State Law Privacy Video Series | Privacy and Sensitive Information
Podcast: CFIUS Update: Key Takeaways from the FIRRMA Implementing Regulations
The landmark $1.4 billion settlement reached by the state of Texas and a social media company to settle allegations that the company’s platform unlawfully scanned the faces of millions of users in Texas serves as a warning to...more
Recent U.S. developments indicate a growing focus on regulating and investigating the data privacy practices of companies in the automotive sector. The Federal Trade Commission (FTC) recently highlighted in a blog post its...more
On February 28, 2024, President Biden signed Executive Order 14117 (the EO), on “Preventing Access to Americans’ Bulk Sensitive Personal Data and United States Government-Related Data by Countries of Concern.” The United...more
On April 17, Colorado Gov. Jared Polis (D) signed into law a bill that will extend privacy rights to individuals’ neural data. Although certain states have enacted privacy laws that include protection of sensitive and...more
On March 20, the U.S. House of Representatives passed House Resolution 7520, the Protecting Americans’ Data from Foreign Adversaries Act of 2024, targeting companies that sell sensitive information to “foreign adversaries.” ...more
Editor’s Note: During this webcast, industry leaders discussed using generative AI (GAI) in the legal and cybersecurity fields. The speakers, John Brewer, Anya Korolyov, Chris Wall, and Bernie Gabin, all experts in AI and...more
On February 28, 2024, President Biden signed Executive Order (EO) 14117 titled “Preventing Access to Americans’ Bulk Sensitive Personal Data and United States Government-Related Data by Countries of Concern.” On March 5,...more
2023 brought a surge of data privacy developments, with a large expansion of state comprehensive privacy laws, litigation of new claims based on older laws (e.g. wiretapping and VPPA cases), increased scrutiny on data...more
Connecticut was one of the first U.S. states to pass a comprehensive data privacy law back in May 2022. Today, a total of 13 states have passed similar laws, and dozens of other states are proposing legislation to do so as...more
Consumer privacy protection must have been tops on the New Jersey legislature’s list of New Year’s resolutions. The year was just two weeks old and New Jersey became the first State in 2024 to enact a comprehensive privacy...more
The Federal Trade Commission (FTC) recently published a post on their Business Guidance Blog discussing lessons learned from three enforcement actions against sellers of genetic testing products. These guidelines address...more
FTC Settles with Rite Aid on its Use of AI and Processing of Biometric Information - The Federal Trade Commission (“FTC”), on December 19, 2023, announced that it had reached a settlement with Rite Aid Corporation (“Rite...more
The New Jersey Legislature this week passed Senate Bill 332 (SB 332), a comprehensive consumer data privacy bill. Since its conception, the bill has undergone significant revisions that expanded a once narrow bill into a more...more
The California Privacy Protection Agency (CPPA) released initial draft regulations for cybersecurity audits (which have since been amended) and risk assessments late this summer. The agency’s board of directors addressed the...more
The Texas Data Privacy and Security Act (TDPSA) became law on June 16, 2023. Texas becomes the 11th state to enact a comprehensive consumer data privacy law, joining California, Virginia, Colorado, Connecticut, Utah, Iowa,...more
Keypoint: Oregon is the eleventh state to pass consumer data privacy legislation with a bill that is one of the strongest passed to date. On June 22, 2023, the Oregon legislature passed the Oregon Consumer Privacy Act...more
The Florida Digital Bill of Rights (FDBR) was signed into law by Governor Ron DeSantis on June 6, 2023, making Florida the tenth state to enact a consumer data privacy law along with California, Virginia, Colorado,...more
On May 22, 2023, the Maine Legislature held a public hearing on “H.P. 1094, An Act to Give Consumers Control Over Sensitive Personal Data By Requiring Consumer Consent Prior to Collection of Data” (“H.P. 1094”). H.P. 1094,...more
As many businesses prepare to renew their insurance policies, considerations of consumer privacy rights ought to be top of mind. The Colorado Privacy Act - Scope - Foley Hoag has previously written about the Colorado...more
Keypoint: The CPA draft rules are a complex and lengthy set of regulations that, if adopted without substantial modification, will significantly expand the CPA’s requirements and require controllers to carefully consider...more
Keypoint: A revised version of the American Data Privacy and Protection Act was formally introduced in the House and voted out of a subcommittee. As we previously reported, on June 3, 2022, a bipartisan and bicameral group...more
Keypoint: The CPRA, CPA, and VCDPA’s definitions of “publicly available information” are broader than the CCPA’s definition, thereby expanding the types of personal information companies may process outside the confines of...more
The California Consumer Privacy Act (CCPA), considered one of the most expansive U.S. privacy laws to date, went into effect on January 1, 2020. The CCPA placed significant limitations on the collection and sale of a...more
Your body may be a wonderland or a wasteland, but it is a goldmine of data. Collectors of information have noticed. In our midwinter exploration of the economic and legal foundations of data regulation, we next turn to a...more
The California Privacy Rights Act (CPRA) passed by ballot measure in November 2020. While it does not repeal the California Consumer Privacy Act (CCPA), which became effective in January 2020, it does change and augment CCPA...more