Keypoint: The California Privacy Protection Agency initiates preliminary rulemaking activities under the California Privacy Rights Act.
On Wednesday, September 22, 2021, the California Privacy Protection Agency (Agency)...more
Keypoint: The 2022 legislative session of proposed state consumer privacy legislation kicks off with the filing of a new bill in Oklahoma.
On September 9, 2021, Rep. Collin Walke (D) and Majority Leader Rep. Josh West...more
Keypoint: A detailed analysis of the Attorney General’s twenty-seven published examples of noncompliance notices sent during the first year of CCPA enforcement reveals key learnings for CCPA compliance efforts.
In July,...more
Keypoint: Businesses that sell personal information under the CCPA are now required to honor Global Privacy Control signals.
In an update to its CCPA FAQs, the California Attorney General’s office has stated that...more
Keypoint: As introduced, the Ohio Personal Privacy Act would provide Ohio residents with some rights regarding their personal data, but it is not as extensive as the CPRA, CPA, and VCDPA...more
Keypoint: The Colorado Senate unanimously passed the Colorado Privacy Act after amending the bill to add back many of the privacy protections previously removed...more
5/27/2021
/ Amended Regulation ,
Colorado ,
Consent ,
Data Privacy ,
Data Transfers ,
Opt-In ,
Opt-Outs ,
Right To Cure ,
Right to Delete ,
Sensitive Personal Information ,
State and Local Government
Keypoint: If signed by the Governor, entities doing business in Nevada will need to examine their data transfers to determine whether they constitute “sales” under the broader definition....more
Keypoint: The Colorado Privacy Act passed unanimously out of committee last week but not before lawmakers revised many of its pro-consumer provisions to pro-business.
On May 5, 2021, the Colorado Senate Business, Labor &...more
Keypoint: If passed, the bill would, among other changes, broaden Nevada’s existing right to opt out of sales of covered information.
In late March, we first reported that the Nevada legislature is considering a bill...more
Keypoint: Proposed bills would amend Nevada privacy legislation to provide consumers with a broader right to opt out of sales.
In 2019 – shortly after the CCPA was enacted – Nevada amended its online privacy notice...more
Keypoint: The Colorado bill mirrors the Virginia Consumer Data Protection Act and Washington Privacy Act but contains some notable differences.
On March 19, 2021, Colorado lawmakers introduced the Colorado Privacy Act...more
3/22/2021
/ California Consumer Privacy Act (CCPA) ,
California Privacy Rights Act (CPRA) ,
Colorado ,
Consumer Privacy Rights ,
Data Privacy ,
Data Processing Rules ,
General Data Protection Regulation (GDPR) ,
Gramm-Leach-Blilely Act ,
Health Insurance Portability and Accountability Act (HIPAA) ,
Opt-Outs ,
Personal Data ,
Popular ,
Proposed Legislation ,
State Attorneys General
Keypoint: Modifications to the CCPA regulation’s provisions regarding requests to opt-out and authorized agent requests are now final.
On March 15, 2021, the California Attorney General’s office announced that the Office...more
3/16/2021
/ California Consumer Privacy Act (CCPA) ,
California Privacy Rights Act (CPRA) ,
Compliance ,
Consent ,
Corporate Counsel ,
Data Privacy ,
Do Not Sell ,
New Regulations ,
Notice and Cure Requirement ,
Opt-Outs ,
Personally Identifiable Information ,
Privacy Policy ,
Right to Delete ,
State Attorneys General
Keypoint: There were four notable developments this week: the Florida House passed a bill out of committee, lawmakers proposed a new bill in Texas, the Washington Privacy Act was scheduled for a public hearing and committee...more
3/15/2021
/ California Consumer Privacy Act (CCPA) ,
Consumer Privacy Rights ,
Corporate Counsel ,
Cybersecurity ,
Data Collection ,
Data Management ,
Data Privacy ,
Data Protection ,
Opt-Outs ,
Personal Data ,
Personally Identifiable Information ,
Privacy Laws ,
Privacy Policy ,
State and Local Government
Keypoint: The California Attorney General’s office again introduces an opt-out button.
On December 10, 2020, the California Attorney General’s office published a fourth set of proposed modifications to the California...more
Keypoint: The California Attorney General’s office once again published proposed modifications to its CCPA regulations. The modifications primarily focus on making changes to the provisions dealing with the right to opt out...more
Keypoint: Some additional changes to the CCPA regulations were made before they were filed with the Secretary of State and became effective.
As discussed in our prior post, on Friday, August 14, 2020, the California Office...more
8/17/2020
/ Addendums ,
California Consumer Privacy Act (CCPA) ,
Consent ,
Corporate Counsel ,
Data Privacy ,
Final Rules ,
Information Sharing ,
Opt-Outs ,
Personally Identifiable Information ,
Privacy Laws ,
State and Local Government
Keypoint: The modified proposed regulations make substantial changes to the proposed regulations, including modifying how consumer notices must be drafted and changing some of the requirements for receiving and responding to...more
2/10/2020
/ California Consumer Privacy Act (CCPA) ,
Consumer Privacy Rights ,
Corporate Counsel ,
Cybersecurity ,
Data Collection ,
Data Privacy ,
Data Protection ,
Data Security ,
Opt-Outs ,
Personal Information ,
Popular ,
Privacy Laws ,
Right to Delete
Keypoint: Maryland lawmakers have introduced a bill that would allow Maryland residents to opt-out of certain types of personal information transfers but that would stop far short of creating CCPA-like rights for Maryland...more
Saturday, November 2, will mark 60 days until the California Consumer Privacy Act (CCPA) goes into effect. While each organization will have its unique compliance challenges, there are a discrete set of tasks – at a minimum –...more
Keypoint: The long-awaited proposed AG regulations are here, and while they provide some much-needed clarity, they will leave businesses wanting more.
On October 10, 2019, the California Attorney General’s office published...more
10/11/2019
/ Attorney General ,
California Consumer Privacy Act (CCPA) ,
Consumer Privacy Rights ,
Corporate Counsel ,
Cybersecurity ,
Data Collection ,
Data Privacy ,
Data Protection ,
Data Security ,
Opt-Outs ,
Personal Information ,
Privacy Laws ,
Proposed Regulation ,
Right to Delete
We previously posted that Alastair Mactaggart, one of the co-authors of the California Consumer Privacy Act (CCPA), intended to submit a new ballot initiative to strengthen the privacy rights that already exist in the CCPA....more
9/27/2019
/ California Consumer Privacy Act (CCPA) ,
Consumer Privacy Rights ,
Cybersecurity ,
Data Collection ,
Data Privacy ,
Data Protection ,
Data Security ,
Opt-Outs ,
Personal Information ,
Popular ,
Privacy Laws
September 13 was the final day for the California legislature to pass bills amending the California Consumer Privacy Act (CCPA) prior to its January 1, 2020, effective date. After months of speculation and anticipation, we...more
9/17/2019
/ California Consumer Privacy Act (CCPA) ,
Consumer Privacy Rights ,
Corporate Counsel ,
Cybersecurity ,
Data Collection ,
Data Privacy ,
Data Protection ,
Data Security ,
Opt-Outs ,
Personal Information ,
Popular ,
Privacy Laws ,
Right to Delete
Key Point: On October 1, 2019, the amendments to Nevada’s privacy policy statute will go into effect, requiring entities subject to the statute to revise their online privacy policies and create an internal process to ensure...more
Key Point: Although not as far-reaching as the CCPA, the Nevada legislation will require entities subject to the statute to revise their online privacy notices and create an internal process to ensure compliance with the new...more
What is the California Consumer Privacy Act of 2018?
In July 2018, the California legislature enacted a first-in-the-nation consumer privacy act entitled the California Consumer Privacy Act of 2018 (CCPA) . The CCPA...more
3/18/2019
/ California Consumer Privacy Act (CCPA) ,
Consumer Privacy Rights ,
Cybersecurity ,
Data Collection ,
Data Privacy ,
Data Protection ,
Data Security ,
Opt-Outs ,
Personally Identifiable Information ,
Privacy Laws ,
Private Right of Action ,
Right to Delete