As we close out the first quarter of 2025, one thing is unmistakable: California’s regulatory efforts continue to center on data brokers.
So far this year, the California Privacy Protection Agency (CPPA) proposed...more
After much anticipation, on November 8, the California Privacy Protection Agency (CPPA) Board voted to advance proposed regulations for insurance, cybersecurity audits, risk assessments, and automated decision-making...more
11/27/2024
/ Artificial Intelligence ,
Automated Decision Systems (ADS) ,
California ,
California Privacy Protection Agency (CPPA) ,
Cybersecurity ,
Data Brokers ,
Data Protection ,
Privacy Laws ,
Risk Assessment ,
Risk Management ,
Rulemaking Process ,
Technology Sector
On Friday, February 9, as the country collectively packed up and prepared to head home for Super Bowl weekend, the Third Appellate District of the California Appellate Court issued an Order granting the California Privacy...more
This Update is the third installment of the ongoing series covering Washington state’s new My Health My Data Act (the Act). Part 1 provided a high-level outline of the entities regulated under the Act and the corresponding...more
6/8/2023
/ Biometric Information ,
Genetic Materials ,
Gramm-Leach-Blilely Act ,
Health Insurance Portability and Accountability Act (HIPAA) ,
Healthcare ,
HIPAA Privacy Rule ,
Mental Health ,
PHI ,
Privacy Laws ,
Reproductive Healthcare Issues ,
Small Business
As detailed in Part 1 of this ongoing series, Washington Governor Jay Inslee signed the state’s My Health My Data Act (the Act) into law on April 27, 2023. The Act is a first-of-its-kind law that creates new privacy...more
The Colorado attorney general’s office sent shockwaves throughout the privacy world on September 30, 2022, when it published its proposed Colorado Privacy Act (CPA) draft rules (Draft Rules). The Draft Rules are complex and...more
10/17/2022
/ Biometric Information ,
California ,
California Privacy Rights Act (CPRA) ,
Colorado ,
Consent ,
Consumer Privacy Rights ,
Corporate Counsel ,
Data Controller ,
Data Protection ,
Data Security ,
Opt-Outs ,
Personal Data ,
Privacy Laws ,
Proposed Rules ,
Technology Sector