California Consumer Privacy Act (CCPA), Personally Identifiable Information, Cybersecurity

Privacy Data Mapping: How to Map Sensitive Data & PII

Osano on 8/14/2024

Sprawling. That’s one way to describe the nature of data and responsibilities in modern organizations. There’s a lot of personally identifiable information (PII) and sensitive data to track, and knowing what lives where so...more

Understanding Breach Notification Obligations Under California Law: What Does the CCPA Require? - Dear Mary – Incidents +...

Troutman Pepper on 7/17/2024

‘Dear Mary,’ is Troutman Pepper’s Incidents + Investigations team’s advice column. Here, you will find Mary’s answers to questions about anything and everything cyber-related – data breaches, forensic investigations, how to...more

DoorDash Settles with California Attorney General for Alleged Violations of the CCPA

Robinson+Cole Data Privacy + Security Insider on 4/18/2024

DoorDash, Inc. recently settled with the California Attorney General for alleged violations of the California Consumer Privacy Act (CCPA) and the California Online Privacy Protection Act (CalOPPA). This is only the second...more

Privacy Versus Cyber – What is the Bigger Risk?

Jackson Lewis P.C. on 4/11/2024

“Cybersecurity” has emerged as one of top risks facing organizations. Considering the steady stream of massive data breaches affecting millions (sometimes billions), the debilitating effects of ransomware on an organization’s...more

California Appeals Court Moves Up Enforcement Date for Latest CCPA Regulations

Wilson Sonsini Goodrich & Rosati on 2/14/2024

On February 9, 2024, the California Third District Court of Appeals in Sacramento overturned a lower court order that postponed enforcement of the California Privacy Protection Agency’s (CPPA) newest rules. The decision...more

Pressure-Testing Your Privacy Program for 2024

BCLP on 1/5/2024

With the onslaught of new privacy legislation and cyber threats coupled with upticks in enforcement, running a well-functioning and flexible privacy program is now, more than ever, a critical component of an organization’s...more

The best data retention policy template to get you started (Updated)

Onna Technologies, Inc. on 8/14/2023

Editor’s note: This post was originally published in October 2020 and has been updated for accuracy and comprehensiveness. They say more is better. And that’s true in many cases, but not when we’re talking about a stockpile...more

The California Attorney General and the California Privacy Protection Agency Are Accelerating Enforcement on CCPA/CPRA...

Epstein Becker & Green on 7/27/2023

California businesses, including employers, who have not already complied with their statutory data privacy obligations under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA),...more

Are You Ready for the 3Cs?: California, Colorado, and Connecticut’s New Privacy Laws Become Enforceable July 1, 2023

Wilson Sonsini Goodrich & Rosati on 6/29/2023

On July 1, 2023, the Colorado Privacy Act (ColoPA) and Connecticut Data Privacy Act (CTDPA) will go into effect, joining California and Virginia, whose data privacy laws are already in effect. Notably, while the California...more

American Data Privacy and Protection Act

King & Spalding on 4/4/2023

Although longtime advocates of federal privacy legislation have learned through experience not to hold their breath, this month brought reason for renewed optimism as House representatives and stakeholders reaffirmed strong...more

I Always Feel Like AI Is Watching Me: Artificial Intelligence and Privacy

Farella Braun + Martel LLP on 3/15/2023

ChatGPT got the early press, and every day we learn of new generative artificial intelligence products that can create new and creative visual and text responses to human input. Following on ChatGPT’s fame, Google’s Bard and...more

A measured approach | US Cybersecurity and Data Privacy review and update: Looking back on our 2022 articles to help navigate 2023

Eversheds Sutherland (US) LLP on 3/3/2023

The year 2023 will continue to have cybersecurity and data privacy front of mind for General Counsels. With sweeping new US and global laws and regulations coming online and the California Privacy Protection Agency (CPPA)...more

Data Privacy in 2023: Expectations, Responsibilities & Cyber Security Tactics to Safeguard Your Information

J.S. Held on 2/9/2023

INTRODUCTION - As more of our lives and work become digitized, an inherent overlap continues to grow between data privacy and cyber security programs. Think of two similarly sized circles: in the past, data privacy and cyber...more

Summary and Comparison of U.S. Data Privacy Laws Since California's CCPA and CPRA

Burr & Forman on 11/15/2022

California started the process of individual U.S. states enacting individual privacy laws with its California Consumer Privacy Act (“CCPA”), which currently is in effect, as supplemented and amended by the California Consumer...more

CPPA Issues Draft CPRA Regulations

McDermott Will & Emery on 6/2/2022

On May 27, 2022, the California Privacy Protection Agency (CPPA) released draft regulations (though still not yet part of a formal rulemaking process) that include what would be seismic changes to California Privacy Rights...more

Take a Deep Breath. A Status Check on New Privacy Laws

Foster Garvey PC on 5/17/2022

Unless you’ve been completely disconnected from the internet for the past year, you’ve undoubtedly read about the passage of a number of state and international laws addressing privacy and cybersecurity. Does this mean that...more

Utah Poised to Become Fourth State with General Privacy Law

Wilson Sonsini Goodrich & Rosati on 3/18/2022

Utah is poised to become the fourth state to enact comprehensive consumer privacy legislation, following California, Virginia, and Colorado. Earlier this month, Utah's legislature passed the Utah Consumer Privacy Act (S.B....more

California Privacy Protection Agency Signals Delay for Final CPRA Rules and California AG Conducts CCPA Investigative Sweep

Dechert LLP on 2/28/2022

California Privacy Protection Agency Indicates Delay for Final CPRA Regulations The California Privacy Protection Agency (“Agency”) was established by the California Privacy Rights Act of 2020 (“CPRA”)....more

Taking Your First Steps: Key Compliance Tasks to Kick-start Compliance with California and Virginia Data Privacy Laws

White & Case LLP on 1/17/2022

As state and federal legislatures across the United States continue to contemplate comprehensive data protection legislation, two pending laws—the California Privacy Rights Act (CPRA) and the Virginia Consumer Data Protection...more

2021 Data Privacy Overview: New Regulations and Guidance

Lighthouse on 1/12/2022

While everyone hoped that 2021 would be less tumultuous than 2020, it certainly did not turn out that way in the end. The same was true in the world of data privacy – with sweeping new data protection regulations and guidance...more

Data Privacy + Cybersecurity Insider - December 2021 #3

Robinson & Cole LLP on 12/27/2021

CYBERSECURITY - New Jersey Settles with Cancer Center Over Business Email Compromise - One of the challenging things about HIPAA (Health Insurance Portability and Accountability Act) enforcement is the fact that both the...more

Recent CCPA Enforcement Actions Highlight the Importance of a CCPA-Compliant Privacy Policy

Robinson+Cole Data Privacy + Security Insider on 12/24/2021

This is the time of year for thought pieces reflecting on the past year or so to speculate on the hot topics for next year. I began to wonder about California Consumer Privacy Act (CCPA) enforcement actions over the past year...more

California Privacy Protection Agency Issues Invitation for Preliminary Comments on Proposed Rulemaking Under the California...

Wilson Sonsini Goodrich & Rosati on 9/29/2021

The California Privacy Protection Agency (CPPA), the newly formed state agency responsible for implementing the California Privacy Rights Act (CPRA), recently posted its first invitation for public comment on proposed...more

Data Privacy + Cybersecurity Insider - August 2021 #3

Robinson & Cole LLP on 8/24/2021

CYBERSECURITY - T-Mobile Clarifies Facts of Security Incident in Press Release - There has been a flurry of reporting in the past few days on the T-Mobile customer data compromise, with allegations that the compromise...more

Blackbaud Must Face CCPA Claims in Multi-district Class Action from Data Breach

Robinson+Cole Data Privacy + Security Insider on 8/20/2021

Blackbaud, which suffered a data breach of its customers’ data in a ransomware attack in 2020, in which it admitted paying the ransom in a double extortion attack, is facing multiple class action cases following the attack. ...more

California Consumer Privacy Act (CCPA) › Personally Identifiable Information › Cybersecurity

"My best business intelligence, in one easy email…"