On June 25, 2024, the governor of Rhode Island transmitted without signature a comprehensive privacy bill, the Rhode Island Data Transparency and Privacy Protection Act (DTPPA), back to the state legislature, which is still...more
7/2/2024
/ Data Privacy ,
Data Protection ,
Exemptions ,
Gramm-Leach-Blilely Act ,
Health Insurance Portability and Accountability Act (HIPAA) ,
Personal Data ,
Policies and Procedures ,
Popular ,
Privacy Laws ,
Rhode Island ,
State and Local Government
On May 19, 2024, the Minnesota Legislature passed a comprehensive privacy bill, sending the Minnesota Consumer Data Privacy Act (MCDPA) to Governor Tim Walz’s desk for signature into law.
The law, which would take effect...more
5/23/2024
/ Consumer Privacy Rights ,
Data Privacy ,
Data Protection ,
Data Protection Acts ,
Legislative Agendas ,
New Legislation ,
Personal Data ,
Privacy Laws ,
Regulatory Requirements ,
Sensitive Personal Information ,
State and Local Government ,
State Legislatures ,
State Privacy Laws ,
Summary of Consumer Rights
On April 12, 2024, the Nebraska Legislature passed the Data Privacy Act (NEDPA), sending the bill to Governor Jim Pillen’s desk for signature.
NEDPA adds to the patchwork of state consumer privacy laws in that it does not...more
4/19/2024
/ Consumer Privacy Rights ,
Data Privacy ,
Data Protection ,
Data Protection Acts ,
Enforcement Actions ,
Legislative Agendas ,
New Legislation ,
Personal Data ,
Privacy Laws ,
Privacy Policy ,
Private Right of Action ,
Regulatory Requirements ,
Small Business ,
State and Local Government ,
State Legislatures ,
State Privacy Laws
On April 7, 2024, Rep. Cathy McMorris Rodgers (R-WA), the chair of the US House Committee on Energy and Commerce, and Sen. Maria Cantwell (D-WA), the chair of the US Senate Committee on Commerce, Science, and Transportation,...more
4/18/2024
/ Covered Entities ,
Data Privacy ,
Data Protection ,
Disclosure Requirements ,
Enforcement ,
Federal Trade Commission (FTC) ,
Legislative Agendas ,
New Legislation ,
Preemption ,
Privacy Acts ,
Privacy Laws ,
Privacy Policy ,
State and Local Government ,
State Privacy Laws ,
U.S. House
On April 6, 2024, the Maryland Legislature passed a comprehensive privacy bill, sending the Maryland Online Data Privacy Act of 2024 (MODPA) to Governor Wes Moore’s desk for signature into law. The law, which would take...more
4/11/2024
/ Consumer Privacy Rights ,
Data Privacy ,
Data Protection ,
Data Protection Acts ,
Legislative Agendas ,
New Legislation ,
Personal Data ,
Privacy Laws ,
Privacy Policy ,
Regulatory Requirements ,
State and Local Government ,
State Legislatures ,
State Privacy Laws
On January 18, 2024, the New Hampshire Senate passed by voice vote SB255, the New Hampshire Privacy Act (NHPA), amended by the New Hampshire House of Representatives. The bill will head to Governor Chris Sununu’s desk. After...more
1/25/2024
/ Consumer Privacy Rights ,
Corporate Counsel ,
Data Privacy ,
Data Protection ,
Data Protection Acts ,
Legislative Agendas ,
New Legislation ,
Personal Data ,
Privacy Acts ,
Privacy Laws ,
Regulatory Requirements ,
State and Local Government ,
State Legislatures ,
State Privacy Laws
On January 8, 2024, the New Jersey legislature passed the New Jersey Data Privacy Act (NJDPA). The bill, SB 332, will soon head to Governor Phil Murphy’s desk for signing. Assuming the bill is signed quickly, it will go into...more
This has been a busy year for privacy legislation, with dozens of states deliberating consumer privacy bills. Today, 13 states have their own consumer privacy laws, a tally that climbs to 15 if we include the health privacy...more
On September 11, 2023, Delaware Governor John Carney signed the Delaware Personal Data Privacy Act (DPDPA) into law, making Delaware the 13th state to enact a consumer privacy law. The DPDPA closely tracks the laws in...more
Add Oregon to the list of states passing consumer privacy laws this year. On June 22, 2023, the Oregon House of Representatives passed SB 619, the proposed Oregon Consumer Privacy Act (OCPA), following the Senate’s passage on...more
6/27/2023
/ Consumer Privacy Rights ,
Consumers ,
Data Protection ,
Enforcement ,
Exemptions ,
Legislative Agendas ,
New Legislation ,
Oregon ,
Personal Data ,
Privacy Laws ,
Proposed Legislation ,
Sensitive Personal Information ,
State and Local Government ,
State Legislatures ,
State Privacy Laws
We said it earlier this month: With many state legislative sessions coming to an end, we were likely to see a push by states to finish up debates and votes on consumer privacy laws, and now you can count Tennessee (and...more
4/25/2023
/ Consumer Privacy Rights ,
Corporate Counsel ,
Data Privacy ,
Data Protection ,
Data Protection Acts ,
New Legislation ,
Personal Data ,
Privacy Acts ,
Privacy Laws ,
State Legislatures ,
State Privacy Laws
We said it earlier this month: With many state legislative sessions coming to an end, we were likely to see a push by states to finish up debates and votes on consumer privacy laws. Now you can count Montana (and Tennessee)...more
4/25/2023
/ Consumer Privacy Rights ,
Data Privacy ,
Data Protection ,
Legislative Agendas ,
New Legislation ,
Personal Data ,
Privacy Acts ,
Privacy Laws ,
State and Local Government ,
State Legislatures ,
State Privacy Laws
With the end of several state legislative sessions on the horizon, it is perhaps unsurprising that we are seeing an uptick in state legislatures passing consumer (or health) data privacy laws. You can now count Indiana among...more
As expected, the number of state consumer privacy laws continues to rise. Joining the ranks of California, Colorado, Connecticut, Utah and Virginia is now Iowa. On March 28, 2023, Iowa’s Governor signed the Iowa Data Privacy...more
There has been a flurry of state privacy activity in the past week, with Colorado becoming the latest state to finalize sweeping data privacy rules and Iowa on the precipice of becoming the sixth state to enact comprehensive...more
In a recent non-binding opinion, EU regulators expressed timid positivity about the European Commission’s draft adequacy decision on the EU-US transatlantic data flows framework (Data Privacy Framework or DPF). While some...more
We would not blame companies for feeling fatigued after the race to comply with the amended California Consumer Privacy Act (CCPA), the soon-to-be finalized CCPA regulations and the new Virginia Consumer Data Protection Act...more
Since Schrems II invalidated the US/EU Privacy Shield, the flow of personal data from the European Union to the United States has been subject to intense regulatory scrutiny. Companies transferring personal data to the United...more
On September 30, 2022, the Colorado Attorney General’s Office (the AG’s Office) released draft regulations to the Colorado Privacy Act (the CPA). Before these proposed regulations take effect, however, there will be a lengthy...more
10/4/2022
/ Appeals ,
Automation Systems ,
Biometric Information ,
California Consumer Privacy Act (CCPA) ,
Colorado ,
Consent ,
Corporate Counsel ,
Customer-Loyalty Programs ,
Data Protection ,
Data Rights ,
Disclosure Requirements ,
Opt-Outs ,
Privacy Acts ,
Privacy Policy ,
Proposed Regulation ,
Public Comment ,
State Attorneys General
2022 has been a busy legislative year for privacy. Dozens of states considered consumer privacy bills, two states enacted privacy consumer bills and California released proposed California Consumer Privacy Act (CCPA)...more
8/30/2022
/ Biometric Information ,
Biometric Information Privacy Act ,
California Consumer Privacy Act (CCPA) ,
Consumer Privacy Rights ,
Continuing Legal Education ,
COPPA ,
Cybersecurity ,
Data Privacy ,
Data Protection ,
Federal Trade Commission (FTC) ,
Legislative Agendas ,
New Legislation ,
Privacy Laws ,
Proposed Legislation ,
Proposed Regulation ,
Proposed Rules ,
Rulemaking Process ,
Securities and Exchange Commission (SEC) ,
Webinars
With time running out in this US Congress, and with midterms around the corner, a bipartisan group of legislators is making what may be a last-gasp attempt at a federal privacy law compromise. On June 3, 2022, House Energy...more
On May 27, 2022, the California Privacy Protection Agency (CPPA) released draft regulations (though still not yet part of a formal rulemaking process) that include what would be seismic changes to California Privacy Rights...more
6/2/2022
/ California ,
California Consumer Privacy Act (CCPA) ,
California Privacy Rights Act (CPRA) ,
Cybersecurity ,
Data Collection ,
Data Privacy ,
Data Protection ,
Data Security ,
Personally Identifiable Information ,
Proposed Rules ,
State Privacy Laws
On March 3, 2022, the Utah House of Representatives unanimously passed a consumer privacy bill which the Utah Senate passed earlier this year. The bill, entitled the Utah Consumer Privacy Act, still has several hurdles to...more
California, Virginia and Colorado have new privacy laws coming into effect in 2023. But now is the time to start preparing your business or organization for compliance.
In this first video of our series, Partner David...more
On December 10, 2021, multiple media outlets, the Cybersecurity and Infrastructure Security Administration (CISA), and the director of cybersecurity at the National Security Agency (NSA) began alerting to a significant...more
12/13/2021
/ Corporate Counsel ,
Critical Infrastructure Sectors ,
Cyber Attacks ,
Cybersecurity ,
Data Protection ,
Data Security ,
Homeland Security Cybersecurity & Infrastructure Security Agency (CISA) ,
National Security ,
National Security Agency (NSA) ,
Popular ,
Software