The Tennessee Information Protection Act (TIPA) passed unanimously through both houses of the Tennessee legislature and was signed by Governor Bill Lee on May 11, 2023. Tennessee joins seven states in enacting a comprehensive...more
5/16/2023
/ Biometric Information ,
Consumer Privacy Rights ,
Controlled Substances Act ,
COPPA ,
Fair Credit Reporting Act (FCRA) ,
FERPA ,
Gramm-Leach-Blilely Act ,
HCQIA ,
Health Insurance Portability and Accountability Act (HIPAA) ,
HITECH Act ,
New Legislation ,
NIST ,
Noncompliance ,
Personal Information ,
State Privacy Laws ,
Title V
INCDPA takes business-friendly approach to data privacy, following Virginia, Utah, and Iowa -
Indiana has become the seventh state to enact a "comprehensive" data privacy law, joining California, Virginia, Colorado,...more
On April 27, 2023, Washington Governor Jay Inslee signed into law the My Health My Data Act (the "Act"), which will regulate the collection, use, and disclosure of "consumer health data" ("Consumer Health Data" or "CHD"). The...more
5/2/2023
/ Business Associates ,
Covered Entities ,
Data Privacy ,
Data Protection ,
Data Security ,
Health Care Providers ,
Health Insurance Portability and Accountability Act (HIPAA) ,
OCR ,
Patient Privacy Rights ,
PHI ,
Private Right of Action
March 2023 was a consequential month for data privacy law. The California Office of Administrative Law (OAL) formally approved regulations issued by the California Privacy Protection Agency (CPPA) implementing the California...more
With the unanimous passage of Senate File 262 by the Iowa House and Senate and the Governor's signature Tuesday, the Hawkeye State joins California, Colorado, Connecticut, Virginia, and Utah as one of six states with a...more
3/31/2023
/ Consumer Privacy Rights ,
Corporate Counsel ,
Cybersecurity ,
Data Collection ,
Data Privacy ,
Data Protection ,
Data Security ,
New Legislation ,
Personal Information ,
Privacy Laws ,
Regulatory Reform ,
State Data Breach Notification Statutes ,
State Data Privacy Laws
The California Privacy Protection Agency ("CPPA" or "Agency") is seeking preliminary comments on proposed rulemaking for risk assessments and cybersecurity audits for higher-risk data processing activities, and consumer...more
The Colorado Attorney General's Office has published its much-anticipated proposed rules (Proposed Rules) implementing the Colorado Privacy Act (CPA), which, as we discussed in an earlier blog post, was enacted on July 7,...more
On August 29, 2022, the Federal Trade Commission (FTC) announced it had filed a complaint in Idaho federal district court against Kochava Inc., a data broker, seeking injunctive relief on account of alleged violations of...more
The Office of the California Attorney General (OAG) announced on August 24, 2022, a settlement with Sephora, Inc., as part of a recent enforcement sweep of online retailers. OAG alleged Sephora violated the California...more
The Federal Trade Commission (FTC) may have just taken its first steps towards the creation of generally applicable federal privacy and security rules. On Aug. 11, 2022, the FTC published an advance notice of proposed...more
Following the U.S. Supreme Court's decision in Dobbs v. Jackson Women's Health Organization overruling Roe v. Wade, businesses and organizations that process personal data—including those outside the health or reproductive...more
The California Privacy Protection Agency Board (the "CPPA Board") announced on May 27, 2022, that it would hold a public meeting on June 8 to discuss, among other things, a set of detailed proposed regulations to "Implement,...more
6/6/2022
/ California Consumer Privacy Act (CCPA) ,
Consumer Privacy Rights ,
Cybersecurity ,
Data Collection ,
Data Privacy ,
Data Protection ,
Data Security ,
Opt-Outs ,
Personal Information ,
Proposed Regulation ,
State Privacy Laws
Late last month, after two years of negotiation, the Connecticut legislature passed an omnibus data privacy bill, which the governor signed this week, making Connecticut the fifth state to enact comprehensive privacy...more
Update March 31, 2022: Utah Governor Spencer Cox signed the bill into law March 24, 2022.
With passage of the Utah Consumer Privacy Act (UCPA), Utah will become the fourth state to adopt omnibus consumer privacy...more
The California Office of Attorney General (OAG) on March 10, 2022, issued its first opinion interpreting the California Consumer Privacy Act (CCPA), addressing when businesses must disclose internally generated "inferences"...more
Algorithmic disgorgement is back in the spotlight at the FTC, this time in connection with a recently announced settlement with WW International, Inc., formerly known as Weight Watchers (WW), and a subsidiary called Kurbo,...more
With passage of the Utah Consumer Privacy Act (UCPA), Utah will become the fourth state to adopt omnibus consumer privacy legislation—following California, Virginia, and Colorado— when Utah Governor Spencer Cox signs the...more
France's data protection authority (DPA), Commission Nationale de l'Informatique et des Libertés (CNIL), announced its ruling on February 10, 2022, that the use of Google Analytics by companies in the EU violates Article 44...more
On September 30, 2021, Senators Ed Markey (D-MA) and Richard Blumenthal (D-CT) and Representative Kathy Castor (D-FL) introduced S.2918, the Kids Internet Design and Safety (KIDS) Act, which would expand online protections...more
Beginning September 2, 2021, companies that offer certain types of online services in the U.K. must implement a new code of practice governing the handling of children's personal data (the Children's Code or Code).1 The...more
On July 7, Colorado became the third state to enact comprehensive data privacy legislation, following California and Virginia. The Colorado Privacy Act (CPA), modeled largely after its predecessor in Virginia (the Consumer...more
Building on prior guidance issued in 2020, the Federal Trade Commission (FTC) recently warned in a new blog post that it will use its authority under existing laws to take enforcement action against companies that sell or use...more
Last week, Alaska joined the growing number of states considering comprehensive consumer privacy legislation when, at the behest of Governor Dunleavy, the Consumer Data Privacy Act was introduced in both chambers of the...more
Virginia's legislature has set the stage for the Commonwealth to join California as one of two states with comprehensive consumer privacy legislation. The Virginia Consumer Data Protection Act (VCDPA) pulls certain policy...more
2/23/2021
/ Biometric Information ,
Consumer Privacy Rights ,
Cybersecurity ,
Data Collection ,
Data Management ,
Data Privacy ,
Data Protection ,
Information Governance ,
Opt-Outs ,
Personal Data ,
Personally Identifiable Information ,
Privacy Laws ,
State and Local Government ,
Virginia
As expected, Californians voted on November 3, 2020, to adopt the California Privacy Rights Act (CPRA), better known as Proposition 24. The CPRA amends the California Consumer Privacy Act (CCPA) in subtle and significant ways...more