On July 16, 2020, the Court of Justice of the European Union (CJEU), the supreme court of the European Union on matters involving European Union law, issued its long anticipated decision in the “Schrems II” case ( case...more
7/21/2020
/ Court of Justice of the European Union (CJEU) ,
Cybersecurity ,
Data Processors ,
Data Protection ,
EU ,
EU-US Privacy Shield ,
General Data Protection Regulation (GDPR) ,
International Data Transfers ,
Ireland ,
Personal Data ,
Personally Identifiable Information ,
Schrems I & Schrems II ,
Standard Contractual Clauses
Enforcement of the California Consumer Privacy Act (CCPA) began July 1, 2020. Our privacy team at Troutman Pepper includes several attorneys who worked in an attorney general’s office. This privacy regulatory team has...more
7/17/2020
/ California Consumer Privacy Act (CCPA) ,
Consumer Privacy Rights ,
Corporate Counsel ,
Cybersecurity ,
Data Collection ,
Data Management ,
Data Privacy ,
Data Protection ,
Data Sellers ,
Information Governance ,
Personal Data ,
Personally Identifiable Information ,
Privacy Laws ,
State and Local Government
Businesses awaiting final California Consumer Privacy Act (CCPA) regulations will likely be waiting until after enforcement of the CCPA begins on July 1....more
5/27/2020
/ California Consumer Privacy Act (CCPA) ,
Consumer Privacy Rights ,
Cybersecurity ,
Data Collection ,
Data Management ,
Data Privacy ,
Data Protection ,
Information Governance ,
Personally Identifiable Information ,
Rulemaking Process ,
State and Local Government ,
State Attorneys General
On May 4, Californians for Consumer Privacy, the organization that sponsored the California Consumer Privacy Act (CCPA) announced that it had submitted enough signatures to put a new privacy law, the California Privacy Rights...more
As we reported in March, the COVID-19 pandemic is being leveraged by malicious cyber actors to make various cybersecurity attacks. ...more
4/21/2020
/ Cyber Attacks ,
Cyber Threats ,
Cybersecurity ,
Data Breach ,
Hackers ,
Homeland Security Cybersecurity & Infrastructure Security Agency (CISA) ,
Information Technology ,
Malware ,
NCSC ,
Personally Identifiable Information ,
Phishing Scams ,
Ransomware ,
UK
COVID-19’s strain on businesses has prompted the federal and state governments to relax certain regulatory standards. Regardless of the pandemic’s increasing momentum in the United States, and in California particularly, the...more
3/27/2020
/ California Consumer Privacy Act (CCPA) ,
Consumer Privacy Rights ,
Coronavirus/COVID-19 ,
Cybersecurity ,
Data Collection ,
Data Management ,
Data Privacy ,
Personal Data ,
Personally Identifiable Information ,
Privacy Laws ,
State and Local Government ,
State Attorneys General
On February 7, 2020, the California Attorney General released modifications to the proposed regulations implementing the California Consumer Privacy Act (CCPA), the state’s sweeping privacy law that took effect on January 1. ...more
2/18/2020
/ California Consumer Privacy Act (CCPA) ,
Consumer Privacy Rights ,
Cybersecurity ,
Data Collection ,
Data Management ,
Data Privacy ,
Data Protection ,
Information Governance ,
Opt-Outs ,
Personal Data ,
Personally Identifiable Information ,
Privacy Laws ,
Regulatory Requirements ,
Rulemaking Process ,
State and Local Government ,
State Attorneys General
As we have reported previously, the California Consumer Privacy Act (CCPA) will take effect on January 1, 2020. On or before that date, businesses that employ California residents, retain California residents as independent...more
10/29/2019
/ California Consumer Privacy Act (CCPA) ,
Consumer Privacy Rights ,
Cybersecurity ,
Data Collection ,
Data Management ,
Data Privacy ,
Data Protection ,
Gig Economy ,
Hiring & Firing ,
Independent Contractors ,
Job Applicants ,
Notice Requirements ,
Personal Data ,
Personally Identifiable Information ,
Privacy Laws ,
State and Local Government
On October 10, the California Attorney General released highly anticipated proposed regulations implementing the California Consumer Privacy Act (CCPA). The CCPA, which takes effect on January 1, 2020, provides California...more
On October 10, the California Attorney General released highly anticipated proposed regulations implementing the California Consumer Privacy Act (CCPA). The CCPA, which takes effect on January 1, 2020, provides California...more
10/14/2019
/ California Consumer Privacy Act (CCPA) ,
Comment Period ,
Consumer Privacy Rights ,
COPPA ,
Cybersecurity ,
Data Collection ,
Data Management ,
Data Privacy ,
Data Protection ,
Exemptions ,
Legislative Agendas ,
Personal Data ,
Personally Identifiable Information ,
Privacy Laws ,
Privacy Policy ,
Proposed Regulation ,
Regulatory Agenda ,
Rulemaking Process ,
State and Local Government
On September 25, Alastair Mactaggart, a real estate developer and founder and chair of Californians for Consumer Privacy, announced that he formally filed an initiative to appear on the November 2020 ballot, titled the...more
10/7/2019
/ Ballot Measures ,
California Consumer Privacy Act (CCPA) ,
Comment Period ,
Consumer Privacy Rights ,
Cybersecurity ,
Data Collection ,
Data Management ,
Data Privacy ,
Data Protection ,
Employee Privacy Rights ,
Personal Data ,
Personally Identifiable Information ,
Privacy Laws ,
State and Local Government
On September 13, the final day of its legislative session, the California Legislature approved five amendments to the California Consumer Privacy Act (CCPA), the state’s sweeping new privacy law that takes effect on January...more
9/17/2019
/ California Consumer Privacy Act (CCPA) ,
Consumer Privacy Rights ,
Cooperative Compliance Regime ,
Cybersecurity ,
Data Breach ,
Data Collection ,
Data Privacy ,
Data Protection ,
Personal Data ,
Personally Identifiable Information ,
Privacy Laws ,
Request For Information ,
State and Local Government ,
Third-Party Service Provider
With California enacting a sweeping new data privacy law on June 28, now is the time for companies to review and adjust to how the California Consumer Privacy Act will impact their business. The act, which has broad...more
9/10/2018
/ Amended Legislation ,
California Consumer Privacy Act (CCPA) ,
Civil Monetary Penalty ,
Consumer Privacy Rights ,
Cybersecurity ,
Data Breach ,
Data Collection ,
Data Privacy ,
Data Protection ,
Data Security ,
Data Use Policies ,
Disclosure Requirements ,
General Data Protection Regulation (GDPR) ,
Notice Requirements ,
Opt-Outs ,
Personally Identifiable Information ,
Policies and Procedures ,
Privacy Laws ,
Privacy Policy ,
Private Right of Action ,
Right to Delete ,
Supply Chain ,
Vendors ,
Webinars
California enacted a sweeping new data privacy law on June 28, 2018, just one week after it was introduced in the California legislature in part to head off an effort to pass a stricter data privacy law as a ballot measure...more
7/10/2018
/ Consumer Privacy Rights ,
Cybersecurity ,
Data Collection ,
Data Privacy ,
Data Protection ,
General Data Protection Regulation (GDPR) ,
New Legislation ,
Opt-Outs ,
Personal Data ,
Personally Identifiable Information ,
Private Right of Action ,
State and Local Government
With South Dakota and Alabama’s new statutes, all 50 states and the District of Columbia have now enacted data breach notification laws. The Oregon and Delaware amended statutes will enhance requirements, and Canada’s new law...more
4/25/2018
/ Canada ,
Corporate Counsel ,
Cyber Attacks ,
Cybersecurity ,
Data Breach ,
Data Protection ,
Hackers ,
New Legislation ,
Notice Requirements ,
Personally Identifiable Information ,
Popular ,
Risk Management ,
State and Local Government ,
State Data Breach Notification Statutes
This initiative by the Attorney General is effective immediately and is just the latest example of California’s effort to increase enforcement of laws aimed at protecting the privacy and data security of individual consumers....more
10/20/2016
/ Attorney General ,
CalOPPA ,
Data Security ,
Internet of Things ,
Mobile Apps ,
Mobile Health Apps ,
Online Platforms ,
Personally Identifiable Information ,
Policy Violations ,
Popular ,
Posting Requirements ,
Privacy Policy ,
Websites
The decision further aligns the circuit courts in holding that the private right of action is limited to the Act’s prohibition on unauthorized disclosures only.
A recent attempt to expand the breadth of the private right...more