News & Analysis as of

Data Processors Data Controller

Fisher Phillips

Pennsylvania House Passes Consumer Privacy Bill: What Your Business Needs to Know + 6 Steps You Can Take Now

Fisher Phillips on

Pennsylvania could soon join the growing list of states to enact comprehensive data privacy laws, and businesses that operate in PA must take note. Earlier this month, the commonwealth’s House passed a bipartisan consumer...more

Bass, Berry & Sims PLC

Slalom Through Sensitive Data: Utah Skis into Consumer Privacy Protection

Bass, Berry & Sims PLC on

On March 24, 2022, Utah became the fourth state to enact comprehensive consumer privacy legislation when Governor Spencer Cox signed S.B. 227 into law. The Utah Consumer Privacy Act (UCPA or the Act) took effect on December...more

DarrowEverett LLP

How New Rhode Island Privacy Law May Impact Businesses Across U.S.

DarrowEverett LLP on

Rhode Island businesses and any company with Rhode Island customers are officially on the clock. The Rhode Island Data Transparency and Privacy Protection Act (“RIDTPPA” or “the Act”) takes effect January 1, 2026, meaning...more

Jones Day

CJEU Clarifies Scope of Personal Data in EDPS v SRB Decision

Jones Day on

The Single Resolution Board ("SRB") transferred pseudonymized comments from data subjects to Deloitte without informing them. The European Data Protection Supervisor ("EDPS") found a violation of information duties applicable...more

Fisher Phillips

Eyes on Michigan: What Businesses Need to Know About Pending Consumer Privacy and Identity Theft Legislation

Fisher Phillips on

Michigan lawmakers are considering sweeping updates to the state’s identity theft protection law while also debating whether Michigan will become one of nearly half the states that have passed a consumer privacy law. Fisher...more

Baker Botts L.L.P.

CJEU Clarifies Requirements and Definition of Pseudonymisation

Baker Botts L.L.P. on

On September 4, 2025, the Court of Justice of the European Union (“CJEU”), delivered its judgment in European Data Protection Supervisor ("EDPS") v. Single Resolution Board ("SRB") (C-413/23 P). The decision clarifies two...more

Bradley Arant Boult Cummings LLP

Tennessee Data Privacy Law (TIPA) Effective July 1: Are You Prepared?

July 1 marked the official enforcement date of the Tennessee Information Protection Act (TIPA), the state’s comprehensive consumer privacy law. Signed into law in 2023, TIPA grants consumers specific rights concerning their...more

DLA Piper

Uganda: Data Protection Regulator Clarifies Compliance Requirements for Offshore Entities

DLA Piper on

In a decision issued on 18 July 2025 against Google LLC, the Personal Data Protection Office (PDPO) has affirmed that the data protection compliance obligations under Ugandan law apply to all entities that handle the personal...more

Fisher Phillips

Proposed New Jersey Regulations Would Require Major Privacy Compliance Shifts for Businesses

Fisher Phillips on

New Jersey officials recently released proposed privacy regulations that would create several new compliance obligations for businesses above and beyond what existing state law and many other state laws require, meaning you...more

Jackson Lewis P.C.

Privacy in the Big Sky State: Montana’s Consumer Privacy Law Gets Amended

Jackson Lewis P.C. on

Montana recently amended its privacy law through Senate Bill 297, effective October 1, 2025, strengthening consumer protections and requiring businesses to revisit their privacy policies that apply to citizens of Montana....more

McDermott Will & Schulte

Connecticut Can’t Help Itself, Amends Consumer Privacy Law Again

On June 3, 2025, the Connecticut legislature passed a bill amending the Connecticut Data Privacy Act (CTDPA). The amendment introduces a variety of changes, including a broadening of the CTDPA’s applicability, changed...more

Venable LLP

Smoothing Privacy Contracting: Six Ways to Reduce Friction in Data Processing Agreements

Venable LLP on

Negotiating a data processing agreement (DPA) is typically a necessary step when engaging vendors that handle personal data. However, these negotiations have become time consuming and complex, given the evolving privacy...more

DLA Piper

Germany: Monitoring and Auditing Obligations of Controllers with Respect to Their Processors

DLA Piper on

In a decision on immaterial damages under Article 82 of the EU General Data Protection Regulation (GDPR), the Higher Regional Court of Dresden, Germany (case number 4 U 940/24), set out important monitoring and auditing...more

Lathrop GPM

New DOJ Limits on Cross-Border Data Transfers Prompt Assessment by Businesses

Lathrop GPM on

On April 8, the National Security Division of the U.S. Department of Justice’s (DOJ) new rule on cross-border data transfers takes effect. It restricts U.S. businesses from transferring certain bulk sensitive personal data to...more

White & Case LLP

Mexico Enacts New Data Protection Regime

White & Case LLP on

On March 20, 2025, the evening edition of the Federal Official Gazette published a decree (the "Decree") enacting the General Law on Transparency and Access to Public Information ("LGTAIP"), the General Law on the Protection...more

BCLP

Mobile Apps: What Does the CNIL Recommend From a Privacy Perspective?

BCLP on

While mobile apps have become one of the major means of access to digital services, their ubiquity is accompanied by significant risks to users' privacy, due to the massive amount of personal data they collect and process....more

Ogletree, Deakins, Nash, Smoak & Stewart,...

Frequently Asked Questions About the New Jersey Data Protection Act, Effective January 15, 2025

The New Jersey Data Protection Act (NJDPA), N.J. Stat. § 56:8-166.4 et seq., will go into effect on January 15, 2025, as New Jersey joins eighteen other states with comprehensive data privacy laws. ...more

BCLP

European Data Protection Board's Opinion on AI Models

BCLP on

On 17 December 2024, the European Data Protection Board (EDPB) adopted its opinion on certain data protection aspects related to the processing of personal data in the context of AI models (Opinion). The Opinion comes as a...more

BCLP

AI Tools in Recruitment - Key Takeaways from the ICO Report

BCLP on

On 6 November 2024, the ICO published an outcomes report on AI tools in recruitment (the “Report”). This Report follows consensual audit engagements carried out by the ICO with developers and providers of AI tools to be used...more

Alston & Bird

Chile Passes New Data Protection Law

Alston & Bird on

On 14 November, and after many years of negotiations, Chile adopted a new Data Protection Act (la Ley que regula la protección y el tratamiento de los datos personales y crea la Agencia de protección de datos personales)....more

Bricker Graydon LLP

Oh My Gourd, Another Data Privacy Law?! 

Bricker Graydon LLP on

In 2018, there were two comprehensive state data privacy bills introduced across the United States and a whopping zero were in effect. Fast forward six years and there have been 41 new data privacy bills considered this year...more

Latham & Watkins LLP

EDPB Issues Guidelines on Processing Personal Data for Legitimate Interests Purposes

Latham & Watkins LLP on

The draft guidelines provide further clarification to the EDPB’s interpretation of legitimate interests, and suggest a potential divergence with the UK ICO....more

DLA Piper

EU: Engaging Vendors in the Financial Sector: EDPB Clarifications Mean More Mapping and Management

DLA Piper on

The European Data Protection Board (“EDPB“) adopted an opinion on 7 October 2024, providing guidance for data controllers relying on processors (and sub-processors) under the GDPR....more

Ogletree, Deakins, Nash, Smoak & Stewart,...

Colorado AG Proposes Amendments to the Colorado Privacy Act Rules to Implement Recent Legislative Updates

Just over one year after the Colorado Privacy Act Rules took effect, the Colorado Attorney General’s Office filed a set of proposed draft amendments that, if implemented, would significantly modify the Rules to reflect recent...more

Fisher Phillips

Brazil Court Reminds Businesses of Key Data Protection Obligations – What Do Those Doing Business in Brazil Need to Know?

Fisher Phillips on

Four years after the Brazilian General Data Protection Law (LGPD) came into force, Brazil’s Superior Court of Justice (STJ) recently issued a list of precedents exploring how the court applied the law and addressed the...more

295 Results
 / 
View per page
Page: of 12

"My best business intelligence, in one easy email…"

Your first step to building a free, personalized, morning email brief covering pertinent authors and topics on JD Supra:
*By using the service, you signify your acceptance of JD Supra's Privacy Policy.
- hide
- hide