On June 28, the Rhode Island Data Transparency and Privacy Protection Act (DTPPA) was enacted without Governor Dan McKee’s signature, making Rhode Island the twentieth state to enact comprehensive consumer data privacy...more
7/18/2024
/ Consumer Privacy Rights ,
Data Privacy ,
Data Protection ,
Data Protection Acts ,
New Legislation ,
Personal Data ,
Privacy Laws ,
Privacy Policy ,
Regulatory Requirements ,
State and Local Government ,
State Privacy Laws
The list of U.S. state-level data privacy laws will grow substantially this summer as three more comprehensive state laws become effective. Texas, Oregon and Florida each have a comprehensive data privacy law taking effect on...more
5/7/2024
/ Consumer Privacy Rights ,
Corporate Counsel ,
Data Privacy ,
Data Protection ,
Data Protection Acts ,
Legislative Agendas ,
New Legislation ,
Personal Data ,
Privacy Laws ,
Privacy Policy ,
Regulatory Requirements ,
Sensitive Personal Information ,
Small Business ,
State and Local Government ,
State Legislatures ,
State Privacy Laws
On April 17, Nebraska Governor Jim Pillen signed into law the Nebraska Data Privacy Act (the Act), making Nebraska the seventeenth state to enact general consumer data privacy legislation. The Act largely, but not completely,...more
As of March 31, 2024, Nevada’s state consumer health data law, Senate Bill No. 370 (SB 370), enters the state-level consumer health data privacy fray. Similar to Washington’s My Health My Data Act (MHMDA), SB 370 focuses on...more
3/21/2024
/ Consumer Privacy Rights ,
Data Collection ,
Data Privacy ,
Data Protection ,
Healthcare ,
New Regulations ,
Personal Data ,
Personal Information ,
Privacy Laws ,
State and Local Government ,
State Privacy Laws
On March 6, New Hampshire joined the growing list of states that have enacted a comprehensive consumer privacy statute when Governor Chris Sununu signed into law Senate Bill 255 (the Act). Generally, the Act follows the...more
3/15/2024
/ Consumer Privacy Rights ,
Data Privacy ,
Data Protection ,
Data Protection Acts ,
Legislative Agendas ,
New Legislation ,
Personal Data ,
Privacy Acts ,
Privacy Laws ,
Privacy Policy ,
Regulatory Requirements ,
State and Local Government ,
State Legislatures ,
State Privacy Laws
State-level privacy laws in the United States continue to develop at a dizzying pace and it is understandably difficult to keep track of what takes effect when. Below we’ve outlined the statutes and regulations taking effect...more
1/30/2024
/ Consumer Privacy Rights ,
Corporate Counsel ,
Data Collection ,
Data Privacy ,
Data Protection ,
Healthcare ,
New Regulations ,
Opt-Outs ,
Personal Data ,
Personal Information ,
Privacy Laws ,
State and Local Government ,
State Privacy Laws
On January 16, New Jersey joined the list of states with comprehensive consumer privacy statutes when Governor Phil Murphy signed into law Senate Bill 332 (the New Jersey Data Privacy Act or NJDPA). The bill has undergone...more
1/22/2024
/ Consumer Privacy Rights ,
Data Privacy ,
Data Protection Acts ,
Enforcement ,
New Jersey ,
Opt-Outs ,
Personal Data ,
Privacy Laws ,
Sensitive Personal Information ,
State Privacy Laws ,
Threshold Requirements
The Indian Central Government (Central Government) enacted a broad and significant privacy law, the Digital Personal Data Protection Act (the DPDP), on August 11. The DPDP, when effective (as per dates to be notified by the...more
On September 11, Delaware Governor John Carney signed into law the Delaware Personal Data Privacy Act (DPDPA) (House Bill 154), making Delaware the thirteenth state to enact a comprehensive data privacy framework. The DPDPA...more
Oregon Governor Tina Kotek signed into law the Oregon Consumer Privacy Act (OCPA) (Senate Bill 619) on July 18, making Oregon the twelfth state to enact comprehensive data privacy legislation. The OCPA is primarily based on...more
8/16/2023
/ Consumer Privacy Rights ,
Consumers ,
Data Protection ,
Enforcement ,
Exemptions ,
Legislative Agendas ,
New Legislation ,
Oregon ,
Personal Data ,
Privacy Laws ,
State and Local Government ,
State Legislatures ,
State Privacy Laws
On July 10, the European Commission issued an adequacy decision on the EU-US Data Privacy Framework (DPF), ensuring adequate protection for personal data transferred from the European Union to the United States. This decision...more
7/24/2023
/ Biden Administration ,
Binding Corporate Rules ,
Court of Justice of the European Union (CJEU) ,
Data Privacy ,
EU ,
EU-US Privacy Shield ,
European Commission ,
Executive Orders ,
General Data Protection Regulation (GDPR) ,
International Data Transfers ,
Personal Data ,
Privacy Framework ,
Schrems I & Schrems II ,
Standard Contractual Clauses
Following closely behind Iowa’s new privacy law, on April 20, Indiana passed its consumer privacy act (SB 5) (Privacy Act), making the state the seventh to adopt what is generally considered a comprehensive consumer privacy...more
4/27/2023
/ Consumer Privacy Rights ,
Data Collection ,
Data Privacy ,
Data Protection ,
Data Protection Acts ,
Data Security ,
Enforcement ,
Personal Data ,
Privacy Acts ,
Privacy Laws ,
State Privacy Laws