News & Analysis as of May 7, 2025

Cybersecurity › Data Management › Personal Information

+ Follow

Follow this channel for advisories on one of the biggest threats to businesses today. Read a morning brief of fresh guidance and commentary by leading lawyers on security, privacy, risk... more +

Follow this channel for advisories on one of the biggest threats to businesses today. Read a morning brief of fresh guidance and commentary by leading lawyers on security, privacy, risk management, global regulations, data protection, leaks, hacking, cyber insurance, compliance, HIPAA, and every other aspect of cybersecurity of import to corporate readers right now. less -

Colorado Department of Law Adopts Amendments to Colorado Privacy Act Rules

Ballard Spahr LLP on 12/9/2024

On December 5, 2024, the Colorado Department of Law adopted amended rules to the Colorado Privacy Act (CPA)....more

CFPB suggests that state privacy laws can—and should—regulate financial data

Ballard Spahr LLP on 11/21/2024

On November 12, 2024, the Consumer Financial Protection Bureau (CFPB) released a report examining the carve outs and limitations contained in comprehensive state privacy laws relating to financial institutions. In an...more

CPPA Announces Settlements with Data Brokers for Failure to Register Under the Delete Act

Ballard Spahr LLP on 11/18/2024

On November 14, 2024, the California Privacy Protection Agency (“CPPA”), which is tasked with enforcing the California Consumer Privacy Act (the “CCPA”), announced it settled with two data brokers, Growbots, Inc. and UpLead...more

CPPA Advances New Privacy Rules for Businesses

Carlton Fields on 11/11/2024

The California Privacy Protection Agency (CPPA), at its board meeting on November 8, 2024, voted 4–1 to advance proposed regulations to a formal rulemaking. As currently drafted, these regulations would, among other things...more

California Privacy Protection Agency to Begin Enforcement Activities

Nossaman LLP on 2/21/2024

After a successful appeal of a June ruling, the California Privacy Protection Agency (CPPA) is authorized to begin immediate enforcement of privacy regulations developed, and expanded, under the California Privacy Rights Act...more

CA Court of Appeals Decision Means CPPA May Start Enforcing CPRA Regulations

Ballard Spahr LLP on 2/13/2024

On February 9, 2024, California’s Third District Court of Appeals reinstated the California Privacy Protection Agency’s (“CPPA”) ability to enforce the California Privacy Rights Act of 2020 (“CPRA”) regulations. The CPRA...more

Modified Privacy Regulations May be on the Horizon

CDF Labor Law LLP on 12/7/2023

On Friday, December 8, 2024, the California Privacy Protection Agency (Agency) will meet to discuss important items, including drafting proposed regulations for employers. While the Agency has not yet commenced the formal...more

Update on CPRA Regulations for Cybersecurity Audits and Risk Assessments from the CPPA

Robinson+Cole Data Privacy + Security Insider on 10/13/2023

In August, the California Privacy Protection Agency (CPPA) released its initial draft regulations for cybersecurity audits and risk assessments under the California Privacy Rights Act (CPRA). While the CPPA has not yet...more

Déjà Vu All Over Again: The CPPA Releases Draft Regulations on Cybersecurity Audits and Risk Assessments (Part 1 of 2)

Wyrick Robbins Yates & Ponton LLP on 9/5/2023

On August 29, 2023, the California Privacy Protection Agency (“CPPA”) released a set of draft regulations on cybersecurity audits and risk assessments. For those who recall the multiple rounds of the CPPA’s draft CCPA...more

California Privacy Protection Agency Signals Intent To Keep The Gas On Privacy Enforcement Despite Recent Court Decision

Coblentz Patch Duffy & Bass on 8/9/2023

Despite (or possibly in reaction to) the recent court decision halting the enforcement of the regulations for the Consumer Privacy Rights Act (“CPRA”) by nine months, California regulatory authorities have made clear that...more

Generative AI’s ‘Industry Standards’ for Cybersecurity and Data Privacy Could be Here Sooner Rather than Later

Polsinelli on 7/26/2023

AI may be both the most “powerful capability of our time” and the “most powerful weapon of our time." That’s according to Jen Easterly, Director of the Cybersecurity and Infrastructure Security Agency, when interviewed...more

CPRA Enforcement Postponed to March 2024

Robinson+Cole Data Privacy + Security Insider on 7/10/2023

This week, the California Superior Court ruled that the California Privacy Protection Agency (CPPA) cannot begin enforcement of the California Privacy Rights Act (CPRA) until March 2024. The ruling stems from a lawsuit filed...more

Indiana Governor Signs Comprehensive Privacy Law

Davis Wright Tremaine LLP on 5/9/2023

INCDPA takes business-friendly approach to data privacy, following Virginia, Utah, and Iowa - Indiana has become the seventh state to enact a "comprehensive" data privacy law, joining California, Virginia, Colorado,...more

Québec’s Law 25 and Privacy By Design: 5 Things to Remember When Configuring Information Systems

Stikeman Elliott LLP on 3/14/2023

The bulk of the “Law 25” amendments to Québec’s Act Respecting the Protection of Personal Information in the Private Sector (“PPIPS”) take effect on September 22, 2023. In a previous post, we discussed the internal policies...more

Final Privacy Regulations Anticipated To Go Into Effect In April 2023 - Enforcement Scheduled to Start July 1, 2023

CDF Labor Law LLP on 2/20/2023

On February 14, 2023, the California Privacy Protection Agency (CPPA) submitted its proposed final regulations (“Regulations”) to the Office of Administrative Law for a final review. It is anticipated that Regulations will go...more

New Year’s Resolutions for Legal Teams.

Array on 1/27/2023

January is a time where many individuals implement new goals or strategies for success. This piece will take a goals style approach to explore how a litigation support partner can improve a legal team’s efficiency,...more

California Businesses Start 2023 with CPRA Requirements without Official Regulations

Robinson+Cole Data Privacy + Security Insider on 1/13/2023

Readers of this blog know that we’ve been closely following the California Privacy Rights Act (CPRA) rulemaking process. California passed the law in 2020 to update the California Consumer Privacy Act of 2018 with additional...more

Businesses Should Consider How They are Impacted by the California Consumer Privacy Acts

Burr & Forman on 11/14/2022

The CCPA – or the California Consumer Privacy Act – went into effect on January 1, 2020, followed by the CPRA, or California Privacy Rights Act. These laws have had a significant impact on the privacy and data security...more

Implementing the Sedona Conference on Information Governance: Principles 4-6

Ankura on 7/6/2022

The Sedona Conference is a widely known institute that is focused on the study of law and policy in many areas including Information Governance (IG). The Sedona Conference Commentary on Information Governance provides 11 IG...more

How to Maintain CCPA Compliance in the Cloud

Reveal on 10/2/2020

As more organizations find themselves under scrutiny for the way they collect and use consumer data, maintaining CCPA compliance has never been more important. CCPA has been introduced to give control back to consumers,...more

Privacy and Data Security Alert l March 2020

Shook, Hardy & Bacon L.L.P. on 3/10/2020

Shook Weighs in on Updated CCPA Regulations - In response to extensive public comment, the California Attorney General’s office released modified draft regulations under the CCPA on February 7. Shook has provided initial...more

California Consumer Privacy Act Now In Effect

Sands Anderson PC on 1/6/2020

2020 ushered in significant new privacy rights for residents of California. The California Consumer Privacy Act (CCPA), which took effect January 1, 2020, provides important rights to California consumers concerning how...more

22 Results

/

View per page

Page: of 1