California Consumer Privacy Act (CCPA), Data Privacy, Disclosure Requirements

CCPA Disclosure Requirements Emphasized by California AG’s Settlement With DoorDash‎

Locke Lord LLP on 4/5/2024

Enforcement of the California Consumer Privacy Act (“CCPA”) continues to heat up with California Attorney General Rob Bonta’s office announcing its second public enforcement action, this time against delivery service provider...more

10th Annual Cybersecurity & Privacy Summit

King & Spalding on 10/31/2023

On October 11th, our Data, Privacy and Security team hosted the 10th Annual Cybersecurity & Privacy Summit. We were delighted to be joined by about 100 clients, colleagues, and friends in-person at our Atlanta office, with...more

Information Governance 101: Everything You Need to Know To Get Started in 2023

Reveal on 6/8/2023

Information governance (IG) plays an increasingly significant role of the way corporations do business. But what do organizations do with all their data? Where do they store it—and is it secure, well organized, and...more

My Health, My Data! Washington State Enacts Broad Health Data Privacy Protection Law

Mintz - Health Care Viewpoints on 5/25/2023

Washington greatly expanded the protection for consumers’ identifiable health information by enacting the “My Health My Data Act” (MHMDA), in an effort to close the gap between HIPAA protections and the laws protecting the...more

Complying With 2023 Consumer Privacy Laws in California and Virginia

Warner Norcross + Judd on 12/21/2022

Service providers, contractors and data collectors operating in California and Virginia, must prepare for imminent changes. The California Privacy Rights Act (CPRA), which amends the current California Consumer Privacy Act...more

2022 Update - Overview of California AG’s Examples of CCPA Non-Compliance

Ankura on 12/15/2022

The California Office of Attorney General (OAG) is responsible for enforcing the California Consumer Privacy Act (CCPA) and began sending notifications of alleged non-compliance to companies on July 1, 2020. In June 2021,...more

Upcoming California Privacy Rights Act: Key Compliance Tasks for California Employers

White & Case LLP on 10/12/2022

California employers' reprieve from obligations to employees to disclose data privacy practices and provide access rights to employees appears to be coming to an end as the California Privacy Rights Act (CPRA) becomes...more

Employee Data Under the CCPA: Expiration of Employer Exemptions Requires Compliance as of January 1, 2023

Farella Braun + Martel LLP on 10/5/2022

Since the California Consumer Privacy Act (“CCPA”) was passed in 2018, employers have been watching carefully to see how the law will apply to data collected and maintained about their employees. Up until now, employment data...more

California Legislature Fails to Extend CCPA Employee and B2B Data Exemptions

Husch Blackwell LLP on 9/1/2022

Keypoint: Businesses subject to the CCPA will need to revise their compliance programs before the exemptions expire on January 1, 2023. As previously reported, the California legislature had been considering multiple bills...more

To Clarify the Meaning CCPA, CPPA Issues Initial Statement of Reasons for New Regs

Fox Rothschild LLP on 6/9/2022

“Businesses, service providers, and contractors are to comply with not just the letter of the (California Consumer Privacy Act), but the spirit of the law.” That is according to a new Initial Statement of Reasons issued...more

CPRA Series: Part Three – Notice and Disclosure Obligations

Troutman Pepper on 5/23/2022

As we explained in an earlier installment, most privacy law derive from the Fair Information Practice Principles (FIPPs). The FIPPs provide, in part, that consumers should be given notice of how their information will be used...more

California Privacy Update - Part III

WilmerHale on 5/3/2022

In our third California Privacy Update, we continue to closely follow potential privacy law updates in California. ...more

Internal Inferences Must Be Disclosed to Consumers Under CCPA

Woods Rogers on 4/18/2022

In an opinion released on March 10, 2022, California Attorney General Rob Bonta addressed the applicability of the “right to know” under the California Consumer Privacy Act (CCPA) (pdf) to internal inferences that...more

CCPA Covered Businesses Must Disclose Most Inferences Drawn from Consumers’ Personal Information

Fisher Phillips on 3/16/2022

While it is clear that the California Consumer Privacy Act (CCPA) imposes certain disclosure obligations on businesses regarding concrete personal information collected about consumers, businesses often forget that they also...more

AG Implements Tool to Allow Consumer Reporting of Alleged DNS Violations

Sheppard Mullin Richter & Hampton LLP on 8/24/2021

The California attorney general has created a tool for consumers to report situations where companies sell information but do not have an opt-out of sale link on their website. The release of the tool came at the same time as...more

Does Your Organization Maintain an Employee Facing Privacy Notice?

Ankura on 7/28/2021

On Tuesday, June 15, 2021, a French court ordered IKEA to pay 1 million euros ($1.2 million) for spying on its employees in France. The allegations included reviewing employees' bank account records, using fake employees to...more

Recent Developments in the State Data-Privacy Landscape: Is Federal Involvement the Best Way Forward?

Patterson Belknap Webb & Tyler LLP on 4/7/2021

With a dizzying array of state privacy laws on the horizon, the prospect of a federal solution has come into sharp focus. Rather than a patchwork of regional legislation, a comprehensive national framework would potentially...more

Virginia Becomes the Second State—and the First on the Eastern Seaboard—to Adopt a Comprehensive Data Protection Law

Brooks Pierce on 3/31/2021

In March of 2021, Virginia became the second state to adopt a comprehensive data protection law. The Virginia Consumer Data Protection Act (VCDPA), which goes into effect on Jan. 1, 2023, borrows many concepts from the...more

Notice and Disclosure Obligations: Virginia Consumer Data Protection Act Series (Part Three)

Troutman Pepper on 3/19/2021

One key area where Virginia’s Consumer Data Protection Act (CDPA) differs from the California Consumer Privacy Act of 2018 (CCPA) and the California Privacy Rights Act of 2020 (CPRA) is the law’s notice and disclosure...more

CCPA 2.0 Passes: The California Privacy Rights Act To Become Law

Goodwin on 11/12/2020

On November 3, 2020, California voters convincingly approved the California Privacy Rights Act (“CPRA”) ballot initiative. The CPRA builds upon and amends the California Consumer Protection Act (“CCPA”), aligning it more with...more

The CPRA Will Bring New Rights, Responsibilities and Regulators to California Data Privacy Law

Womble Bond Dickinson on 10/8/2020

In less than a month, Californians will vote on a consumer privacy ballot initiative, the California Privacy Rights Act (“CPRA”). The California Consumer Privacy Act (“CCPA”) went into effect on January 2, 2020, and state...more

CCPA Reality Check: 10 Key Questions to Evaluate Compliance

Coblentz Patch Duffy & Bass on 2/28/2020

With the CCPA (California Consumer Privacy Act) in effect as of January 1, but regulations still being revised and finalized, businesses are struggling to know what they need to do now to comply....more

New Laws And Regulations: Insights For 2020

Morgan Lewis on 2/3/2020

A constantly evolving framework of laws governing how multinational businesses can contact customers to how nonprofits report business income to how overtime is calculated and paid will influence how companies do business...more

California’s privacy law went into effect Jan. 1; have you spoken to IT yet?

Society of Corporate Compliance and Ethics... on 1/13/2020

Report on Supply Chain Compliance 3, no. 1 (January 9, 2020) - California’s new data privacy law went into effect Jan. 1, 2020, but the date is largely symbolic. Companies should already have a data management plan in...more

California AG Issues California Consumer Privacy Act Regulations

The Volkov Law Group on 11/13/2019

Last month, the California Attorney General released draft regulations for the California Consumer Privacy Act (CCPA). (Here). The regulations focus on three primary areas: (1) consumer notices; (2) consumer requests for...more

California Consumer Privacy Act (CCPA) › Data Privacy › Disclosure Requirements

"My best business intelligence, in one easy email…"