California regulators unanimously approved a sweeping set of regulations on July 24 governing the use of automated decision-making technology (ADMT) and mandating risk assessments and cybersecurity audits for businesses...more
8/1/2025
/ Administrative Procedure Act ,
Artificial Intelligence ,
Automated Decision Systems (ADS) ,
California ,
California Consumer Privacy Act (CCPA) ,
California Privacy Protection Agency (CPPA) ,
Consumer Privacy Rights ,
Covered Business ,
Cybersecurity ,
Data Privacy ,
Data Processors ,
Data Security ,
New Regulations ,
Notice Requirements ,
Office of Administrative Law ,
Opt-Outs ,
Personal Information ,
Privacy Policy ,
Risk Assessment ,
Security Audits ,
Sensitive Personal Information
Businesses should be aware of recent public outreach in California – and other states with consumer privacy laws – signaling that increased enforcement activity is on the horizon. For instance, the California Privacy...more
7/28/2025
/ California Consumer Privacy Act (CCPA) ,
California Privacy Protection Agency (CPPA) ,
Consumer Privacy Rights ,
Covered Business ,
Data Privacy ,
Data Selling ,
Data-Sharing ,
Opt-Outs ,
Personal Data ,
Personal Information ,
State Privacy Laws ,
Website Owner Liability ,
Websites
Healthline Media has agreed to pay $1.55 million to resolve allegations that it violated the California Consumer Privacy Act (CCPA) – which is the largest settlement to date under the state’s landmark privacy law. The...more
7/8/2025
/ California Consumer Privacy Act (CCPA) ,
CIPA ,
Consent ,
Consumer Privacy Rights ,
Cookie Banners ,
Cookies ,
Corporate Counsel ,
Data Collection ,
Data Privacy ,
Data-Sharing ,
Enforcement Actions ,
Opt-Outs ,
Personal Information ,
Privacy Policy ,
Settlement ,
State Attorneys General ,
Targeted Digital Advertising ,
Third-Party ,
Unfair Competition Law (UCL) ,
Web Tracking ,
Websites
A new lawsuit just filed against an AI software provider offers a clear warning for any business using artificial intelligence to monitor or record customer service calls. On June 13, a California plaintiff filed a federal...more
6/19/2025
/ All-Party Consent ,
Artificial Intelligence ,
Audio Recording ,
CIPA ,
Class Action ,
Confidential Communications ,
Contract Terms ,
Corporate Counsel ,
Customer Service Calls ,
Data Privacy ,
Data Use Policies ,
Disclosure Requirements ,
Failure To Disclose ,
Invasion of Privacy ,
Natural Language Processing ,
Popular ,
Risk Management ,
State Privacy Laws ,
Third-Party Liability ,
Vendors ,
Wiretapping ,
Without Consent
A California federal court just certified a significant class action involving allegations that a health-tracking app improperly shared sensitive health information with third parties without user consent. The court’s May 22...more
5/30/2025
/ Breach of Contract ,
Class Action ,
Class Action Arbitration Waivers ,
Class Certification ,
Corporate Counsel ,
Data Collection ,
Data Privacy ,
Data-Sharing ,
Electronic Protected Health Information (ePHI) ,
Invasion of Privacy ,
Mobile Apps ,
Personal Data ,
Popular ,
Privacy Laws ,
Privacy Policy ,
Terms of Service ,
Web Tracking ,
Without Consent
In a big win for businesses, a California federal court just held that a “tester” plaintiff – someone who visits websites for purposes of initiating litigation – cannot bring a claim under the California Invasion of Privacy...more
4/16/2025
/ CIPA ,
Consumer Privacy Rights ,
Cookies ,
Corporate Counsel ,
Data Collection ,
Data Privacy ,
Data-Sharing ,
Internet ,
Invasion of Privacy ,
Opt-In ,
Opt-Outs ,
Privacy Policy ,
Reasonable Expectation of Privacy ,
State Privacy Laws ,
Third-Party Liability ,
Web Tracking ,
Website Owner Liability ,
Websites ,
Wiretapping
A new California investigative sweep into the location data industry focuses on whether businesses have violated state law relating to the consumers’ right to limit how their personal information – including their geolocation...more
4/2/2025
/ California ,
California Consumer Privacy Act (CCPA) ,
Consumer Privacy Rights ,
Cookies ,
Data Collection ,
Data Privacy ,
Data Selling ,
Data-Sharing ,
Enforcement Actions ,
Geolocation ,
Location Data ,
Sensitive Personal Information ,
State Attorneys General
Oregon consumers submitted more than 100 privacy complaints to the state’s justice department within six months of the Oregon Consumer Privacy Act (OCPA) taking effect, and businesses subject to the new law need to take note....more
4/2/2025
/ Consumer Privacy Rights ,
Cure Periods ,
Data Collection ,
Data Controller ,
Data Privacy ,
Department of Justice (DOJ) ,
Enforcement Actions ,
New Legislation ,
Oregon ,
Personal Data ,
Privacy Policy ,
State Attorneys General ,
State Privacy Laws
In its public meeting last week, California privacy officials pushed forward key initiatives that could impact businesses and employers, including initiating formal rulemaking that would significantly impact those using...more
11/14/2024
/ Automated Decision Systems (ADS) ,
California Consumer Privacy Act (CCPA) ,
California Privacy Protection Agency (CPPA) ,
Data Brokers ,
Hiring & Firing ,
Job Applicants ,
Proposed Regulation ,
Public Comment ,
Registration Fees ,
Registration Requirement ,
Resume ,
State Privacy Laws
The government recently reminded employers and vendors that they have obligations when it comes to use of workplace-related AI tools – and your business may need to update its practices in order to comply. The Consumer...more
11/13/2024
/ Adverse Employment Action ,
Artificial Intelligence ,
Consumer Financial Protection Bureau (CFPB) ,
Consumer Reporting Agencies ,
Consumer Reports ,
Data Collection ,
Employee Monitoring ,
Employees ,
Fair Credit Reporting Act (FCRA) ,
Job Applicants ,
Vendors
A recent board meeting of state officials revealed that the California agency responsible for overseeing the state’s landmark consumer privacy law received over 2,000 complaints for alleged violations in the past year alone –...more
8/2/2024
/ California Consumer Privacy Act (CCPA) ,
California Privacy Protection Agency (CPPA) ,
Consumer Privacy Rights ,
Data Collection ,
Data Privacy ,
Data Selling ,
Data-Sharing ,
Enforcement Priorities ,
Notice Requirements ,
Opt-Outs ,
Personally Identifiable Information ,
Privacy Policy ,
State Privacy Laws
The Supreme Court’s recent landmark ruling that gives employers a powerful tool to fight back against regulatory overreach will have a broad impact on just about every area of workplace law. We’re looking at the specific...more
Employers and businesses are in limbo on how to prepare for a post-TikTok world after Congress passed legislation giving the social media app’s Chinese owner nine months to either sell the company or be banned throughout the...more
5/16/2024
/ China ,
Data Collection ,
Data Privacy ,
Employee Releases ,
Federal Bans ,
International Data Transfers ,
Mobile Apps ,
National Security ,
Privacy Concerns ,
Social Media ,
TikTok
Businesses take heed: California state officials just warned that the law prohibits you from collecting unnecessary data and retaining data for longer than necessary. The California Privacy Protection Agency published its...more
4/15/2024
/ California ,
California Consumer Privacy Act (CCPA) ,
California Privacy Protection Agency (CPPA) ,
Consumer Privacy Rights ,
Data Collection ,
Data Deletion ,
Data Privacy ,
Data Retention ,
Data Selling ,
Data-Sharing ,
Enforcement Actions ,
Opt-Outs ,
Personally Identifiable Information ,
Security and Privacy Controls ,
State Privacy Laws ,
Verification Requirements
President Biden just issued an Executive Order that will lead to new restrictions on transferring sensitive personal data to China and other “countries of concern” – and it may create massive new compliance obligations for...more
3/1/2024
/ Attorney General ,
Biden Administration ,
China ,
Data Collection ,
Data Privacy ,
Data Security ,
Department of Homeland Security (DHS) ,
Executive Orders ,
International Data Transfers ,
National Security ,
Personal Data ,
Vendors ,
Websites
A California appeals court just pressed fast-forward and ruled that the state can immediately begin enforcing new regulations governing the state’s cornerstone data privacy law instead of waiting until late next month. This...more
2/13/2024
/ California Consumer Privacy Act (CCPA) ,
Consumer Privacy Rights ,
Cookie Banners ,
Cookies ,
Corporate Counsel ,
Data Collection ,
Data Privacy ,
Enforcement ,
New Regulations ,
Notice Requirements ,
Personally Identifiable Information ,
Privacy Policy
The first half of 2023 has been eventful for businesses subject to the California Consumer Privacy Act (CCPA), and the whirlwind of new developments may have left you confused about your current and pending obligations. In...more
8/14/2023
/ California Consumer Privacy Act (CCPA) ,
California Privacy Protection Agency (CPPA) ,
California Privacy Rights Act (CPRA) ,
Consumer Privacy Rights ,
Data Privacy ,
Data Protection ,
Data Security ,
Delays ,
Enforcement ,
Opt-Outs ,
Personal Data ,
Privacy Laws
California employers, beware: the state’s top prosecutor just announced his office is conducting an investigative sweep of whether and how large California employers have complied with data privacy and consumer protection...more
7/20/2023
/ California ,
California Consumer Privacy Act (CCPA) ,
Consumer Privacy Rights ,
Data Collection ,
Data Privacy ,
Employee Privacy Rights ,
Employer Liability Issues ,
Enforcement Actions ,
Job Applicants ,
Notice Requirements ,
Personally Identifiable Information ,
Privacy Policy ,
State Attorneys General
In a last-minute ruling, a California judge just delayed enforcement of the California Privacy Rights Act (CPRA) regulations until March 29, 2024. Enforcement of the regulations was otherwise set to commence on July 1. This...more
Getting into compliance with the California Consumer Privacy Act (CCPA) can seem like an overwhelming task. After all, the law is comprised not only of a dense statute and detailed regulations, but the amendment effective...more
5/25/2023
/ California Consumer Privacy Act (CCPA) ,
Consumer Privacy Rights ,
Corporate Counsel ,
Data Collection ,
Data Privacy ,
Data Retention ,
Data Security ,
Data Subject Access Requests ,
Employee Training ,
Notice Requirements ,
Personal Information ,
Privacy Policy
The California Consumer Privacy Act (CCPA) has created compliance challenges across the country for businesses – but they often stem from the fact that businesses are confused about some of the law’s basic principles. This...more
In evaluating the stringent and wide-ranging obligations of the California Consumer Privacy Act (CCPA) and the amendment to the law known as the California Privacy Rights Act (CPRA) that took effect on January 1, 2023, the...more
Under the California Consumer Privacy Act (CCPA), California consumers may exercise certain rights in relation to their personal information – and businesses have strict deadlines to respond to such consumer requests. These...more
5/25/2023
/ California ,
California Consumer Privacy Act (CCPA) ,
Consumer Privacy Rights ,
Consumer Requests ,
Data Collection ,
Data Privacy ,
Deadlines ,
Opt-Outs ,
Personal Information ,
Right to Delete ,
Right To Know ,
Right-To-Access ,
State Privacy Laws
The recent collapse of Silicon Valley Bank highlights many of the concerns that employers might face should they find themselves in the midst of a liquidity crisis. Making payroll, arriving at decisions related to wage...more
3/14/2023
/ Business Operations ,
Corporate Counsel ,
Employee Benefits ,
Employer Liability Issues ,
Furloughs ,
Hiring & Firing ,
Involuntary Reduction in Force ,
Labor Relations ,
Layoffs ,
Liquidity ,
Notice Requirements ,
Unemployment Benefits ,
Wage and Hour
California data privacy officials just cleared the way for key regulations to take effect as soon as this April – which means the time is now for businesses located both in and out of the state to take seriously your efforts...more