Connecticut Attorney General William Tong recently announced the state’s first-ever enforcement settlement under the Connecticut Data Privacy Act (CTDPA) with TicketNetwork, Inc., an online ticket marketplace. The settlement...more
7/22/2025
/ Compliance ,
Consumer Privacy Rights ,
Corporate Counsel ,
Data Privacy ,
Enforcement Actions ,
Opt-Outs ,
Penalties ,
Personal Data ,
Privacy Laws ,
Regulatory Requirements ,
Settlement ,
State Privacy Laws
Now that we have passed the halfway mark in 2025, we are taking a look back at significant developments that have already occurred this year in the consumer data privacy landscape. Five more states’ comprehensive privacy laws...more
7/16/2025
/ Consumer Privacy Rights ,
Consumer Protection Laws ,
Corporate Counsel ,
Data Privacy ,
Disclosure Requirements ,
Effective Date ,
Enforcement Actions ,
New Legislation ,
Personal Data ,
State Attorneys General ,
State Privacy Laws
New York Governor Kathy Hochul has spoken: New York consumers need more information, more protections, and more money in their pockets.
As part of the Transportation, Economic Development and Environmental conservation...more
The California Privacy Protection Agency (CPPA) has issued its first Order of Decision to American Honda Motor Co. in an enforcement action under the California Consumer Privacy Act (CPPA). Although the investigation arose...more
Please visit here to visit our Mintz Matrix page with the latest edition of the Mintz Matrix, which is a 50-state resource we have maintained since 2009 to break down and summarize requirements of U.S. state data breach...more
3/3/2025
/ Compliance ,
Corporate Counsel ,
Data Breach ,
Data Privacy ,
Data Protection ,
Health Insurance Portability and Accountability Act (HIPAA) ,
New Legislation ,
Privacy Laws ,
Risk Management ,
State Attorneys General ,
State Privacy Laws
In response to an alarming increase in the size and frequency of large-scale data breaches involving protected health information, the U.S. Department of Health & Human Services Office for Civil Rights (OCR) dropped a bit of...more
2024 was a busy year for state consumer data privacy laws in the United States. Seven states enacted comprehensive data privacy statutes throughout the year, and laws enacted in 2023 went into effect in Montana, Florida,...more
1/3/2025
/ Consumer Privacy Rights ,
Corporate Counsel ,
Data Collection ,
Data Controller ,
Data Privacy ,
Data Protection ,
Enforcement ,
Notice Requirements ,
Opt-Outs ,
Penalties ,
Personal Data ,
Personally Identifiable Information ,
State Privacy Laws
To round out this year’s series on new state consumer privacy laws, we are covering the statute passed by Kentucky earlier this year. Please also keep your eye out for our 2024 round-up article that will be published soon, as...more
1/2/2025
/ Consumer Privacy Rights ,
Corporate Counsel ,
Cybersecurity ,
Data Collection ,
Data Privacy ,
Data Processors ,
Data Protection ,
Enforcement ,
Exemptions ,
Minor Children ,
Opt-Outs ,
Penalties ,
Personal Data ,
PHI ,
Popular ,
State Privacy Laws
It’s the season of lists and next on ours: Minnesota! This state joined 18 others to enact comprehensive data privacy legislation in recent years. To avoid being on the “naughty” list, make sure to review your compliance...more
Every year, Mintz provides analysis of the regulatory developments that impact public companies as they prepare for their fiscal year-end filings with the Securities and Exchange Commission and their annual shareholder...more
Any chancery you might be impacted by the Delaware Personal Data Privacy Act (DPDPA)? (See what we did there?) Impacted companies need to gear up and prepare for compliance as the DPDPA becomes effective on January 1, 2025....more
12/16/2024
/ Compliance ,
Consent ,
Consumer Privacy Rights ,
Delaware ,
Enforcement ,
Fines ,
Gramm-Leach-Blilely Act ,
Health Insurance Portability and Accountability Act (HIPAA) ,
Opt-Outs ,
Penalties ,
Personal Data ,
State Privacy Laws
We are moving westward this week from Iowa to Nebraska in our series of articles providing in-depth summaries of state consumer privacy laws taking effect across the nation.
Nebraska Governor Jim Pillen (R) signed the...more
11/27/2024
/ Consumer Privacy Rights ,
Covered Entities ,
Data Privacy ,
Data Protection ,
Enforcement ,
Fair Credit Reporting Act (FCRA) ,
Fines ,
Gramm-Leach-Blilely Act ,
Health Insurance Portability and Accountability Act (HIPAA) ,
Penalties ,
Personal Data ,
Privacy Laws ,
Security and Privacy Controls
Iowa is next up in our series of articles providing in-depth summaries of state consumer privacy laws taking effect across the nation.
On March 28, 2023, Iowa Governor Kim Reynolds (R) signed into law Senate File 262...more
11/20/2024
/ Consumer Privacy Rights ,
COPPA ,
Covered Entities ,
Data Collection ,
Data Privacy ,
Data Processors ,
Enforcement ,
Fines ,
Gramm-Leach-Blilely Act ,
New Legislation ,
Opt-In ,
Penalties ,
Personal Data ,
Privacy Laws
Comprehensive consumer privacy laws continue to hit the desks of governors in states across the country, with nineteen state laws now on the books. Since we wrote our 2023 Round-Up on State Consumer Data Privacy Laws article...more
10/30/2024
/ Consumer Privacy Rights ,
Corporate Counsel ,
Data Collection ,
Data Privacy ,
Data Processors ,
Data Protection ,
Minor Children ,
Opt-Outs ,
Personal Data ,
Personally Identifiable Information ,
Right of Access ,
Sensitive Personal Information ,
State Privacy Laws ,
Targeted Digital Advertising
Last week, Erik Gerding, Director of the SEC’s Division of Corporation Finance (the Division), issued a statement providing clarification regarding the disclosure of cybersecurity incidents by reporting companies. This...more
6/4/2024
/ Corporate Counsel ,
Cyber Incident Reporting ,
Cybersecurity ,
Disclosure Requirements ,
Foreign Private Issuers ,
Form 8-K ,
Investors ,
New Rules ,
Reporting Requirements ,
Securities and Exchange Commission (SEC) ,
Voluntary Disclosure
The push by U.S. states to pass data privacy laws continues with Maryland being the 18th state to join their ranks. However, Maryland has taken a more stringent and comprehensive approach than many of its peers: Governor Wes...more
5/17/2024
/ Commodity Exchange Act (CEA) ,
Consumer Privacy Rights ,
COPPA ,
Data Protection ,
Fines ,
Health Insurance Portability and Accountability Act (HIPAA) ,
Maryland ,
Opt-Outs ,
Penalties ,
Personal Data ,
Personal Information ,
Popular ,
Securities Exchange Act
As U.S. states continue to pass data privacy legislation, Maryland has gone above and beyond in signing both the Maryland Online Data Privacy Act of 2024 (MODPA) and the Maryland Age Appropriate Design Code (HB 603/SB...more
5/17/2024
/ COPPA ,
Covered Entities ,
Data Management ,
Data Protection ,
Fines ,
Gramm-Leach-Blilely Act ,
Health Insurance Portability and Accountability Act (HIPAA) ,
HITECH Act ,
Maryland ,
Minor Children ,
Penalties ,
Personal Data ,
Popular ,
Privacy Laws ,
Safety Standards
Will the U.S. finally join most developed nations and pass a comprehensive federal privacy law? Some believe this may be the year that the U.S. does just that....more
2023 was a record-breaking year, with legislators in Delaware, Indiana, Iowa, Montana, Oregon, Tennessee and Texas passing comprehensive data privacy laws, joining California, Colorado, Connecticut, Utah and Virginia. Already...more
4/16/2024
/ Consumer Privacy Rights ,
Data Privacy ,
Data Protection ,
Disclosure Requirements ,
Exemptions ,
GLBA Privacy ,
Health Insurance Portability and Accountability Act (HIPAA) ,
New Jersey ,
New Legislation ,
Opt-Outs ,
Personal Data ,
Personal Information ,
Private Right of Action ,
Reporting Requirements ,
State Privacy Laws
New Hampshire’s New Law is on the Books -
2023 was a record-breaking year, with legislators in Delaware, Indiana, Iowa, Montana, Oregon, Tennessee and Texas passing comprehensive data privacy laws, joining California,...more
4/15/2024
/ Consumer Rights Directive ,
Controlled Substances Act ,
Data Collection ,
Fines ,
GLBA Privacy ,
Health Insurance Portability and Accountability Act (HIPAA) ,
Opt-Outs ,
Penalties ,
Personal Data ,
Private Right of Action ,
State Privacy Laws
After years of internal discussion, the Board of the California Privacy Protection Agency (CPPA), at their March 8th meeting, voted to progress toward formalizing the proposed regulations on risk assessments and automated...more
3/26/2024
/ Artificial Intelligence ,
Automated Decision Systems (ADS) ,
Bias ,
California Privacy Protection Agency (CPPA) ,
Corporate Counsel ,
Cybersecurity ,
Employment Discrimination ,
Information Sharing ,
Personal Information ,
Policy Updates ,
Privacy Laws ,
Proposed Regulation ,
Risk Assessment
If you have been relying on last year’s court order staying the ability of the California Privacy Protection Agency (CPPA) to enforce regulations promulgated under the California Privacy Rights Act (CPRA) to also stay your...more
2/16/2024
/ Audits ,
California Privacy Protection Agency (CPPA) ,
California Privacy Rights Act (CPRA) ,
Contract Terms ,
Cybersecurity ,
Enforcement ,
New Regulations ,
Notice Requirements ,
Opt-Outs ,
Risk Assessment ,
Targeted Digital Advertising
A number of significant regulatory, legal, market, and ESG-related developments and issues will affect how public companies approach the upcoming year-end reporting process. As in past years, Mintz has prepared an in-depth...more
12/18/2023
/ 10b5-1 Plans ,
Artificial Intelligence ,
Chief Information Security Officer (CISO) ,
Clawbacks ,
Climate Change ,
Corporate Governance ,
Cybersecurity ,
Enforcement Actions ,
Environmental Social & Governance (ESG) ,
Form 10-K ,
Form 8-K ,
Nasdaq ,
Publicly-Traded Companies ,
Reporting Requirements ,
Risk Management ,
Securities and Exchange Commission (SEC) ,
Shareholder Meetings ,
Trading Plans ,
Year-End Planning
The California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (the “CCPA”), is regarded as one of the strongest and most comprehensive privacy laws in the United States and in recent...more
10/16/2023
/ Abortion ,
California ,
California Consumer Privacy Act (CCPA) ,
Citizenship ,
Corporate Counsel ,
Data Brokers ,
Do Not Call List ,
Federal Trade Commission (FTC) ,
Immigration ,
Reproductive Healthcare Issues ,
Sensitive Personal Information
If you are in the consumer health space, you have (or at least we hope you have...) figured out by now that there are health-related privacy and security laws and regulations that apply to your business. The Federal Trade...more