The European Commission approved a new adequacy decision on the EU-US Data Privacy Framework on July 10, 2023. The European Commission issued a press release, stating that "[T]he decision concludes that the United States...more
The California Superior Court ruled on June 30, 2023, that the California Privacy Protection Agency (CPPA) cannot begin enforcement of the California Privacy Rights Act of 2020 (CPRA) until March 29, 2024....more
Katten's Privacy, Data and Cybersecurity Quick Clicks is a monthly newsletter highlighting the latest news and legal developments involving privacy, data and cybersecurity issues across the globe....more
On June 18, Texas Governor Greg Abbott signed into law the Texas Data Privacy and Securities Act (TDPSA). Substantive portions of the TDPSA, otherwise known as H.B. 4, are set to take effect on July 1, 2024, making Texas the...more
In June, the Consumer Financial Protection Bureau (CFPB) issued a report (Report) summarizing its research into the use of artificial intelligence (AI) in consumer finance. The Report focused on the shift away from "human...more
Four Key Considerations Since SEC Amended Form PF -
In early May, the Securities and Exchange Commission (SEC) adopted a final rule amending Form PF, the confidential reporting form for certain SEC-registered investment...more
6/14/2023
/ Biometric Information Privacy Act ,
CFTC ,
Climate Change ,
Crypto Exchanges ,
Cryptoassets ,
Data Privacy ,
Digital Assets ,
Environmental Social & Governance (ESG) ,
EU ,
False Claims Act (FCA) ,
New Legislation ,
Securities and Exchange Commission (SEC) ,
Securities Exchange Act ,
Texas ,
UK ,
Whistleblowers
On May 28, the Texas legislature passed the Texas Data Privacy and Security Act (TDPSA), also known as H.B. 4. The TDPSA was sent to Governor Greg Abbott on May 30. If signed into law, the TDPSA will take effect on July 1,...more
Florida Health Information Storage Changes Taking Effect on July 1 -
Foreign Interests in the health care provider environment have generally meant ownership interests of persons from outside of the state in which the...more
On April 21, Montana and Tennessee passed comprehensive bills in their respective state legislatures. Montana and Tennessee now join Indiana and Iowa this year to enact comprehensive state privacy laws....more
NFTs and the Enduring Allure of Digital Collectibles -
This is the first article of a series by Katten attorneys examining non-fungible tokens (NFTs) and various novel legal issues raised by NFTs, including in copyright...more
Utah Is the First State to Limit Teens Under 18 From Social Media Access -
Utah Gov. Spencer Cox (R) signed two bills on March 23 (SB 152 and HB 311) prohibiting children under the age of 18 from using social media between...more
On March 31, 2023, the Italian Data Protection Authority (Garante per la protezione dei dati personali) announced that it is temporarily blocking the artificial intelligence software ChatGPT as a result of rising concerns...more
On March 30, 2023, the California Privacy Protection Agency (CPPA) announced that its rulemaking package to implement the California Consumer Privacy Act of 2018 (CCPA), as amended by the California Privacy Rights Act of 2020...more
Iowa is now the sixth state in the U.S. to adopt a comprehensive privacy law that aims to give consumers more control over protecting their personal data.
Signed by Gov. Kim Reynolds (R) on Tuesday, Senate File 262 was...more
Ever-Expanding BIPA Damages: Illinois Supreme Court Holds Each Collection or Dissemination of Biometric Data Constitutes a Separate Violation of BIPA -
In an eagerly-awaited decision in Cothron v. White Castle System,...more
3/22/2023
/ Biden Administration ,
Biometric Information ,
California Privacy Protection Agency (CPPA) ,
China ,
Cross-Border ,
Data Collection ,
Data Privacy ,
EU ,
Financial Industry Regulatory Authority (FINRA) ,
IL Supreme Court ,
Online Safety for Children ,
Personal Data ,
Securities and Exchange Commission (SEC) ,
Singapore
The California Privacy Protection Agency ("CPPA") Board unanimously voted 4-0 to finalize the proposed final California Privacy Rights Act ("CPRA") on February 3, 2022. The proposed final CPRA regulations were released on...more
At the State of the Union on February 7, President Biden reiterated the need to protect children online and address social media's mental health impact on children....more
Katten's Privacy, Data and Cybersecurity Quick Bytes is a monthly newsletter highlighting the latest news and legal developments involving privacy, data and cybersecurity issues across the globe.
...more
Additional Requirements to Go Into Effect June 9, 2023 -
As we discussed in our March 3 Advisory, on October 27, 2021, the Federal Trade Commission (FTC) announced revisions (the 2021 Revisions) to its information...more
In the largest multistate privacy settlement in U.S. history, Google has agreed to a $391.5m settlement with 40 states in connection with an investigation into how Google tracked users' locations.
The investigation by the...more
Kattison Avenue examines the latest topics in advertising law affecting today's advertisers, advertising and promotions agencies, technology developers, content producers and entertainment companies.
...more
The California Consumer Privacy Act (CCPA) is California's groundbreaking legislation that seeks to give California consumers certain rights over how a business handles "personal information" collected about its consumers. On...more
9/21/2022
/ B2B Organizations ,
B2B Transactions ,
California Consumer Privacy Act (CCPA) ,
Consumer Privacy Rights ,
Corporate Counsel ,
Data Collection ,
Data Privacy ,
Data Protection ,
Data Security ,
Personal Information ,
Privacy Laws
As you may recall from our previous advisory, "The European Commission Implements New Standard Contractual Clauses", existing data sharing contracts that include the old standard contractual clauses ("SCCs") will only remain...more
Under the EU General Data Protection Regulation (EU GDPR) and the UK Data Protection Act 2018 (UK GDPR) (together the GDPR), even if an organisation is not established in the European Economic Area (EEA) or United Kingdom it...more
11/30/2021
/ Corporate Counsel ,
Cybersecurity ,
Data Privacy ,
Data Protection ,
Data Security ,
EU ,
General Data Protection Regulation (GDPR) ,
International Data Transfers ,
Personal Data ,
Popular ,
UK
On 12 November 2020, the European Commission (Commission) published a draft Implementing Decision on standard contractual clauses for the transfer of personal data to third countries pursuant to the EU General Data Protection...more