In this Privacy, Cyber & AI Decoded alert, we cover Colorado’s Biometric Identifier Requirements, Delaware’s Data Protection Assessment Requirement, Minnesota’s new comprehensive privacy law going into effect, Tennessee’s...more
7/9/2025
/ Biometric Information ,
Compliance Dates ,
Consent ,
Data Privacy ,
Department of Justice (DOJ) ,
Enforcement ,
Filing Deadlines ,
New Regulations ,
Online Safety for Children ,
Personal Data ,
Privacy Laws ,
Sensitive Personal Information ,
State Privacy Laws
To help our clients and readers sort through the volume of privacy, cyber, and AI news, we are switching Privacy, Cyber, & AI Decoded to a summary format. In this first edition, we look at a proposed 10-year moratorium on...more
6/4/2025
/ 23andMe ,
Artificial Intelligence ,
California Consumer Privacy Act (CCPA) ,
California Privacy Protection Agency (CPPA) ,
Data Brokers ,
Data Privacy ,
Data Security ,
Enforcement Actions ,
National Security ,
Privacy Laws ,
Proposed Legislation ,
State and Local Government
The International Association of Privacy Professionals (IAPP) once again delivered an outstanding 2025 Global Summit. Hinshaw partners and associates were proud to participate in the event and are pleased to provide our...more
In November 2023, New York State's Department of Financial Services (NYDFS) amended its cybersecurity regulation, Part 500. This legal alert provides an update for Covered Entities and Class A Businesses on the current NYDFS...more
The California Privacy Protection Agency (CPPA) issued a settlement order on March 12, 2025, with an vehicle manufacturer regarding its investigation of its privacy practices, where it agreed to a $632,500 settlement for 150...more
The World Economic Forum has stated that 88 percent of C-suite executives indicated that adopting artificial intelligence (AI) in their companies is a key initiative for 2025. Companies are pivoting from merely testing AI to...more
2/21/2025
/ Artificial Intelligence ,
California Consumer Privacy Act (CCPA) ,
Compliance ,
Data Privacy ,
Data Security ,
Disclosure Requirements ,
NIST ,
Personal Data ,
Personal Information ,
Privacy Laws ,
State Privacy Laws ,
Transparency
With a continued lack of progress on federal privacy legislation, state Attorney Generals are emphasizing the importance of protecting consumers and their right to opt out of sharing and selling their personal information....more
To commemorate Data Privacy Day, we are pleased to outline Hinshaw's top five privacy predictions for 2025. We covered our strategic recommendations for privacy planning in our earlier alert, and today, we provide some...more
1/30/2025
/ Artificial Intelligence ,
Cybersecurity ,
Data Privacy ,
Data Protection ,
Data Security ,
Electronic Protected Health Information (ePHI) ,
Federal Trade Commission (FTC) ,
General Data Protection Regulation (GDPR) ,
Machine Learning ,
Online Safety for Children ,
Popular ,
Regulatory Requirements ,
State Privacy Laws
As January 2025 privacy strategy planning ramps up this fall, our Privacy, Security, & Artificial Intelligence team has put together a planning alert for 2024–2025. In this installment, we review the following nine state...more
9/26/2024
/ Compliance ,
Consent ,
Consumer Privacy Rights ,
Data Privacy ,
Data Protection Impact Assessments (DPIAs) ,
Data Security ,
Opt-Outs ,
Personal Data ,
Privacy Policy ,
Regulatory Requirements ,
Sensitive Personal Information ,
State Privacy Laws
On July 11, 2024, the New York State Department of Financial Services (NYSDFS) adopted a final circular about the "Use of Artificial Intelligence ("AI") Systems and External Consumer Data and Information Sources in Insurance...more
8/26/2024
/ Algorithms ,
Artificial Intelligence ,
Automation Systems ,
Corporate Governance ,
Data Use Policies ,
Discrimination ,
Enforcement Priorities ,
Insurance Industry ,
New York ,
NYDFS ,
Risk Mitigation ,
Underwriting
What Issues Did the California Privacy Protection Agency Raise? On July 16, 2024, the California Privacy Protection Agency (Agency) discussed proposed updates to the California Consumer Privacy Act (CCPA) regulations....more
7/30/2024
/ Artificial Intelligence ,
California ,
California Consumer Privacy Act (CCPA) ,
California Privacy Protection Agency (CPPA) ,
Consumer Privacy Rights ,
Corporate Counsel ,
Cybersecurity ,
Data Privacy ,
Enforcement Priorities ,
Opt-Outs ,
Popular ,
Privacy Policy ,
Regulatory Agenda ,
Risk Assessment ,
State Privacy Laws
With state privacy laws continuing to increase, will the federal American Privacy Rights Act be adopted? Over 18 states have now enacted comprehensive state privacy laws, three of which go into effect on July 1, 2024, in...more
6/26/2024
/ Biometric Information ,
Compliance ,
Consumer Privacy Rights ,
Data Brokers ,
Data Collection ,
Data Controller ,
Data Privacy ,
Data Protection ,
Legislative Agendas ,
New Regulations ,
Notice Requirements ,
Personal Data ,
Personally Identifiable Information ,
State Privacy Laws
The recent Federal Trade Commission (FTC) amendment adds a new security breach reporting requirement to the Gramm–Leach–Bliley Act (GLBA) Safeguards Rule. The Safeguards Rule is a regulatory framework that mandates financial...more
Hinshaw's Privacy, Security, & Artificial Intelligence (AI) practice group has been continuously monitoring the changes to state AI regulations, which we outline below for your company to be aware of and comply with if you...more
5/1/2024
/ Algorithms ,
Artificial Intelligence ,
Bias ,
Data Security ,
Deep Fake ,
Disclosure Requirements ,
Discrimination ,
ECOA ,
Impact Assessments ,
Machine Learning ,
Regulatory Agenda ,
Regulatory Oversight ,
State and Local Government
Kentucky - On April 4, 2024, Kentucky joined the growing number of states to enact data privacy legislation, becoming the third state to do so in 2024 and the fifteenth state overall at the time of enactment....more
4/24/2024
/ Compliance ,
Consent ,
Consumer Privacy Rights ,
Data Privacy ,
Data Protection Impact Assessments (DPIAs) ,
Data Retention ,
Data Security ,
Gramm-Leach-Blilely Act ,
Nonprofits ,
Opt-Outs ,
Personal Data ,
State Privacy Laws
We recently attended the International Association of Privacy Professionals (IAPP) 2024 Global Summit. The event provided great insights into privacy, artificial intelligence (AI), and regulatory issues, and we wanted to...more
4/8/2024
/ Artificial Intelligence ,
Compliance ,
Consumer Financial Protection Bureau (CFPB) ,
Data Brokers ,
Data Privacy ,
Fair Credit Reporting Act (FCRA) ,
Federal Trade Commission (FTC) ,
Innovative Technology ,
Professional Development ,
Regulatory Standards ,
Risk Management
New Hampshire is the fourteenth state with a comprehensive privacy law, as signed by Governor Sununu on March 6, 2024. The new law will go into effect on January 1, 2025. Continue reading for our Q&A on the "trusted" number...more
3/14/2024
/ Consent ,
Consumer Privacy Rights ,
Data Privacy ,
Data Processors ,
Data Protection ,
Opt-Outs ,
Personal Data ,
Personally Identifiable Information ,
Sensitive Personal Information ,
State Privacy Laws ,
Targeted Digital Advertising
California's Third District Court of Appeal supported the California Privacy Protection Agency (CCPA) and California Attorney General Rob Bonta in the case of California Privacy Protection Agency (CPPA) v. Superior Court...more
For companies that slow-tracked their California compliance activities because of the tentative March 29, 2024 effective date due to the pending appeal on the regulation enforcement timeline, it is now time to prioritize...more
With the first month of 2024 now behind us, it is time for organizations to start seriously considering key comprehensive state data privacy compliance obligations for 2024. In total, seven states passed data privacy laws...more
2/13/2024
/ Compliance ,
Consumer Privacy Rights ,
Data Privacy ,
Data Security ,
GLBA Privacy ,
Personal Information ,
Privacy Policy ,
Sensitive Personal Information ,
Small Business ,
State Privacy Laws ,
Targeted Digital Advertising ,
Third-Party Service Provider
Data Privacy Week is always ongoing! Here are some of Hinshaw's top data privacy law predictions for 2024. 1. New State Data Laws Will Continue to be Adopted in 2024, Varying in Scope and Enforcement Mechanisms - There will...more
2/1/2024
/ Artificial Intelligence ,
Consumer Financial Protection Bureau (CFPB) ,
Consumer Privacy Rights ,
Cybersecurity ,
Data Privacy ,
Data Protection ,
Fair Credit Reporting Act (FCRA) ,
Federal Trade Commission (FTC) ,
Financial Services Industry ,
NYDFS ,
Popular ,
State Privacy Laws
On January 16, 2024, New Jersey’s Governor Murphy signed New Jersey’s comprehensive state privacy law. New Jersey is the thirteenth state to adopt comprehensive consumer privacy protections. With Congress unlikely to pass a...more
On December 8, 2023, the California Privacy Protection Agency (CPPA) moved forward with an insurance regulation that could expand the privacy compliance obligations of insurance companies. The California Privacy Rights Act...more