California Consumer Privacy Act (CCPA), Data Collection, Cybersecurity

Disclosure of Data Through Website Cookies May Be a Data Breach – What A Recent Court Ruling Means for Healthcare Businesses

Fisher Phillips on 8/14/2024

A California federal court recently ruled that disclosure of certain data collected through website cookies that may qualify as health information could trigger a data breach under the California Consumer Privacy Act (CCPA) –...more

Privacy Data Mapping: How to Map Sensitive Data & PII

Osano on 8/14/2024

Sprawling. That’s one way to describe the nature of data and responsibilities in modern organizations. There’s a lot of personally identifiable information (PII) and sensitive data to track, and knowing what lives where so...more

The BR Privacy & Security Download: August 2024

Blank Rome LLP on 8/9/2024

Welcome to this month's issue of The BR Privacy & Security Download, the digital newsletter of Blank Rome’s Privacy, Security & Data Protection practice. We invite you to share this resource with your colleagues and visit...more

The California Regulator Publishes New CCPA Regulations for Public Comment

Katten Muchin Rosenman LLP on 7/22/2024

On July 15, 2024, the California Privacy Protection Agency (CPPA) released official materials ahead of its July 16, 2024, Board meeting. The materials include draft regulations for automated decision-making technology, risk...more

CCPA and the EU AI Act

Foley & Lardner LLP on 7/16/2024

Danielle Ocampo, a member of the CLA’s Law Section, interviewed Steve Millendorf (Partner, San Diego) to gain a deeper understanding of how California is approaching and implementing the EU AI Act. How do the principles...more

Data Discovery and Classification: Key Concepts for Data Mapping

Osano on 7/3/2024

If you’re a data person, or even if you’re not, you may have heard the statistic cited by Eric Schmidt, executive chairman at Google: “There were 5 exabytes of information created between the dawn of civilization through...more

Navigating State Privacy Laws

Health Care Compliance Association (HCCA) on 5/23/2024

here’s no General Data Protection Regulation (GDPR) in the US. Absent a comprehensive, national privacy law, states have stepped in to fill the gap. As Adam Greene, Partner at Davis Wright Tremaine, explains in this podcast,...more

CPPA’s First Enforcement Advisory Focuses on Applying Data Minimization Principles to Consumer Requests

Skadden, Arps, Slate, Meagher & Flom LLP on 4/19/2024

On April 2, 2024, the Enforcement Division of the California Privacy Protection Agency (CPPA) issued Enforcement Advisory No. 2024-01. This first-ever enforcement advisory focuses on promoting compliance with California...more

California regulator advises businesses to only collect needed data under CCPA

Orrick, Herrington & Sutcliffe LLP on 4/8/2024

On April 2, The California Privacy Protection Agency issued Enforcement Advisory No. 2024-01 reminding businesses that data minimization is a foundational principle the California Consumer Privacy Act. The Advisory noted that...more

CCPA Disclosure Requirements Emphasized by California AG’s Settlement With DoorDash‎

Locke Lord LLP on 4/5/2024

Enforcement of the California Consumer Privacy Act (“CCPA”) continues to heat up with California Attorney General Rob Bonta’s office announcing its second public enforcement action, this time against delivery service provider...more

California’s Draft Proposed Regulations on Cybersecurity Audits

Locke Lord LLP on 4/4/2024

Although not yet the subject of the formal rulemaking process, the California Privacy Protection Agency (the “CPPA”) has released draft proposed regulations for cybersecurity audits required by Section 1798.185(a)(15)(A) of...more

California Proposes CCPA Amendments to Further Protect Children's Privacy

Jones Day on 3/5/2024

Proposed amendments to the California Consumer Privacy Act would require businesses to obtain opt-in consent prior to collecting, selling, sharing, using, or disclosing a minor's personal information....more

Time for Employers to Complete California Privacy Rights Act Compliance as Court of Appeal Lifts Injunction on Enforcement

Littler on 2/21/2024

Employers had a big win in late June 2023 when a trial court in Sacramento enjoined until March 29, 2024, enforcement of the final regulations under the California Privacy Rights Act (CPRA), the only one of 14 recently...more

CPRA Enforcement: Frequently Asked Questions

Osano on 2/21/2024

CPRA enforcement has gone through many twists and turns over the years, and it’s completely reasonable to be a bit confused about what’s happened. After a last-minute reversal, the CPRA is fully enforceable as of July...more

Delay Lifted in CCPA Regulations Enforcement

Vedder Price on 2/19/2024

Back in July, we shared some good news out of California when a state court judge ruled that the newest regulations under the California Consumer Privacy Act (“CCPA”) could not be enforced until March 2024. But last week,...more

California Appeals Court Moves Up Enforcement Date for Latest CCPA Regulations

Wilson Sonsini Goodrich & Rosati on 2/14/2024

On February 9, 2024, the California Third District Court of Appeals in Sacramento overturned a lower court order that postponed enforcement of the California Privacy Protection Agency’s (CPPA) newest rules. The decision...more

California Legislature Proposes Modifications to CCPA for Children Under 18

Foley & Lardner LLP on 2/6/2024

On January 29 the California legislature introduced the California Children’s Data Privacy Act (AB 1949) in what appears to be the first bill proposed to amend the California Consumer Privacy Act (CCPA) since passage of...more

California Attorney General investigates streaming services for CCPA violations

Orrick, Herrington & Sutcliffe LLP on 2/5/2024

On January 26, California State Attorney General Rob Bonta announced an investigative initiative by issuing letters to businesses operating streaming apps and devices, accusing them of non-compliance with the California...more

California’s Amended Data Broker Registration Law

Polsinelli on 1/18/2024

In October 2023, California Governor Gavin Newsom signed Senate Bill (S.B.) 362 into law, amending California’s data broker registration law. By January 31, 2024, qualifying data brokers must register with the California...more

What Healthcare Industry Players Need to Know About the Evolving Landscape of State Consumer Privacy Laws

Morgan Lewis on 1/8/2024

With the flurry of new consumer privacy laws enacted in states across the country, it is vital for healthcare companies that are not regulated under HIPAA to remain informed of this changing landscape in order to plan and...more

Med-Tech Meets High-tech: Privacy, Cybersecurity and Ai in Connected Devices

Gardner Law on 12/5/2023

...Innovation in connected medical devices is critical to advances in health care outcomes, user experience, and reducing costs. These exciting technologies also can be challenging when it comes to navigating the complex...more

Are You Ready? How CCPA-Regulated Businesses Can Plan for Compliance with California’s Forthcoming Cybersecurity Regulations

McCarter & English, LLP on 12/5/2023

The California Privacy Protection Agency (CPPA) released initial draft regulations for cybersecurity audits (which have since been amended) and risk assessments late this summer. The agency’s board of directors addressed the...more

California Consumer Privacy Act (CCPA) › Data Collection › Cybersecurity