Webinar Recording – The Colorado Privacy Act and Draft Rules
Data Privacy Unlocked, A Conversation with State Senator Robert Rodriguez of Colorado, Part II
Data Privacy Unlocked, A Conversation with State Senator Robert Rodriguez of Colorado, Part I
As states take pioneering steps towards AI legislation, businesses face new compliance landscapes affecting their operation and strategic planning. California and Colorado are leading with distinct yet influential legislative...more
I suspect that many practitioners would assume that the law of the state of incorporation would determine the viability of an exculpation clause in a corporation's articles of incorporation. Thus, I was surprised to read...more
CALIFORNIA - On March 29, 2024, the amended California Consumer Privacy Act (CCPA) regulations will take effect. These regulations were originally slated to take effect in 2023, but a court ruling (that is being appealed)...more
Leading consumer brands are facing increased and often highly politicized scrutiny from state attorneys general and other state regulators. The landscape of state AG complaints, investigations, and litigation is evolving...more
Among the various requirements under US state comprehensive privacy laws, those that relate to loyalty programs may be some of the most confusing. Only three states — California, Colorado and Florida — regulate these...more
As we’ve discussed, the federal government seems to be getting on board with the legal use of psychedelics. So are many states. While states across the country are moving towards expanding legal (or at least decriminalized)...more
In this month’s Privacy & Cybersecurity Update, we analyze the Biden administration’s proposed cybersecurity labeling program for smart devices, NIST’s extensive overhaul of its cybersecurity framework, and data privacy law...more
Regulators in California and Colorado recently announced enforcement sweeps under new and newly updated state privacy laws. Companies in Colorado (including nonprofits) and California should double-check their privacy...more
Oregon is the first state in the country to offer controlled use of psilocybin to the public. As we detailed in a prior Update, the state had finalized regulations. Now, the state has licensed its first psilocybin service...more
Although there is no federal ban on per- and polyfluoroalkyl substances (PFAS) in textiles, there continues to be activity at the state level to limit PFAS in textiles, with many prohibitions becoming active over the next...more
The Colorado Attorney General's Office recently finalized rules for the Colorado Privacy Act ("CPA Rules") which was signed into law in July 2021. The Colorado Privacy Act ("CPA") will soon join the California Consumer...more
With the arrival of the new year comes the effective date of many new leave laws (and expansion of existing leave laws) across the United States. Below we summarize family and sick leave laws that will take effect across...more
In early November, the U.S. Supreme Court agreed to hear a case brought by the Navajo Nation that could have far-reaching impacts on tribal water rights in the Colorado River Basin....more
In 2023, five new state privacy laws will become effective. How will these new laws affect your business? Currently, privacy laws in the United States include a patchwork of state laws as well as some industry- or...more
As the flipping from one calendar year to the next approaches, many employers understand this is the annual moment to take stock of changes in the law becoming effective on January 1st and prepare for compliance. Given the...more
On October 10, the Colorado Attorney General (“AG”) released its draft regulations outlining businesses’ obligations under the Colorado Privacy Act (“CPA”). The 38-page set of draft regulations flesh out several novel privacy...more
The talk of “opt-out preference signals” or global privacy controls (GPC) has been increasing as companies dig into the forthcoming requirements under US “comprehensive” privacy laws. What is an opt-out preference signal? An...more
With 2023 quickly approaching, many are spending this final quarter preparing for the five US state “comprehensive” privacy laws. Some of these contemplate clarifying regulations with technical and operational requirements....more
California Privacy Protection Agency Releases Revised Regulations - With the effective date less than three months away, and ahead of a Board Meeting on October 28 and 29, the California Privacy Protection Agency released...more
California has now joined New York City and Colorado in requiring employers (for Golden State employers, of 15 or more) to publish “pay scales” in job postings. As with many things California, however, the new law (which...more
The Colorado attorney general’s office sent shockwaves throughout the privacy world on September 30, 2022, when it published its proposed Colorado Privacy Act (CPA) draft rules (Draft Rules). The Draft Rules are complex and...more
In our article published in the last edition of this Gazette, we discussed late 2021 to early 2022 developments concerning extended producer responsibility (EPR) programs and the regulation of per- and polyfluoroalkyl...more
Over the last several weeks we have seen a number of state legislatures pass fairly aggressive regulations attempting to ban the use of intentionally added PFAS in certain products, create registries for products with...more
Connecticut just joined California, Colorado, Utah, and Virginia in passing a comprehensive privacy law. The Connecticut Data Privacy Act (CTDPA) goes into effect July 1, 2023, the same time as Colorado’s very similar law...more
In the ongoing absence of federal legislation, multiple states have enacted omnibus privacy laws. In addition to the California Consumer Privacy Act (CCPA), which is already in effect and being actively enforced, three new...more