As some packed the skis and headed to their favorite slopes this winter season, it is hard not to see the analogies to the healthcare private equity (PE) transaction market as we ring in the New Year. Much like the Northern...more
States continued to pass comprehensive consumer privacy laws throughout 2024. 2025 brings eight new state-level comprehensive consumer privacy laws into effect. As with the five state privacy laws that went into effect in...more
Current and potential patients are taking to the internet to share opinions and make decisions about healthcare providers. Good reviews can convert prospective healthcare consumers into patients, while bad reviews,...more
10/10/2024
/ Enforcement Actions ,
Health Care Providers ,
Health Insurance Portability and Accountability Act (HIPAA) ,
Healthcare ,
OCR ,
Online Reviews ,
Patient Privacy Rights ,
Patients ,
PHI ,
Statutory Violations ,
Testimonial Statements
On June 28, the Rhode Island Data Transparency and Privacy Protection Act (DTPPA) was enacted without Governor Dan McKee’s signature, making Rhode Island the twentieth state to enact comprehensive consumer data privacy...more
7/18/2024
/ Consumer Privacy Rights ,
Data Privacy ,
Data Protection ,
Data Protection Acts ,
New Legislation ,
Personal Data ,
Privacy Laws ,
Privacy Policy ,
Regulatory Requirements ,
State and Local Government ,
State Privacy Laws
The list of U.S. state-level data privacy laws will grow substantially this summer as three more comprehensive state laws become effective. Texas, Oregon and Florida each have a comprehensive data privacy law taking effect on...more
5/7/2024
/ Consumer Privacy Rights ,
Corporate Counsel ,
Data Privacy ,
Data Protection ,
Data Protection Acts ,
Legislative Agendas ,
New Legislation ,
Personal Data ,
Privacy Laws ,
Privacy Policy ,
Regulatory Requirements ,
Sensitive Personal Information ,
Small Business ,
State and Local Government ,
State Legislatures ,
State Privacy Laws
On April 17, Nebraska Governor Jim Pillen signed into law the Nebraska Data Privacy Act (the Act), making Nebraska the seventeenth state to enact general consumer data privacy legislation. The Act largely, but not completely,...more
On April 4, Kentucky Governor Andy Beshear signed the Kentucky Consumer Data Protection Act (KCDPA) into law, making Kentucky the sixteenth state to enact comprehensive data privacy legislation and the third state to do so in...more
4/16/2024
/ Biometric Information ,
Consumer Privacy Rights ,
COPPA ,
Data Privacy ,
Enforcement ,
Exemptions ,
Fair Credit Reporting Act (FCRA) ,
Gramm-Leach-Blilely Act ,
Health Insurance Portability and Accountability Act (HIPAA) ,
Personally Identifiable Information ,
State Privacy Laws
As of March 31, 2024, Nevada’s state consumer health data law, Senate Bill No. 370 (SB 370), enters the state-level consumer health data privacy fray. Similar to Washington’s My Health My Data Act (MHMDA), SB 370 focuses on...more
3/21/2024
/ Consumer Privacy Rights ,
Data Collection ,
Data Privacy ,
Data Protection ,
Healthcare ,
New Regulations ,
Personal Data ,
Personal Information ,
Privacy Laws ,
State and Local Government ,
State Privacy Laws
While generative artificial intelligence (AI) apps – such as Chat-GPT, Google Gemini, and Stable Diffusion – are capturing the national spotlight, many businesses are using other forms of machine learning, algorithms, and...more
3/21/2024
/ Algorithms ,
Artificial Intelligence ,
Automated Decision Systems (ADS) ,
California Consumer Privacy Act (CCPA) ,
California Privacy Protection Agency (CPPA) ,
Healthcare ,
Machine Learning ,
Mobile Apps ,
Privacy Laws ,
Proposed Regulation ,
Rulemaking Process ,
Technology Sector
On March 6, New Hampshire joined the growing list of states that have enacted a comprehensive consumer privacy statute when Governor Chris Sununu signed into law Senate Bill 255 (the Act). Generally, the Act follows the...more
3/15/2024
/ Consumer Privacy Rights ,
Data Privacy ,
Data Protection ,
Data Protection Acts ,
Legislative Agendas ,
New Legislation ,
Personal Data ,
Privacy Acts ,
Privacy Laws ,
Privacy Policy ,
Regulatory Requirements ,
State and Local Government ,
State Legislatures ,
State Privacy Laws
Washington’s My Health My Data Act (MHMDA) was enacted in an effort to close a perceived gap in privacy protection for consumer health data. MHMDA’s focus on consumer health data and right of private action deviate from...more
2/5/2024
/ Consent Agreements ,
Data Collection ,
Data Selling ,
Data-Sharing ,
Enforcement ,
Families First Coronavirus Response Act (FFCRA) ,
FERPA ,
Gramm-Leach-Blilely Act ,
Health Insurance Portability and Accountability Act (HIPAA) ,
Healthcare ,
Mental Health ,
PHI ,
Privacy Laws ,
Small Business ,
Summary of Consumer Rights
State-level privacy laws in the United States continue to develop at a dizzying pace and it is understandably difficult to keep track of what takes effect when. Below we’ve outlined the statutes and regulations taking effect...more
1/30/2024
/ Consumer Privacy Rights ,
Corporate Counsel ,
Data Collection ,
Data Privacy ,
Data Protection ,
Healthcare ,
New Regulations ,
Opt-Outs ,
Personal Data ,
Personal Information ,
Privacy Laws ,
State and Local Government ,
State Privacy Laws
W ith various headwinds resulting in down volume in 2023, buyers and sellers alike find themselves asking whether 2024 will see a rebound in deal activity. As we begin 2024, we have highlighted the issues and trends that...more
1/9/2024
/ Acquisitions ,
Artificial Intelligence ,
Corporate Transparency Act ,
Department of Justice (DOJ) ,
Diversity ,
Equity Markets ,
FinCEN ,
Funding ,
Healthcare ,
Investment ,
Investors ,
Mergers ,
Non-Compete Agreements ,
Pharmaceutical Industry ,
Popular ,
Privacy Laws ,
Private Equity ,
Reporting Requirements ,
Restrictive Covenants ,
Risk Management ,
Safe Harbors ,
Section 340B ,
Self-Disclosure Requirements ,
Value-Based Care
The Indian Central Government (Central Government) enacted a broad and significant privacy law, the Digital Personal Data Protection Act (the DPDP), on August 11. The DPDP, when effective (as per dates to be notified by the...more
On September 11, Delaware Governor John Carney signed into law the Delaware Personal Data Privacy Act (DPDPA) (House Bill 154), making Delaware the thirteenth state to enact a comprehensive data privacy framework. The DPDPA...more
Oregon Governor Tina Kotek signed into law the Oregon Consumer Privacy Act (OCPA) (Senate Bill 619) on July 18, making Oregon the twelfth state to enact comprehensive data privacy legislation. The OCPA is primarily based on...more
8/16/2023
/ Consumer Privacy Rights ,
Consumers ,
Data Protection ,
Enforcement ,
Exemptions ,
Legislative Agendas ,
New Legislation ,
Oregon ,
Personal Data ,
Privacy Laws ,
State and Local Government ,
State Legislatures ,
State Privacy Laws
On June 18, Texas became the eleventh state to enact a comprehensive consumer privacy law by passing the Texas Data Privacy and Security Act (TDPSA) (HB 4). The TDPSA will take effect on July 1, 2024, which is the same day as...more
6/23/2023
/ Consumer Privacy Rights ,
Consumer Protection Laws ,
Data Collection ,
Data Controller ,
Data Privacy ,
Data Protection ,
Data Protection Acts ,
Data Security ,
Data Use Policies ,
Enforcement ,
Opt-In ,
Opt-Outs ,
Right To Cure ,
State Attorneys General ,
State Privacy Laws
On June 6, Florida Governor Ron DeSantis approved the passage of Senate Bill 262, which establishes the Florida Digital Bill of Rights (FDBR), set to go into effect July 1, 2024. Florida is now the tenth state to pass...more
6/13/2023
/ Consent ,
Consumer Privacy Rights ,
Covered Entities ,
Data Collection ,
Data Privacy ,
Enforcement Actions ,
Florida ,
Online Safety for Children ,
Opt-In ,
Opt-Outs ,
Personal Data ,
Privacy Laws ,
Social Media ,
State and Local Government
On April 21, the Montana legislature unanimously passed the Montana Consumer Data Privacy Act (MCDPA) (SB 384), joining several states with general consumer data privacy bills. The MCDPA most closely aligns with the...more
On April 21, Tennessee lawmakers approved and sent to Governor Bill Lee for signature, the Tennessee Information Protection Act (TIPA), one of nine different state consumer privacy laws that are generally considered to be...more
5/1/2023
/ Consumer Privacy Rights ,
Data Protection ,
Data Selling ,
Governor Lee ,
Legislative Agendas ,
New Legislation ,
Personal Information ,
Personal Information Protection Act ,
Privacy Acts ,
State Legislatures ,
State Privacy Laws ,
Tennessee
Following closely behind Iowa’s new privacy law, on April 20, Indiana passed its consumer privacy act (SB 5) (Privacy Act), making the state the seventh to adopt what is generally considered a comprehensive consumer privacy...more
4/27/2023
/ Consumer Privacy Rights ,
Data Collection ,
Data Privacy ,
Data Protection ,
Data Protection Acts ,
Data Security ,
Enforcement ,
Personal Data ,
Privacy Acts ,
Privacy Laws ,
State Privacy Laws
On March 28, Iowa Governor Kim Reynolds signed into law an Iowa consumer privacy act (SF 262), making the state the sixth to adopt what is generally considered a comprehensive consumer privacy law. The law takes effect on...more
Privacy professionals rang in the New Year with two new consumer privacy laws coming into effect and three more on the horizon. Among them are California Consumer Privacy Act (CCPA) amendments enacted through the California...more
This holiday season and the new year brought us a revised draft of the Colorado Privacy Act (CPA) rules, gifted by the Colorado Attorney General’s (AG) Office on December 21, 2022, along with a second round of revisions...more
2/1/2023
/ Colorado ,
Comment Period ,
Consumer Privacy Rights ,
Data Protection ,
Data Security ,
Legislative Agendas ,
Privacy Acts ,
Proposed Regulation ,
Proposed Rules ,
Regulatory Agenda ,
State Privacy Laws
It has been a bustling fall for the California Privacy Protection Agency (CPPA or Agency). In the spirit of the upcoming holiday season, the Agency gifted us not one but two rounds of proposed modifications to the regulations...more
11/10/2022
/ Audits ,
California ,
California Consumer Privacy Act (CCPA) ,
California Privacy Rights Act (CPRA) ,
Contractors ,
Cybersecurity ,
Data Protection ,
Draft Guidance ,
General Data Protection Regulation (GDPR) ,
Opt-Outs ,
Rulemaking Process ,
Sensitive Personal Information ,
Third-Party Service Provider