News & Analysis as of

Regulatory Requirements State Privacy Laws Personal Information

Robinson+Cole Data Privacy + Security Insider

State Data Minimization Laws Spark Compliance Uncertainty

A new wave of state consumer privacy laws focused on limiting data collection is creating anxiety among businesses—and Maryland is leading the charge. The Maryland Online Data Privacy Act (MODPA), set to take effect in...more

Haight Brown & Bonesteel LLP

California’s Telephone Consumer Protection Act Compendium

Does your state have its own version of the TCPA? Yes. California has what is known as the California Consumer Privacy Act of 2018, which is located in sections 1798.100 to 1798.199.100 of the California Civil Code. The...more

Morris, Manning & Martin, LLP

The Big Long List of U.S. AI Laws

Below, we catalog certain current state laws regulating the development and use of AI systems and technologies passed between 2019 and 2025. This list focuses on legislative initiatives that have passed and are in effect or...more

Morris, Manning & Martin, LLP

Tennessee, Minnesota, and Maryland Comprehensive Privacy Laws Coming Online Quickly

As summer approaches, three new state comprehensive privacy laws are poised to take effect, raising the number of states with effective comprehensive privacy legislation in the US to sixteen (with more to come in 2026). The...more

Sheppard Mullin Richter & Hampton LLP

Utah Enacts AI Amendments Targeted at Mental Health Chatbots and Generative AI

Utah is one of a handful of states that has been a leader in its regulation of AI. Utah’s Artificial Intelligence Policy Act (“UAIPA”) was enacted in 2024 and requires disclosures relating to consumer interaction with...more

Skadden, Arps, Slate, Meagher & Flom LLP

Eight-State Consortium of Privacy Regulators Marks Shift Toward Coordinated Enforcement

In a major development for businesses subject to state data privacy laws, eight state privacy regulators have joined forces to form the “Consortium of Privacy Regulators,” a bipartisan coalition aimed at coordinating...more

Hudson Cook, LLP

California Regulator Signals New Era in Privacy Enforcement

Hudson Cook, LLP on

In March, 2025, the California Privacy Protection Agency announced a consent order with an auto manufacturer alleging multiple violations of the California Consumer Privacy Act and imposing a $632,500 fine for alleged failure...more

Alston & Bird

Arkansas Enacts Children and Teens’ Online Privacy Protection Act

Alston & Bird on

On April 21, 2025, Arkansas Governor Sarah Huckabee Sanders signed into law the Arkansas Children and Teens’ Online Privacy Protection Act (Act), which will become effective on July 1, 2026. It draws inspiration from the...more

Orrick, Herrington & Sutcliffe LLP

Utah enacts AI disclosure law for consumer transactions

Recently, the Utah Legislature enacted SB 226 (the “Act”), which requires suppliers using generative AI in consumer transactions to disclose such use upon request. Specifically, the new requirements mandate that if an...more

WilmerHale

State Comprehensive Privacy Law Update - April 2025 #2

WilmerHale on

While March featured a flurry of newly introduced comprehensive privacy bills, state legislatures now appear to be primarily focused on pushing existing proposals through the chambers. ...more

Sheppard Mullin Richter & Hampton LLP

New Ohio Transparency Pricing Rules for Hospitals Comes with Limits to Targeted Advertising

Starting April 3, Ohio hospitals will have to navigate new requirements under House Bill 173. This law mandates greater transparency in healthcare pricing. It also includes rules for selling or targeted advertising related to...more

A&O Shearman

California Privacy Protection Agency publishes first annual report

A&O Shearman on

On February 26 2025, the California Privacy Protection Agency (CPPA) published its first annual report for 2024 (Report). The Report highlights that the CPPA recovered more than USD170,000 of administrative fines for data...more

Moore & Van Allen PLLC

New York Businesses Must Now Disclose Data Breaches of “Medical Information” Under New Law

Moore & Van Allen PLLC on

On February 14, 2025, New York’s Governor Hochul signed into law A.B. 920, which amended the state’s Information Security Breach and Notification Act to add personal health information to the types of data that constitute...more

Benesch

The New Frontier of California Privacy Enforcement: A Tougher Era for Data Brokers

Benesch on

Last week, the Board of the Enforcement Division of the California Privacy Protection Agency (Agency) approved a settlement with California-based data broker Background Alert, Inc., requiring Background Alert to cease its...more

Parker Poe Adams & Bernstein LLP

Data Privacy Week 2025: The Current Privacy Landscape

Welcome back to the second installment of our three-part series for Data Privacy Week 2025. We previously discussed the foundations of data privacy laws, and now we will focus on the current landscape of U.S. state privacy...more

Constangy, Brooks, Smith & Prophete, LLP

Data Privacy Day Checklist: Top 10 ways to protect your organization's data

Tomorrow is International Data Privacy Day, so a happy day to all! More seriously, data privacy concerns and legislation continue to rapidly increase. It has been estimated that by the end of 2024 more than 75 percent of...more

Jackson Lewis P.C.

FAQs for Schools and Persons Affected By the PowerSchool Data Breach

Jackson Lewis P.C. on

A massive data breach hit one of the country’s largest education software providers. According to EducationWeek, PowerSchool provides school software products to more than 16,000 customers, largely K-12 schools, that serve 50...more

Sheppard Mullin Richter & Hampton LLP

California’s Privacy Regulator Had a Busy November, Data Broker Edition: What Does It Mean for Businesses?

In the fifth in our series of California developments, we turn to data broker obligations. There are two of note. First, the California privacy agency is moving forward Delete Act regulations it proposed earlier this year....more

Robinson+Cole Data Privacy + Security Insider

Five States’ Consumer Privacy Rights Laws Take Effect January 1st

On January 1, 2025, five states’ consumer privacy rights laws will go into effect. Is your business ready? Have you determined if these laws apply to your business?...more

Ballard Spahr LLP

CPPA Announces Settlements with Data Brokers for Failure to Register Under the Delete Act

Ballard Spahr LLP on

On November 14, 2024, the California Privacy Protection Agency (“CPPA”), which is tasked with enforcing the California Consumer Privacy Act (the “CCPA”), announced it settled with two data brokers, Growbots, Inc. and UpLead...more

Carlton Fields

CPPA Advances New Privacy Rules for Businesses

Carlton Fields on

The California Privacy Protection Agency (CPPA), at its board meeting on November 8, 2024, voted 4–1 to advance proposed regulations to a formal rulemaking. As currently drafted, these regulations would, among other things...more

Robinson+Cole Data Privacy + Security Insider

Effective October 1st: Montana’s New Consumer Data Protections Law

On Tuesday this week, Montana’s new consumer protections law took effect, joining many other states with similar consumer privacy rights legislation....more

Sheppard Mullin Richter & Hampton LLP

The CPPA Signals Focus on Data Minimization and Consumer Requests

Earlier this month, the California Privacy Protection Agency (CPPA) issued its first-ever enforcement advisory (No. 2024-01). The advisory addresses what it calls the “foundational principle” of data minimization, and more...more

Nossaman LLP

California Privacy Protection Agency to Begin Enforcement Activities

Nossaman LLP on

After a successful appeal of a June ruling, the California Privacy Protection Agency (CPPA) is authorized to begin immediate enforcement of privacy regulations developed, and expanded, under the California Privacy Rights Act...more

Ballard Spahr LLP

CA Court of Appeals Decision Means CPPA May Start Enforcing CPRA Regulations

Ballard Spahr LLP on

On February 9, 2024, California’s Third District Court of Appeals reinstated the California Privacy Protection Agency’s (“CPPA”) ability to enforce the California Privacy Rights Act of 2020 (“CPRA”) regulations. The CPRA...more

31 Results
 / 
View per page
Page: of 2

"My best business intelligence, in one easy email…"

Your first step to building a free, personalized, morning email brief covering pertinent authors and topics on JD Supra:
*By using the service, you signify your acceptance of JD Supra's Privacy Policy.
- hide
- hide