California Consumer Privacy Act (CCPA), Personal Data, Cybersecurity

Privacy Data Mapping: How to Map Sensitive Data & PII

Osano on 8/14/2024

Sprawling. That’s one way to describe the nature of data and responsibilities in modern organizations. There’s a lot of personally identifiable information (PII) and sensitive data to track, and knowing what lives where so...more

Understanding Breach Notification Obligations Under California Law: What Does the CCPA Require? - Dear Mary – Incidents +...

Troutman Pepper on 7/17/2024

‘Dear Mary,’ is Troutman Pepper’s Incidents + Investigations team’s advice column. Here, you will find Mary’s answers to questions about anything and everything cyber-related – data breaches, forensic investigations, how to...more

Data Privacy + Cybersecurity Insider - April 2024 #2

Robinson & Cole LLP on 4/18/2024

CYBERSECURITY - New Threat: Scattered Spider International Coalition of Hackers - Cyber adversaries in China and Russia continue to be a formidable threat to U.S. based companies. In the past, scams might be detected...more

What Is 'Do Not Sell My Personal Information' & How Can You Comply?

Osano on 3/14/2024

Whether as a consumer or as a stakeholder in a business, you’ve likely seen links reading “Do Not Sell My Personal Information” or “Do Not Sell or Share My Personal Information.” On the surface, these links seem...more

California Attorney General announces investigative initiative aimed at streaming services

Hogan Lovells on 3/11/2024

The recently unveiled investigative inquiry targeting streaming services marks the Attorney General Rob Bonta’s ongoing efforts to position California at the forefront of privacy enforcement, underscoring the necessity for...more

California Proposes CCPA Amendments to Further Protect Children's Privacy

Jones Day on 3/5/2024

Proposed amendments to the California Consumer Privacy Act would require businesses to obtain opt-in consent prior to collecting, selling, sharing, using, or disclosing a minor's personal information....more

Time for Employers to Complete California Privacy Rights Act Compliance as Court of Appeal Lifts Injunction on Enforcement

Littler on 2/21/2024

Employers had a big win in late June 2023 when a trial court in Sacramento enjoined until March 29, 2024, enforcement of the final regulations under the California Privacy Rights Act (CPRA), the only one of 14 recently...more

California Appeals Court Moves Up Enforcement Date for Latest CCPA Regulations

Wilson Sonsini Goodrich & Rosati on 2/14/2024

On February 9, 2024, the California Third District Court of Appeals in Sacramento overturned a lower court order that postponed enforcement of the California Privacy Protection Agency’s (CPPA) newest rules. The decision...more

California Attorney General investigates streaming services for CCPA violations

Orrick, Herrington & Sutcliffe LLP on 2/5/2024

On January 26, California State Attorney General Rob Bonta announced an investigative initiative by issuing letters to businesses operating streaming apps and devices, accusing them of non-compliance with the California...more

Prepare for the CPRA by improving your business’s data management

Onna Technologies, Inc. on 1/17/2024

On March 29, 2024, the California Privacy Protection Agency (CPPA) can begin enforcing regulations under the California Privacy Rights Act (CPRA), ushering in a new era of data privacy requirements for businesses....more

Delaware Joins Consumer Protection Bandwagon

Bond Schoeneck & King PLLC on 9/25/2023

On Sept. 11, 2023, Delaware became the next state to enact a comprehensive consumer data privacy law as Gov. John Carney signed the Delaware Personal Data Privacy Act (DPDPA) which will go into effect on Jan. 1, 2025. The...more

Landmark Decision by United Arab Emirates DIFC in CCPA Data Protection Adequacy Decision

Robinson+Cole Data Privacy + Security Insider on 8/25/2023

Earlier this month, the Commissioner of Data Protection of the Dubai International Financial Centre (DIFC), a financial free-zone in the United Arab Emirates (UAE), issued the first adequacy decision regarding the California...more

DIFC Issues Landmark Adequacy Decision Regarding the California Consumer Privacy Act

Akin Gump Strauss Hauer & Feld LLP on 8/18/2023

On August 7, 2023, the Commissioner of Data Protection of the Dubai International Financial Centre (the DIFC), a financial free-zone in the United Arab Emirates, issued the first adequacy decision regarding the California...more

Dubai to facilitate personal data transfers with California-based entities

Orrick, Herrington & Sutcliffe LLP on 8/14/2023

On August 9, the Dubai International Financial Centre Authority (DIFC) Commissioner of Data Protection issued a “first-of-its-kind” adequacy decision, declaring California’s data protection regime as “substantially equivalent...more

CPPA Holds Meeting to Discuss Regulations for Automated Decision-Making Technology, Cybersecurity Audits, and Cybersecurity Risk...

WilmerHale on 8/9/2023

On July 14, the California Privacy Protection Agency (CPPA or the “Board”) hosted a meeting to discuss key issues. Notably, the Board’s New CPRA Rules Subcommittee (“the Subcommittee”) previewed three areas of forthcoming...more

What Is a Privacy Notice, and How Does It Protect Your Data?

Osano on 7/26/2023

What if your city no longer had to put up speed limit signs? The police would still know what the speed limit was on a given stretch of road, but drivers would just have to guess. If you got a ticket for speeding, you’d feel...more

Are You Ready for the 3Cs?: California, Colorado, and Connecticut’s New Privacy Laws Become Enforceable July 1, 2023

Wilson Sonsini Goodrich & Rosati on 6/29/2023

On July 1, 2023, the Colorado Privacy Act (ColoPA) and Connecticut Data Privacy Act (CTDPA) will go into effect, joining California and Virginia, whose data privacy laws are already in effect. Notably, while the California...more

Diving into the Washington My Health My Data Act - Part Two: Consumers Covered by WMHMDA

Quarles & Brady LLP on 6/9/2023

This is Part Two in a series of legal updates on the Washington My Health My Data Act (“WMHMDA”) where Quarles is doing a deep dive into the various factors and intricacies of the Act that are shaping up to create a sea of...more

Develop a Process to Create Privacy Impact Assessments Under the Attorney-Client Privilege

ArentFox Schiff on 5/22/2023

Data protection assessments are required for high-risk processing activities in a rapidly growing set of federal, state, and international comprehensive privacy laws. These assessments are triggered by processing activities,...more

Final CPRA Regulations Approved and Lawsuit Filed to Enjoin Enforcement

CDF Labor Law LLP on 4/6/2023

The California Privacy Protection Agency’s (“Agency”) long-waited regulations to guide enforcement of the California Consumer Privacy Act (“CPRA”) were approved by the California Office of Administrative Law last week and are...more

Why “Secondary Uses” of Data Should be your Primary Concern: New Consent Requirements under California’s CCPA and Colorado’s CPA

Kilpatrick on 3/20/2023

One internet search of the CCPA or the CPA reveals a plethora of articles outlining standard data protection requirements under those laws, from privacy notice requirements to new mandatory contractual provisions. But the...more

A measured approach | US Cybersecurity and Data Privacy review and update: Looking back on our 2022 articles to help navigate 2023

Eversheds Sutherland (US) LLP on 3/3/2023

The year 2023 will continue to have cybersecurity and data privacy front of mind for General Counsels. With sweeping new US and global laws and regulations coming online and the California Privacy Protection Agency (CPPA)...more

California Consumer Privacy Act (CCPA) › Personal Data › Cybersecurity