As we have previously written, late last year the New York Department of Financial Services (NYDFS) adopted long-awaited amendments to its Part 500 Cybersecurity Regulations (Part 500). These are some of the most significant...more
On September 4, 2024, the California Privacy Protection Agency (CPPA) issued an Enforcement Advisory on the importance of avoiding dark patterns. As we have previously written, dark patterns were first addressed in detail in...more
We continue to learn more about the courts’ perspective on claims under the California Information Privacy Act (“CIPA”). Last month, in Moody v. C2 Educational Systems Inc., the U.S. District Court for the Central District of...more
9/6/2024
/ CIPA ,
Cookies ,
Corporate Counsel ,
Data Collection ,
Electronic Communications ,
Electronic Monitoring ,
IP Addresses ,
TikTok ,
Tracking Systems ,
Websites ,
Wiretapping
Earlier this month, Governor Chris Sununu of New Hampshire signed SB255, “An Act Relative to the Expectation of Privacy”, into law. The latest comprehensive state privacy law—bringing the total to 14 now—will go into effect...more
Earlier this month New Jersey became the thirteenth state to pass a comprehensive privacy law aimed at protecting residents’ personal information and starting a new round of comprehensive state privacy laws providing such...more
2/1/2024
/ Consumer Privacy Rights ,
Cybersecurity ,
Data Protection ,
Enforcement ,
Gramm-Leach-Blilely Act ,
Health Insurance Portability and Accountability Act (HIPAA) ,
New Jersey ,
New Legislation ,
Personal Information ,
State Data Privacy Laws ,
State Privacy Laws
As we enter into the final few months of the year, it is important for companies operating in the United States to not only assess the implementation of the compliance requirements for the four new comprehensive state privacy...more
11/1/2023
/ Consumer Privacy Rights ,
Corporate Counsel ,
Cybersecurity ,
Data Privacy ,
Data Protection ,
Employee Privacy Rights ,
GLBA Privacy ,
Health Insurance Portability and Accountability Act (HIPAA) ,
Opt-Outs ,
Private Right of Action ,
State Privacy Laws
The Montana Consumer Data Privacy Act, which would take effect October 1, 2024, and the Tennessee Information Protection Act, which would take effect July 1, 2025, continue the wave of privacy laws passed by state...more
State legislatures continue to take privacy matters into their own hands while talks of a federal privacy law linger. Indiana is set to become the seventh state to enact a comprehensive privacy law when Senate Bill No. 5 is...more
As we continue to wait for a potential federal privacy law, the State of Iowa became the sixth state to pass a comprehensive state privacy law (Senate File 262) on March 28th when Governor Kim Reynolds signed the legislation....more
On October 7th, the long-awaited Executive Order on Enhancing Safeguards for United States Signals Intelligence Activities was signed by U.S. President Joe Biden (Fact Sheet located here). The Executive Order directed the...more
Throughout 2022, we continue to see regulators placing an emphasis on the importance of protecting and securing information, in particular consumer personal information, at both the federal and state levels.
...more
10/6/2022
/ Breach Notification Rule ,
Cybersecurity ,
Data Privacy ,
Data Protection ,
Employee Training ,
Encryption ,
Health Insurance Portability and Accountability Act (HIPAA) ,
NYDFS ,
Opt-Outs ,
Popular ,
Private Right of Action ,
Proposed Amendments ,
Risk Assessment ,
Securities and Exchange Commission (SEC) ,
State Privacy Laws
Over the last two years, many states have taken cues from California and the EU by adopting sweeping privacy laws. These laws, passed in Virginia, Colorado, Connecticut and Utah, as well as updates to the already enacted...more