On June 7, 2024, the New York Legislature passed two bills to protect children online. The Stop Addictive Feeds Exploitation (SAFE) for Kids Act, S7694A, prohibits social media platforms from providing defined "addictive...more
6/27/2024
/ Civil Monetary Penalty ,
COPPA ,
Damages ,
Data Collection ,
Data Selling ,
Data-Sharing ,
Enforcement ,
Minor Children ,
New Legislation ,
New York ,
Notification Requirements ,
Online Safety for Children ,
Parental Consent ,
Personal Data ,
Privacy Laws ,
Rulemaking Process ,
State Bans ,
State Privacy Laws ,
Third-Party
On May 25, 2024, Minnesota Governor Tim Walz signed the Minnesota Consumer Data Privacy Act (the "Act"), which takes effect on July 31, 2025, for most controllers and on July 31, 2029, for certain postsecondary educational...more
6/5/2024
/ Consumer Privacy Rights ,
COPPA ,
Data Collection ,
Data Controller ,
Data Protection ,
Data Security ,
Data Selling ,
Enforcement ,
Fair Credit Reporting Act (FCRA) ,
Gramm-Leach-Blilely Act ,
Health Insurance Portability and Accountability Act (HIPAA) ,
New Legislation ,
Opt-Outs ,
Personal Data ,
PHI ,
State Privacy Laws ,
Targeted Digital Advertising
On May 17, 2024, Virginia Governor Glenn Youngkin signed SB 361/HB 707 amending the Virginia Consumer Data Protection Act ("VCDPA") to provide heightened protections to consumers under 18 years of age, not just those under...more
6/3/2024
/ COPPA ,
Data Collection ,
Data Protection ,
Data Selling ,
Geolocation ,
Minor Children ,
Parental Consent ,
Personal Data ,
Privacy Laws ,
State Privacy Laws ,
Targeted Digital Advertising
On May 10, 2024, Maryland Governor Wes Moore signed the Maryland Online Data Privacy Act of 2024 ("MODPA" or the "Act"), bringing the number of comprehensive state privacy laws to 18and establishing a new, more restrictive...more
5/16/2024
/ Consumer Privacy Rights ,
Data Privacy ,
Data Protection ,
Enforcement ,
Minor Children ,
Opt-Outs ,
Personal Data ,
PHI ,
Sensitive Personal Information ,
State Privacy Laws ,
Sunset Provisions
Legislation requires data brokers to register with the California Privacy Protection Agency and comply with a one-stop consumer deletion mechanism by 2026 -
The wave of data privacy legislation in California continues as...more
10/4/2023
/ Audits ,
California ,
California Privacy Protection Agency (CPPA) ,
Data Brokers ,
Data Deletion ,
Data Privacy ,
Data Protection ,
Data Security ,
Disclosure Requirements ,
Legislative Agendas ,
New Legislation ,
Personal Data ,
Regulatory Oversight ,
Reporting Requirements ,
State Legislatures
Oregon becomes the 12th state with a comprehensive consumer data privacy law -
The Oregon Consumer Privacy Act (OCPA) became law on July 18, 2023. Oregon is the twelfth state to enact a comprehensive consumer data privacy...more
7/20/2023
/ Consumers ,
Data Collection ,
Data Privacy ,
Data Protection ,
Data Protection Acts ,
Data Security ,
Legislative Agendas ,
New Legislation ,
New Regulations ,
Oregon ,
Personal Data ,
Privacy Laws ,
State and Local Government ,
State Privacy Laws
The Connecticut legislature passed and the governor recently signed amendments to the Connecticut Data Privacy Act (CTDPA), the state's comprehensive consumer data privacy law, which goes into effect July 1, 2023. Some...more
7/3/2023
/ Confidential Information ,
Connecticut ,
Data Privacy ,
Email ,
Enforcement Actions ,
Minors ,
New Amendments ,
Personal Data ,
PHI ,
Sensitive Personal Information ,
Social Media
INCDPA takes business-friendly approach to data privacy, following Virginia, Utah, and Iowa -
Indiana has become the seventh state to enact a "comprehensive" data privacy law, joining California, Virginia, Colorado,...more
Following the U.S. Supreme Court's decision in Dobbs v. Jackson Women's Health Organization overruling Roe v. Wade, businesses and organizations that process personal data—including those outside the health or reproductive...more
Late last month, after two years of negotiation, the Connecticut legislature passed an omnibus data privacy bill, which the governor signed this week, making Connecticut the fifth state to enact comprehensive privacy...more
With passage of the Utah Consumer Privacy Act (UCPA), Utah will become the fourth state to adopt omnibus consumer privacy legislation—following California, Virginia, and Colorado— when Utah Governor Spencer Cox signs the...more
France's data protection authority (DPA), Commission Nationale de l'Informatique et des Libertés (CNIL), announced its ruling on February 10, 2022, that the use of Google Analytics by companies in the EU violates Article 44...more
On July 7, Colorado became the third state to enact comprehensive data privacy legislation, following California and Virginia. The Colorado Privacy Act (CPA), modeled largely after its predecessor in Virginia (the Consumer...more
Virginia's legislature has set the stage for the Commonwealth to join California as one of two states with comprehensive consumer privacy legislation. The Virginia Consumer Data Protection Act (VCDPA) pulls certain policy...more
2/23/2021
/ Biometric Information ,
Consumer Privacy Rights ,
Cybersecurity ,
Data Collection ,
Data Management ,
Data Privacy ,
Data Protection ,
Information Governance ,
Opt-Outs ,
Personal Data ,
Personally Identifiable Information ,
Privacy Laws ,
State and Local Government ,
Virginia
The Court of Justice of the European Union (CJEU) issued a long awaited opinion yesterday (July 16, 2020) in Data Protection Commissioner v. Schrems1 finding the EU-U.S. Privacy Shield inadequate for lawfully transferring the...more