ,
Regulatory Agenda ,
State Privacy Laws
On January 8, 2025, the Department of Justice (DOJ) published in the Federal Register a Final Rule, "Preventing Access to U.S. Sensitive Personal Data and Government Related Data by Countries of Concern or Covered Persons,"...more
1/17/2025
/ Compliance ,
Covered Person ,
Data Brokers ,
Data Privacy ,
Data Protection ,
Data Security ,
Department of Justice (DOJ) ,
Final Rules ,
International Data Transfers ,
Personal Data ,
Privacy Laws ,
Regulatory Requirements ,
Sensitive Personal Information
On June 18, 2024, California Attorney General (AG) Rob Bonta announced a third CCPA enforcement settlement, this one with Tilting Point Media LLC. Tilting Point was allegedly using its mobile app game "SpongeBob: Krusty...more
7/10/2024
/ California Consumer Privacy Act (CCPA) ,
Civil Monetary Penalty ,
COPPA ,
Data Collection ,
Data Privacy ,
Enforcement Actions ,
Minors ,
Mobile Apps ,
Personal Data ,
Settlement ,
State Attorneys General ,
Unfair Competition
On July 1, 2024, a new wave of state consumer privacy laws will go into effect in Florida, Oregon, and Texas, ushering in additional obligations for companies. This wave of new laws will be closely followed by a Montana...more
Washington's My Health My Data Act (MHMDA) goes into effect on March 31, 2024, for most entities subject to the law. The MHMDA imposes new notice and consent requirements for the processing of "consumer health data," with...more
In 2023, eight more states passed comprehensive data privacy legislation, adding to the six that had passed broadly applicable privacy laws in years prior. In addition, several issue-specific laws regulating health data, data...more
The Federal Trade Commission (FTC) and the U.S. Department of Health and Human Services' Office for Civil Rights (OCR) recently published a warning letter that they jointly sent to more than 130 hospital systems and...more
10/4/2023
/ Advertising ,
Breach Notification Rule ,
Business Associates ,
Consumer Privacy Rights ,
Data Privacy ,
Data Security ,
Department of Health and Human Services (HHS) ,
Federal Trade Commission (FTC) ,
Health Insurance Portability and Accountability Act (HIPAA) ,
Hospitals ,
Mobile Apps ,
Notice Requirements ,
PHI ,
Telehealth ,
Tracking Systems ,
Unauthorized Disclosure ,
Warning Letters ,
Websites
A number of new state privacy laws now govern and mandate certain contractual requirements for collecting, sharing, and processing of personal information. Personal information is generally defined as data that is linked or...more