Oregon Attorney General Dan Rayfield has released a report detailing implementation steps and enforcement actions taken during the first six months of the Oregon Consumer Privacy Act ("OCPA"), which entered into force in July...more
The US relies on existing federal laws and guidelines to regulate AI but aims to introduce AI legislation and a federal regulation authority. Until then, developers and deployers of AI systems will operate in an increasing...more
4/1/2025
/ Artificial Intelligence ,
California ,
Colorado ,
Enforcement Actions ,
FTC Act ,
New Legislation ,
Proposed Legislation ,
Regulatory Agenda ,
Regulatory Requirements ,
State and Local Government ,
State Privacy Laws ,
Technology Sector
On February 26, 2025, Arkansas Attorney General Tim Griffin filed a lawsuit against General Motors and its subsidiary OnStar (collectively, "GM"), alleging deceptive business practices related to the collection and sale of...more
3/27/2025
/ Consent ,
Consumer Privacy Rights ,
Consumer Protection Laws ,
Data Collection ,
Data Privacy ,
Enforcement Actions ,
New Legislation ,
Popular ,
State Attorneys General ,
State Privacy Laws ,
Unfair or Deceptive Trade Practices
In the absence of comprehensive artificial Intelligence ("AI") regulation at the federal level, state and local legislatures have been busy considering their own AI legislation. Laws regulating automated decision making have...more
3/7/2025
/ Algorithms ,
Artificial Intelligence ,
Automated Decision Systems (ADS) ,
Compliance ,
Consumer Privacy Rights ,
Data Privacy ,
Data Protection ,
Enforcement Actions ,
Machine Learning ,
Privacy Laws ,
State and Local Government ,
State Legislatures ,
State Privacy Laws ,
Technology Sector
The Department of Justice (DOJ) issued a final rule (the "Rule") on December 27, 2024, implementing Executive Order 14117 "Preventing Access to Americans' Bulk Sensitive Personal Data and United States Government-Related Data...more
The Texas Attorney General has emerged as a significant regulatory enforcement authority for data privacy in the US. Traditionally, data privacy enforcement in the US has emanated from the Federal Trade Commission and other...more
2/4/2025
/ Compliance ,
Consent ,
Consumer Privacy Rights ,
Data Brokers ,
Data Privacy ,
Data Protection ,
Personal Data ,
Popular ,
Privacy Laws ,
Privacy Notice Rule ,
State Privacy Laws
The momentum for change in US state privacy laws accelerated in 2024, driven by several significant developments, including efforts for a federal privacy law, state-level enforcement actions and the activation of four new...more
1/22/2025
/ Business Entities ,
Compliance ,
Consumer Privacy Rights ,
Corporate Counsel ,
Corporate Governance ,
Data Privacy ,
Data Protection ,
Enforcement Actions ,
Personal Data ,
Privacy Laws ,
Regulatory Requirements ,
State and Local Government ,
State Privacy Laws
California Bills, Rulemaking, and Enforcement Update -
CPPA automated decision-making technology -
On November 22, 2024, the California Privacy Protection Agency (CPPA) opened the formal public comment period on its...more
1/21/2025
/ Algorithms ,
Automated Decision Systems (ADS) ,
California ,
California Consumer Privacy Act (CCPA) ,
California Privacy Protection Agency (CPPA) ,
Consumer Privacy Rights ,
Data Brokers ,
Data Privacy ,
Data Protection ,
Enforcement Actions ,
Federal Trade Commission (FTC) ,
New York ,
Online Safety for Children ,
Privacy Laws ,
State Privacy Laws ,
Texas
The US relies on existing federal laws and guidelines to regulate AI but aims to introduce AI legislation and a federal regulation authority. Until then, developers and deployers of AI systems will operate in an increasing...more
12/20/2024
/ Artificial Intelligence ,
Enforcement Actions ,
FCC ,
Federal Aviation Administration (FAA) ,
Federal Trade Commission (FTC) ,
FTC Act ,
Legislative Agendas ,
Machine Learning ,
NDAA ,
New Legislation ,
Proposed Legislation ,
Regulatory Agenda ,
Regulatory Authority ,
Risk Management
Once again, California is flexing its market power by taking bold and wide-ranging legislative action to regulate the use and deployment of artificial intelligence ("AI") systems. In 2024, the California ("CA") Legislature...more
Over the past two decades, innovation has shifted from the physical to the digital world. Data has become the lifeblood not only of e-commerce, but also of the full range of economic and social activity, including in the...more
In June 2024, California Attorney General Rob Bonta and Los Angeles City Attorney Hydee Feldstein Soto announced a $500,000 settlement1 with Tilting Point Media LLC (Tilting Point). After a joint investigation by the...more
The Colorado Artificial Intelligence Act will impose mounting obligations on developers and deployers of high-risk AI systems in an effort to protect consumers from discriminatory consequential decisions by such systems....more
On April 2, 2024, the California Privacy Protection Agency's (CPPA) Enforcement Division issued its first enforcement advisory, titled "Applying Data Minimization to Consumer Requests," to further emphasize the importance of...more
5/9/2024
/ California ,
California Consumer Privacy Act (CCPA) ,
California Privacy Protection Agency (CPPA) ,
Data Collection ,
Data Deletion ,
Data Protection ,
Data Selling ,
Data-Sharing ,
Enforcement ,
New Regulations ,
Opt-Outs ,
Personal Data ,
Regulatory Requirements
Proposed American Privacy Rights Act of 2024 seeks to establish national consumer data privacy rights, govern Artificial Intelligence and automated decision-making, impose additional obligations on high-impact social media...more
4/19/2024
/ Consumer Privacy Rights ,
Covered Entities ,
Data Privacy ,
Data Protection ,
Data Protection Acts ,
Legislative Agendas ,
New Legislation ,
Personal Data ,
Privacy Acts ,
Privacy Laws ,
Privacy Policy ,
Regulatory Requirements ,
State and Local Government ,
State Privacy Laws
Plaintiffs' attorneys recently have filed a series of lawsuits in New Jersey, seeking damages based on alleged violations of Daniel's Law (N.J. Stat. § 56:8-166.1). The suits allege that various website operators have...more
On February 21, 2024, California Attorney General Rob Bonta ("Cal AG") announced that his office reached a settlement with DoorDash, the food delivery service company, for violating the California Consumer Privacy Act...more
3/25/2024
/ California Consumer Privacy Act (CCPA) ,
Consumer Privacy Rights ,
Data Selling ,
DoorDash ,
Enforcement Actions ,
Opt-Outs ,
Personal Information ,
Privacy Policy ,
Settlement ,
State Attorneys General ,
State Privacy Laws ,
Third-Party Service Provider
On February 28, 2024, President Biden signed Executive Order 14117 on "Preventing Access to Americans' Bulk Sensitive Data and United States Government-Related Data by Countries of Concern" (the EO).1 The EO calls for the...more
On January 26, 2024, the DOJ and FTC announced that they were updating the language in their "standard preservation letters and specifications for all second requests, voluntary access letters, and compulsory legal process,...more
Last week, on January 25, 2024, the US Federal Trade Commission (FTC) held an inaugural public summit on artificial intelligence (AI) policy, as the agency explores antitrust and consumer protection challenges posed by the...more
In 2023, the privacy landscape saw a proliferation of comprehensive state data privacy laws being enacted in several jurisdictions, as well as a few that have also taken effect. Although, many of the laws are similar,...more
12/27/2023
/ Artificial Intelligence ,
Biden Administration ,
Data Collection ,
Data Privacy ,
Data Protection ,
Data Security ,
Enforcement Actions ,
Executive Orders ,
Legislative Agendas ,
Machine Learning ,
New Legislation ,
Personal Data ,
Privacy Laws ,
Regulatory Reform ,
State and Local Government ,
State Privacy Laws
With the 2023 annual report season upon us, it is time for companies to take stock of risk factors for 10-Ks and 20-Fs, and consider whether recent economic, political, technological, and regulatory developments have had (or...more
12/22/2023
/ Annual Reports ,
Artificial Intelligence ,
Climate Change ,
Cybersecurity ,
Disclosure Requirements ,
Geopolitical Risks ,
Internal Controls ,
Popular ,
Publicly-Traded Companies ,
Risk Factors ,
Securities and Exchange Commission (SEC)
On November 27, 2023, the European Union ("EU") adopted the final text of the Data Act, marking an effort to create a harmonized, cross-sectoral data sharing framework with the stated goal of ensuring fair access to and use...more
11/30/2023
/ B2B Organizations ,
Corporate Counsel ,
DATA Act ,
Data Protection ,
Digital Data ,
Enforcement Actions ,
EU ,
EU Data Protection Laws ,
European Commission ,
General Data Protection Regulation (GDPR) ,
New Legislation ,
Personal Data ,
Small and Medium-Sized Enterprises (SMEs) ,
Technology Sector
On May 18, 2023, in Twitter, Inc. v. Taamneh, the Supreme Court issued a unanimous opinion declining to impose secondary liability on tech companies for allegedly failing to prevent ISIS from using their platforms for...more