With Congress opting to not enact a moratorium on state artificial intelligence (AI) legislation, states continue to enact laws governing the development and use of AI systems. Through 2025, states have debated both broad and...more
California Governor Gavin Newsom (D) has signed into law several bills imposing new privacy obligations on businesses that handle personal information. These measures, together with the ever-growing patchwork of state privacy...more
10/10/2025
/ California Consumer Privacy Act (CCPA) ,
California Privacy Protection Agency (CPPA) ,
Consumer Privacy Rights ,
Corporate Counsel ,
Data Brokers ,
Enforcement Actions ,
New Legislation ,
Opt-Outs ,
Personal Data ,
Privacy Laws ,
State Privacy Laws
The California Privacy Protection Agency (CPPA) shows no signs of slowing its California Consumer Privacy Act (CCPA) enforcement. Its latest action against Tractor Supply Company once again targets CCPA opt-out compliance,...more
10/8/2025
/ California Consumer Privacy Act (CCPA) ,
California Privacy Protection Agency (CPPA) ,
Consumer Privacy Rights ,
Data Privacy ,
Enforcement Actions ,
Opt-Outs ,
Privacy Laws ,
Privacy Policy ,
Settlement ,
State Privacy Laws ,
Statutory Violations
The Department of Justice's (DOJ) Final Rule, Preventing Access to U.S. Sensitive Personal Data and Government Related Data by Countries of Concern or Covered Persons (the "Bulk Data Rule"), effective since April 8, 2025, is...more
In a coordinated move earlier this month, regulators in California, Colorado, and Connecticut launched a joint privacy sweep, signaling a continued focus on state privacy law compliances, particularly with regard to honoring...more
New state omnibus privacy laws becoming effective in the next six months include quirks when compared with the typical trends in such laws. Amendments to existing privacy laws and a wave of regulatory proposals add another...more
Over a year after his office’s last privacy enforcement action, on July 1, 2025, California Attorney General Rob Bonta (AG) announced a new California Consumer Privacy Act (CCPA) settlement with Healthline Media LLC...more
7/18/2025
/ Advertising ,
California Consumer Privacy Act (CCPA) ,
Contract Terms ,
Data Privacy ,
Disclosure Requirements ,
Enforcement Actions ,
Opt-Outs ,
Personal Information ,
State Attorneys General ,
State Privacy Laws ,
Statutory Violations ,
Third-Party ,
Third-Party Service Provider
In April, the Office of the Connecticut Attorney General (OAG) released an updated enforcement report under the Connecticut Data Privacy Act (CTDPA) to highlight privacy enforcement actions taken in 2024....more
Another month brings another California Privacy Protection Agency (CPPA) enforcement action, the agency's second enforcement action under the California Consumer Privacy Act (CCPA)....more
Negotiating a data processing agreement (DPA) is typically a necessary step when engaging vendors that handle personal data. However, these negotiations have become time consuming and complex, given the evolving privacy...more
5/16/2025
/ Audits ,
Contract Negotiations ,
Contract Terms ,
Data Controller ,
Data Privacy ,
Data Processors ,
Data Security ,
Digital Services ,
Personal Data ,
Privacy Laws ,
Risk Management ,
Service Contracts ,
Vendors
On April 11, the Department of Justice's National Security Division (NSD) published new guidance on recent measures to restrict the ability of adversarial foreign governments and other foreign entities of concern to access...more
5/2/2025
/ Compliance Dates ,
Data Privacy ,
Data Security ,
Department of Justice (DOJ) ,
Enforcement Guidance ,
Final Rules ,
International Data Transfers ,
National Security ,
New Guidance ,
Risk Management ,
Time Extensions
On April 16, data privacy law regulators in seven states announced the creation of the Consortium of Privacy Regulators, a bipartisan group of state regulators seeking to “share expertise and resources, as well as coordinate...more
U.S. companies and organizations have entered a new era of sweeping restrictions on cross-border data transfers. The Department of Justice's (DOJ) Final Rule, "Preventing Access to U.S. Sensitive Personal Data and...more
3/18/2025
/ Data Privacy ,
Data Protection ,
Data Security ,
Department of Justice (DOJ) ,
International Data Transfers ,
International Trade ,
National Security ,
Privacy Laws ,
Regulatory Requirements ,
Risk Management ,
Sensitive Personal Information
Last month, the United States District Court for the Western District of Texas enjoined parts of the state's Securing Children Online Through Parental Empowerment (SCOPE) Act, a law requiring certain digital service providers...more
3/12/2025
/ Advertising ,
Constitutional Challenges ,
Consumer Protection Laws ,
COPPA ,
Data Privacy ,
Digital Service Providers ,
First Amendment ,
Minors ,
Online Safety for Children ,
Privacy Laws ,
Regulatory Requirements ,
Social Media ,
State Attorneys General
Venable's AdLaw Symposium is back!
Please join us in our Washington, DC, headquarters for this highly anticipated event focused on providing you with the information you need to promote your brand with confidence....more
3/7/2025
/ Advertising ,
Artificial Intelligence ,
Auto-Renewal ,
Best Practices ,
Beverage Manufacturers ,
Chief Compliance Officers ,
Data Privacy ,
Department of Justice (DOJ) ,
Enforcement Actions ,
Events ,
False Advertising ,
Federal Trade Commission (FTC) ,
Fees ,
Food Manufacturers ,
Greenwashing ,
Legal Ethics ,
Marketing ,
NAD ,
Pricing ,
Privacy Laws ,
Risk Mitigation ,
State Regulators ,
Subscription Services
The California Privacy Protection Agency (CPPA) is starting the year by implementing new data broker regulations, which took effect in late December, and continuing to move toward the completion of new rules for automated...more
1/20/2025
/ California Consumer Privacy Act (CCPA) ,
California Privacy Protection Agency (CPPA) ,
Consumer Privacy Rights ,
Data Brokers ,
Data Privacy ,
Personal Data ,
Personal Information ,
Popular ,
Privacy Laws ,
Regulatory Agenda ,
State Privacy Laws
On January 8, 2025, the Department of Justice (DOJ) published in the Federal Register a Final Rule, "Preventing Access to U.S. Sensitive Personal Data and Government Related Data by Countries of Concern or Covered Persons,"...more
1/17/2025
/ Compliance ,
Covered Person ,
Data Brokers ,
Data Privacy ,
Data Protection ,
Data Security ,
Department of Justice (DOJ) ,
Final Rules ,
International Data Transfers ,
Personal Data ,
Privacy Laws ,
Regulatory Requirements ,
Sensitive Personal Information
The California Privacy Protection Agency (CPPA) made headlines on November 14, 2024, by issuing its first significant monetary penalties related to data brokers, totaling nearly $70,000, in settlements with two data brokers,...more
11/20/2024
/ California Privacy Protection Agency (CPPA) ,
Civil Monetary Penalty ,
Compliance ,
Data Brokers ,
Enforcement Actions ,
Personal Data ,
Personal Information ,
Proposed Regulation ,
Registration Requirement ,
Reporting Requirements ,
State Privacy Laws
Earlier this year, the Biden administration issued Executive Order (EO) 14117, which instructed the Department of Justice (DOJ) to create a framework that would prohibit certain data transactions. ...more
11/5/2024
/ Biden Administration ,
Comment Period ,
Compliance ,
Cross-Border Transactions ,
Data Protection ,
Department of Justice (DOJ) ,
Due Diligence ,
Executive Orders ,
International Data Transfers ,
NPRM ,
Personal Data ,
Proposed Rules ,
Sensitive Personal Information
On September 19, 2024, the Federal Trade Commission (FTC or Commission) released a long-awaited staff report, A Look Behind the Screens: Examining the Data Practices of Social Media and Video Streaming Services (the Report),...more
9/26/2024
/ Advertising ,
Artificial Intelligence ,
Data Collection ,
Data Processors ,
Data-Sharing ,
Digital Advertising Alliance ,
Federal Trade Commission (FTC) ,
Information Reports ,
Internet Streaming ,
Marketing ,
Regulatory Reform ,
Social Media
With the 2024 elections well underway, advertisers of all stripes are seeking new and more efficient ways to reach potential voters, donors, and supporters across platforms. The market for political advertising on U.S....more
On June 18, 2024, California Attorney General (AG) Rob Bonta announced a third CCPA enforcement settlement, this one with Tilting Point Media LLC. Tilting Point was allegedly using its mobile app game "SpongeBob: Krusty...more
7/10/2024
/ California Consumer Privacy Act (CCPA) ,
Civil Monetary Penalty ,
COPPA ,
Data Collection ,
Data Privacy ,
Enforcement Actions ,
Minors ,
Mobile Apps ,
Personal Data ,
Settlement ,
State Attorneys General ,
Unfair Competition
On May 30, 2024, the Federal Trade Commission (FTC or the Commission) published finalized amendments to the Health Breach Notification Rule (HBNR) that augment the prior rule’s scope and application. The updated final rule...more
On April 20, 2024, the House of Representatives passed H.R.8038, the 21st Century Peace through Strength Act ("supplemental"), which includes a version of H.R.7520, the Protecting Americans' Data from Foreign Adversaries Act...more
4/26/2024
/ Biden Administration ,
China ,
Data Brokers ,
Data Protection ,
Department of Justice (DOJ) ,
Enforcement Authority ,
Executive Orders ,
Federal Trade Commission (FTC) ,
FTC Act ,
International Data Transfers ,
Iran ,
North Korea ,
Personal Data ,
Personally Identifiable Information ,
Russia ,
Sensitive Personal Information ,
Unfair or Deceptive Trade Practices
In 2020, New Jersey's Daniel's Law was enacted in response to the tragic death of Daniel Anderl, the son of a New Jersey judge. Daniel's Law established a new right for judges, law enforcement officers, certain other state...more