On April 21, 2025, Arkansas Governor Sarah Huckabee Sanders signed into law the Arkansas Children and Teens’ Online Privacy Protection Act (Act), which will become effective on July 1, 2026. It draws inspiration from the...more
4/28/2025
/ Arkansas ,
Consent ,
Data Collection ,
Data Privacy ,
Data Protection ,
New Legislation ,
Online Safety for Children ,
Personal Information ,
Privacy Laws ,
Regulatory Requirements ,
State Privacy Laws
On April 22, 2025, the Federal Trade Commission (FTC) published the finalized amendments (Amendments) to the Children’s Online Privacy Protection Rule (COPPA Rule) that would impose additional restrictions on website and...more
On March 12, 2025, the California Privacy Protection Agency (CPPA) published its decision approving a Stipulated Final Order (Order) against a major automotive manufacturer (company) for violations of the California Consumer...more
3/20/2025
/ California ,
California Consumer Privacy Act (CCPA) ,
California Privacy Protection Agency (CPPA) ,
Consumer Privacy Rights ,
Cookies ,
Data Privacy ,
Data Protection ,
Enforcement Actions ,
Personal Data ,
Personal Information ,
Privacy Laws
On March 13, 2025, the U.S. District Court for the Northern District of California granted a preliminary injunction preventing the California Attorney General (AG) from enforcing the California Age-Appropriate Design Code Act...more
On March 7, 2025, the Office of the New York State Attorney General (NY AG) published an Assurance of Discontinuance (Assurance) settling claims against Saturn Technologies, Inc. (company), a developer of a social media app...more
This week California Attorney General Rob Bonta announced a new investigative sweep under the California Consumer Privacy Act (CCPA). We have anticipated this sweep for some time based on the focus and the direction of a...more
3/13/2025
/ California Consumer Privacy Act (CCPA) ,
California Privacy Rights Act (CPRA) ,
Consumer Privacy Rights ,
Data Collection ,
Data Privacy ,
Data Protection ,
Location Data ,
Mobile Apps ,
Privacy Laws ,
State Attorneys General ,
State Privacy Laws
On March 4, 2025, the California Attorney General (AG) announced a further delay in the enforcement of the California Age-Appropriate Design Code Act (CAADCA) until April 5, 2025. Initially operative on July 1, 2024, CAADCA’s...more
On January 16, 2025, the Federal Trade Commission (FTC) voted 5-0 to approve the finalized amendments to the Children’s Online Privacy Protection Rule (COPPA Rule) that would offer additional privacy safeguards for children...more
On August 1, 2024, New York Attorney General (“AG”) Letitia James issued two advanced notices of proposed rulemaking (“ANPRs”) for the Stop Addictive Feeds Exploitation (SAFE) for Kids Act (the “SAFE Act”) and the Child Data...more
On July 11, 2024, the New York Department of Financial Services (“NYDFS”) released Insurance Circular Letter No. 7, which establishes guidelines on the use of artificial intelligence systems (“AIS”) and external consumer data...more
8/12/2024
/ Anti-Discrimination Policies ,
Artificial Intelligence ,
Discrimination ,
Enforcement Priorities ,
Insurance Industry ,
NYDFS ,
Pricing ,
Regulatory Oversight ,
Risk Management ,
Transparency ,
Underwriting ,
Vendor Contacts
Our Privacy, Cyber & Data Strategy Group analyzes important guidance from the NYDFS on how insurers use external consumer data and information sources and artificial intelligence systems....more
On July 30, 2024, in a 91-3 vote, the U.S. Senate passed the bill for the Kids Online Safety and Privacy Act (the “Bill”). The Bill, which combines the bills for the Kids Online Safety Act (“KOSA”) and the Children and Teens’...more
8/8/2024
/ Consent ,
COPPA ,
Data Collection ,
Data Privacy ,
Duty of Care ,
Minors ,
Online Platforms ,
Online Safety for Children ,
Personal Data ,
Personal Information ,
Privacy Policy ,
Proposed Legislation
On June 18, 2024, California Attorney General (“AG”) Rob Bonta and Los Angeles City Attorney Hydee Feldstein Soto announced a settlement with a video game developer and publisher regarding allegations that the company...more
7/16/2024
/ California ,
California Consumer Privacy Act (CCPA) ,
COPPA ,
Data Privacy ,
Minors ,
Mobile Apps ,
Online Safety for Children ,
Parental Consent ,
Personal Data ,
Settlement ,
Targeted Digital Advertising ,
Video Games
On March 29, 2024, the Federal Trade Commission (the “FTC”) published a unanimous decision to deny an application by the Entertainment Software Rating Board, Yoti, and SuperAwesome (collectively, the “Applicants”) to add a...more
The Federal Trade Commission (FTC) received over 270 comments to its notice of proposed rulemaking (NPRM) for the amendments to the Children’s Online Privacy Protection Rule (COPPA Rule) during the public comment period that...more
3/15/2024
/ Biometric Information ,
California Privacy Protection Agency (CPPA) ,
COPPA ,
Data Collection ,
Federal Trade Commission (FTC) ,
NPRM ,
Online Safety for Children ,
Personal Data ,
Personal Information ,
Regulatory Agenda ,
Regulatory Oversight
The Office of the Attorney General of Washington (the “AG”) has updated the Frequently Asked Questions (the “FAQs”) for the Washington My Health My Data Act (the “Act” or “Washington Act”) to provide guidance on the AG’s...more
Our Consumer Protection/FTC and Privacy, Cyber & Data Strategy teams review how the Federal Trade Commission’s proposal to amend the COPPA Rule would to create significant operational changes for website operators....more
On December 29, 2023, the Colorado Attorney General (the “AG”) announced that the Global Privacy Control (“GPC”) will become the first universal opt-out mechanism (“UOOM”) the AG considers valid under the Colorado Privacy Act...more
On November 21, 2023, the Colorado Attorney General (the “AG”) published a shortlist of potential universal opt-out mechanisms (“UOOMs”) that the AG is considering recognizing as binding under the Colorado Privacy Act (the...more
On August 28, 2023, the California Privacy Protection Agency (the “Agency”) released two sets of draft regulations under the California Consumer Privacy Act (the “CCPA”), one for risk assessments and another for cybersecurity...more
Oregon Governor Tina Kotek signed into law the Bill Relating to Registration of Business Entities that Qualify as Data Brokers (HB 2052) (the “Act”) on July 27, 2023. Effective January 1, 2024, the Act will require data...more
On July 19, 2023, the Federal Trade Commission (the “FTC”) announced that it is seeking comment on an application for a new verifiable parental consent mechanism under the Children’s Online Privacy Protection Act (“COPPA”)....more
Our Privacy, Cyber & Data Strategy, Consumer Protection/FTC, and Health Care Teams examine the Federal Trade Commission’s continued focus on consumer privacy in the digital health care space....more
Our Intellectual Property Group discusses the potential regulatory implications of the Biden Administration’s National Cybersecurity Strategy and the important open questions that remain....more
The California Privacy Protection Agency (“CPPA”) announced during its Board meeting on December 16, 2022 that the regulations implementing the California Privacy Rights Act (“CPRA”) will not likely go into effect until April...more