Part Two: CCPA’s New Rules on Risk Assessments and Cybersecurity Audits
Part One: CCPA’s New Rules on Automated Decision making Technology (ADMT)
Guide to Maryland's New Data Privacy Laws for Business Owners
How Startups Can Comply With Ever-Changing Privacy Laws
State AGs Unite: New Privacy Task Force Signals Shift in Regulatory Power Dynamics — Regulatory Oversight Podcast
Are You Ready to Comply With New State Data Privacy Laws?
Data Privacy Unlocked, A Conversation with Michigan Senator Rosemary Bayer
California privacy law has entered a new phase. In Part Two of this two-part episode of The Briefing, Weintraub Tobin Partners Scott Hervey and Richard Buckley break down the CCPA’s new requirements for Risk Assessments and...more
In December, the Democratic Attorneys General Association, or DAGA, announced that it hired Rohit Chopra to lead its new Consumer Protection and Affordability Working Group. Originally published by Law360 - February 5,...more
California privacy law has entered a new phase. In Part One of this two-part episode of The Briefing, Weintraub Tobin Partners Scott Hervey and Richard Buckley breaks down California’s new CCPA regulations governing Automated...more
Key point: In this post: (1) increase in ECPA litigation as courts extend “crime tort” exception beyond health care; (2) service provider wins again against wiretapping claim; (3) defendants lose standing arguments in federal...more
The Maryland Online Data Privacy Act (MODPA), which will be enforced starting April 1, 2026, is Maryland’s comprehensive consumer‑privacy law for businesses that collect or process personal data of Maryland residents. It...more
The Maryland Online Data Privacy Act (MODPA) introduces some of the most comprehensive state-level privacy requirements in the country. Effective October 1, 2025, with enforcement beginning in April 2026, MODPA significantly...more
California’s most recent revisions to the California Consumer Privacy Act (CCPA) regulations mark a significant expansion of the State’s privacy framework. On September 22, 2025, the California Office of Administrative Law...more
While 2025 saw no new state comprehensive privacy laws enacted, state enforcement activity accelerated—individually and collaboratively—reflecting trends likely to intensify in 2026. Key enforcement focus areas included...more
New York’s groundbreaking Algorithmic Pricing Disclosure Act (the Act) took effect on Nov. 10, 2025. The Act requires businesses operating in New York to disclose the use of algorithmic pricing models and introduces...more
Even if you read them at the time, you’ll want to read them again. In 2025, organizations faced significant developments in the areas of immigration, workplace policies, federal enforcement, and data privacy. ...more
Deepfakes have moved from novelty to material enterprise risk, reshaping how organizations assess privacy, security, brand integrity and marketing. This technology can erode evidentiary trust, enable impersonation and fraud...more
Effective April 18, 2026, New York City’s ban on credit searches in connection with employment decisions will now apply to all employers in New York State, unless one of the narrowly construed exemptions applies. See New York...more
Four states have adopted laws regulating data brokers, but only one – California – has established a universal deletion mechanism whereby consumers are able to request that all data brokers registered in the state delete...more
The California Consumer Privacy Act (CCPA) Regulations got a New Year update, with amendments effective on January 1, 2026. Think of these changes as a front-door refresh—strengthening key points to the privacy program—rather...more
The continued absence of a comprehensive federal privacy law once again positioned state legislatures as the primary forces behind data privacy developments in the U.S. this year....more
On December 17, 2025, CalPrivacy, California’s privacy enforcement agency, issued Enforcement Advisory No. 2025-01 to provide guidance on data broker registration. The Advisory focuses on requirements related to trade names,...more
Key point: New York becomes the second state — after California — to enact an AI frontier model law, while the governor’s veto of the New York Health Information Privacy Act will be a welcome result for organizations that...more
Do you really need cookie consents to be incorporated into your mobile applications? New enforcement of the CCPA by California attorney general involving mobile game developer emphasizes the need to honor the right to Opt-Out...more
On November 24, 2025, trade association NetChoice secured a win in its constitutional challenge to Maryland's Age-Appropriate Design Code Act (Kids Code or Act) when the U.S. District Court for the District of Maryland denied...more
Kentucky, Indiana, and Rhode Island will kick off the new year by effectuating comprehensive consumer data privacy laws, ushering in new compliance obligations for businesses nationwide that meet the new laws’ thresholds....more
Key point: The court held that NetChoice’s complaint adequately states constitutional claims against Maryland’s age-appropriate design code act and allowed NetChoice’s lawsuit to continue but did not rule on the merits of the...more
As artificial intelligence (AI), particularly generative AI, becomes increasingly woven into our professional and personal lives—from personalized travel itineraries to reviewing resumes to summarizing investigation notes and...more
On November 19, 2025, the California Privacy Protection Agency ("CalPrivacy") announced that it is establishing a Data Broker Enforcement Strike Force ("Strike Force") within its Enforcement Division. ...more
During a recent gathering of data privacy and security experts, regulators from the Maryland and Delaware Offices of Attorney General provided their insights regarding priorities for state privacy enforcement and...more
Beyond the familiar challenges of establishing standing and proving injury from a data breach, courts are increasingly grappling with threshold questions about the viability of plaintiffs’ legal theories. One recurring issue...more