News & Analysis as of May 7, 2025

State Privacy Laws

+ Follow

Follow this channel for advisories on one of the biggest threats to businesses today. Read a morning brief of fresh guidance and commentary by leading lawyers on security, privacy, risk... more +

Follow this channel for advisories on one of the biggest threats to businesses today. Read a morning brief of fresh guidance and commentary by leading lawyers on security, privacy, risk management, global regulations, data protection, leaks, hacking, cyber insurance, compliance, HIPAA, and every other aspect of cybersecurity of import to corporate readers right now. less -

Key Themes From the 2025 IAPP Global Privacy Summit

Skadden, Arps, Slate, Meagher & Flom LLP on 5/5/2025

On April 23 and 24, 2025, regulators, industry leaders and data privacy leaders from across the globe convened in Washington, D.C. for the 2025 International Association of Privacy Professionals (IAPP) Global Privacy Summit....more

Eight-State Consortium of Privacy Regulators Marks Shift Toward Coordinated Enforcement

Skadden, Arps, Slate, Meagher & Flom LLP on 5/5/2025

In a major development for businesses subject to state data privacy laws, eight state privacy regulators have joined forces to form the “Consortium of Privacy Regulators,” a bipartisan coalition aimed at coordinating...more

Top 6 Takeaways for Privacy Compliance Professionals From the IAPP 2025 Global Summit

Hinshaw & Culbertson - Privacy, Cyber & AI... on 4/30/2025

The International Association of Privacy Professionals (IAPP) once again delivered an outstanding 2025 Global Summit. Hinshaw partners and associates were proud to participate in the event and are pleased to provide our...more

2025 State Cybersecurity Legislation Focuses on Financial Services

Alston & Bird on 4/21/2025

Eight years ago, on March 1, 2017, the New York Department of Financial Services enacted its landmark cybersecurity regulation covering financial services companies, 23 NYCRR Part 500, known as “Part 500.” Part 500 was the...more

Cybersecurity Best Practices for AI-Powered Robotics Under State and Federal Privacy Laws

Cozen O'Connor on 4/21/2025

As robotics technology rapidly advances in connection with the use of artificial intelligence (AI), the collection, processing, and storage of personal information—including biometric data—will become increasingly common....more

Insurance Cybersecurity Certifications: An (Updated) State Roundup

Sheppard Mullin Richter & Hampton LLP on 4/15/2025

Over half of US states require annual compliance certifications from insurance providers. While the filing time frames for this year draw to a close, companies may want to keep them in mind not only for next year, but as a...more

2024 Year in Review: Data Privacy and Cybersecurity

Goodwin on 3/17/2025

Welcome to the “Data Privacy and Cybersecurity” chapter of our annual report, Consumer Financial Services: 2024 Year in Review. Consumer financial services regulators are taking a keen interest in artificial intelligence...more

New York State amends law on data breach notifications

Orrick, Herrington & Sutcliffe LLP on 2/24/2025

On February 14, the Governor of New York signed into law SB 804 (the “Act”), which amends the general business law concerning when and how notifications for data breaches are provided to the New York Department of Financial...more

Hawaii Issues Guidance to State Agencies on AI

Fox Rothschild LLP on 2/18/2025

Hawaii’s State Data Office recently issued a series of guidance documents for its state agencies on how to handle artificial intelligence. This includes guidance on data protection, data retention and use of Generative AI....more

Hinshaw's 5 Data Privacy Day Regulatory and Litigation Predictions for 2025

Hinshaw & Culbertson - Privacy, Cyber & AI... on 1/30/2025

To commemorate Data Privacy Day, we are pleased to outline Hinshaw's top five privacy predictions for 2025. We covered our strategic recommendations for privacy planning in our earlier alert, and today, we provide some...more

Data Privacy Week 2025: The Current Privacy Landscape

Parker Poe Adams & Bernstein LLP on 1/29/2025

Welcome back to the second installment of our three-part series for Data Privacy Week 2025. We previously discussed the foundations of data privacy laws, and now we will focus on the current landscape of U.S. state privacy...more

AGG Talks: Women in Tech Law Podcast - Episode 5: How the Tech Industry Can Monitor Regulatory Changes Under the Trump...

Arnall Golden Gregory LLP on 1/28/2025

In this episode, Allison Raley, AGG’s Women in Tech Law co-chair, is joined by Kelley Chandler, AGG Corporate & Finance and Privacy & Cybersecurity attorney, to discuss strategies for monitoring regulatory changes in the tech...more

Data Privacy Day Checklist: Top 10 ways to protect your organization's data

Constangy, Brooks, Smith & Prophete, LLP on 1/27/2025

Tomorrow is International Data Privacy Day, so a happy day to all! More seriously, data privacy concerns and legislation continue to rapidly increase. It has been estimated that by the end of 2024 more than 75 percent of...more

FAQs for Schools and Persons Affected By the PowerSchool Data Breach

Jackson Lewis P.C. on 1/13/2025

A massive data breach hit one of the country’s largest education software providers. According to EducationWeek, PowerSchool provides school software products to more than 16,000 customers, largely K-12 schools, that serve 50...more

New York Adopts Comprehensive Hospital Cybersecurity Requirements

Sheppard Mullin Richter & Hampton LLP on 1/6/2025

Cyberattacks on healthcare organizations are on the rise, with the number of affected individuals nearly tripling between 2022 and 2024, according to data compiled by the Department of Health and Human Services Office for...more

Data Privacy and Cybersecurity Developments We Are Watching in 2025

McDermott Will & Emery on 1/6/2025

The act of predicting what will become the dominating storyline of data privacy and cybersecurity in 2025 is a hazardous enterprise, as one is almost surely to get something wrong. Without fail, every year, regulators and the...more

CPPA Announces Settlements with Data Brokers for Failure to Register Under the Delete Act

Ballard Spahr LLP on 11/18/2024

On November 14, 2024, the California Privacy Protection Agency (“CPPA”), which is tasked with enforcing the California Consumer Privacy Act (the “CCPA”), announced it settled with two data brokers, Growbots, Inc. and UpLead...more

California Jumps Into Privacy Rulemaking (Again)

Shook, Hardy & Bacon L.L.P. on 11/15/2024

The California Privacy Protection Agency (CPPA) is starting formal rulemaking (again) as they move beyond the pre-rulemaking drafts that were debated for a little over a year. During their November 8, 2024, board meeting, the...more

Post-Election Privacy & Cybersecurity Law Developments to Watch

Foley Hoag LLP - Security, Privacy and the... on 11/11/2024

What should privacy and cybersecurity practitioners and specialists consider after the 2025 inauguration? There are a few notable issues that may shape how businesses think about their privacy and cybersecurity programs: ...more

CPPA Advances New Privacy Rules for Businesses

Carlton Fields on 11/11/2024

The California Privacy Protection Agency (CPPA), at its board meeting on November 8, 2024, voted 4–1 to advance proposed regulations to a formal rulemaking. As currently drafted, these regulations would, among other things...more

The Evolving US Privacy Landscape: Essential Insights for 2024

Mayer Brown on 10/23/2024

The US privacy legal landscape continues to expand in 2024, with most of the momentum led by state laws. ...more

Decoded Technology Law Insights, V 5, Issue 4, May 2024

Spilman Thomas & Battle, PLLC on 5/14/2024

MIT Report Details New Cybersecurity Risks - “Cloud misconfigurations, more sophisticated ransomware, and vendor exploitation attacks are contributing to rising cyberattacks.” Why this is important: Worldwide spending...more

Connecticut Attorney General Issues Report on Data Privacy Act Enforcement; Offers Legislative Recommendations

Hinckley Allen on 3/25/2024

On February 1, 2024, the Connecticut Office of the Attorney General (the “OAG”) issued a report mandated by the Connecticut Data Privacy Act (the “CTDPA”), Conn. Gen. Stat. § 42-515 et seq. (the “Report”), which Report is...more

California Privacy Protection Agency to Begin Enforcement Activities

Nossaman LLP on 2/21/2024

After a successful appeal of a June ruling, the California Privacy Protection Agency (CPPA) is authorized to begin immediate enforcement of privacy regulations developed, and expanded, under the California Privacy Rights Act...more

CPPA’s Regulatory Enforcement Restored: It’s Time to Get Compliant

Woods Rogers on 2/15/2024

For businesses subject to California Consumer Privacy Act (CCPA), privacy compliance just became urgent. A California appellate court agreed on February 9, 2024, with the California Privacy Protection Agency (CPPA) that there...more

39 Results

View per page

Page: of 2

Cybersecurity › Regulatory Requirements › State Privacy Laws

"My best business intelligence, in one easy email…"