2023 New Data Privacy Requirements
On 4 November 2025, the High Court published its much-anticipated judgment in Getty Images v Stability AI. This is the first major UK ruling to examine how copyright and trade mark laws apply to the development and deployment...more
Getty’s remaining UK copyright claim against Stability AI has been dismissed by the High Court. The AI model and its weights were held not to be “infringing copies” imported into the UK on the basis that they never copied or...more
In an era of escalating data breaches, organizations must be vigilant in protecting consumer information. A comprehensive federal data privacy law would streamline compliance efforts, but Congress has yet to pass one, leaving...more
New York ‘s Child Data Protection Act, available here, took effect on June 20. This is a landmark piece of legislation designed to enhance the online privacy and safety of minors. As concerns over children’s digital...more
IBM UK ("IBM") successfully enforced the terms of a mainframe license against the defendants who had created a competing software product....more
On August 1, 2024, New York Attorney General (“AG”) Letitia James issued two advanced notices of proposed rulemaking (“ANPRs”) for the Stop Addictive Feeds Exploitation (SAFE) for Kids Act (the “SAFE Act”) and the Child Data...more
Virtually every country has enacted some sort of data privacy law to regulate how information is collected, how data subjects are informed, and what control a data subject has over their information once it is transferred. ...more
The past few years have seen a sharp increase in the use of artificial intelligence (AI) across a variety of industries and workplaces. Many businesses have implemented AI to help streamline the recruitment and hiring process...more
On July 7, the FTC and the Los Angeles District Attorney’s Office filed a complaint in the United States District Court for the Central District of California against the developer of an anonymous messaging app (NGL Labs,...more
Insights for this month’s article are provided by ARDA members Gregory Szewczyk, partner at Ballard Spahr Practice Leader of the firm’s Privacy and Data Security Group, and Aaron Tantleff, partner in Foley & Lardner’s...more
As previously discussed, New York’s State Budget for fiscal year 2024-2025 includes legislation that significantly changes the state’s Consumer Directed Personal Assistance Program (CDPA Program). The CDPA Program, funded...more
On April 20, 2024, Governor Hochul signed the New York State Budget for fiscal year 2024-2025 into law. The Budget includes legislation that significantly changes the state’s Consumer Directed Personal Assistance...more
Key Takeaways - The Children’s Data Privacy Act (AB 1949) would require businesses to obtain affirmative authorization to collect, use or disclose personal data of children under 18 in California....more
On January 16, 2024, New Jersey Governor Phil Murphy signed Senate Bill (SB) 332, establishing New Jersey’s consumer data privacy law, the New Jersey Data Privacy Act (NJDPA) which will be effective January 15, 2025. This...more
From long-standing laws to incoming legislation, global nonprofits must understand the requirements and prepare for scrutiny in their handling of personal data. U.S. privacy regulations are currently a complex framework of...more
Data protection assessments are required for high-risk processing activities in a rapidly growing set of federal, state, and international comprehensive privacy laws. These assessments are triggered by processing activities,...more
On March 16, 2023, the French Data Protection Agency (the “CNIL”) imposed a fine of € 25,000 on the company CITYSCOOT in connection with a finding that CITYSCOOT failed to comply with the obligation to ensure data...more
The New Year is in full swing and it’s time to consider the top trends in cybersecurity & data privacy our team expects to see throughout 2023. It will be an exciting year due to the myriad of new laws coming into effect, and...more
In recent years, several states have passed comprehensive privacy laws regulating how businesses must handle personal information. California, Colorado, and Virginia are among the states leading this charge. While each...more
Starting January 1, California’s Privacy Rights Act and Virginia’s Consumer Data Protection Act went into effect. Colorado and Connecticut’s go into effect July 1, and Utah’s goes into effect on the last day of this year,...more
Five new state omnibus privacy laws take effect in 2023, with two that already kicked in on January 1. The California Privacy Rights Act (CPRA) – effective January 1, 2023, enforceable July 1, 2023....more
The Virginia legislature is considering looking at amending the state’s Consumer Data Protection Act to expand protections related to children’s data. Some key points in the bill: •Child defined as under 18, not 13- ...more
In 2023, five new state privacy laws will become effective. How will these new laws affect your business? Currently, privacy laws in the United States include a patchwork of state laws as well as some industry- or...more
If you have been following recent privacy news, you know that the pace of new state laws has not slowed from warp speed, even with the specter of a possible federal privacy law looming. ...more
Five new state omnibus privacy laws have been passed and will go into effect in 2023. Organizations should review their privacy practices and prepare for compliance with these new privacy laws....more