California regulators unanimously approved a sweeping set of regulations on July 24 governing the use of automated decision-making technology (ADMT) and mandating risk assessments and cybersecurity audits for businesses...more
8/1/2025
/ Administrative Procedure Act ,
Artificial Intelligence ,
Automated Decision Systems (ADS) ,
California ,
California Consumer Privacy Act (CCPA) ,
California Privacy Protection Agency (CPPA) ,
Consumer Privacy Rights ,
Covered Business ,
Cybersecurity ,
Data Privacy ,
Data Processors ,
Data Security ,
New Regulations ,
Notice Requirements ,
Office of Administrative Law ,
Opt-Outs ,
Personal Information ,
Popular ,
Privacy Policy ,
Risk Assessment ,
Security Audits ,
Sensitive Personal Information
Businesses should be aware of recent public outreach in California – and other states with consumer privacy laws – signaling that increased enforcement activity is on the horizon. For instance, the California Privacy...more
7/28/2025
/ California Consumer Privacy Act (CCPA) ,
California Privacy Protection Agency (CPPA) ,
Consumer Privacy Rights ,
Covered Business ,
Data Privacy ,
Data Selling ,
Data-Sharing ,
Opt-Outs ,
Personal Data ,
Personal Information ,
State Privacy Laws ,
Website Owner Liability ,
Websites
Healthline Media has agreed to pay $1.55 million to resolve allegations that it violated the California Consumer Privacy Act (CCPA) – which is the largest settlement to date under the state’s landmark privacy law. The...more
7/8/2025
/ California Consumer Privacy Act (CCPA) ,
CIPA ,
Consent ,
Consumer Privacy Rights ,
Cookie Banners ,
Cookies ,
Corporate Counsel ,
Data Collection ,
Data Privacy ,
Data-Sharing ,
Enforcement Actions ,
Opt-Outs ,
Personal Information ,
Privacy Policy ,
Settlement ,
State Attorneys General ,
Targeted Digital Advertising ,
Third-Party ,
Unfair Competition Law (UCL) ,
Web Tracking ,
Websites
In a big win for businesses, a California federal court just held that a “tester” plaintiff – someone who visits websites for purposes of initiating litigation – cannot bring a claim under the California Invasion of Privacy...more
4/16/2025
/ CIPA ,
Consumer Privacy Rights ,
Cookies ,
Corporate Counsel ,
Data Collection ,
Data Privacy ,
Data-Sharing ,
Internet ,
Invasion of Privacy ,
Opt-In ,
Opt-Outs ,
Privacy Policy ,
Reasonable Expectation of Privacy ,
State Privacy Laws ,
Third-Party Liability ,
Web Tracking ,
Website Owner Liability ,
Websites ,
Wiretapping
A new California investigative sweep into the location data industry focuses on whether businesses have violated state law relating to the consumers’ right to limit how their personal information – including their geolocation...more
4/2/2025
/ California ,
California Consumer Privacy Act (CCPA) ,
Consumer Privacy Rights ,
Cookies ,
Data Collection ,
Data Privacy ,
Data Selling ,
Data-Sharing ,
Enforcement Actions ,
Geolocation ,
Location Data ,
Sensitive Personal Information ,
State Attorneys General
Oregon consumers submitted more than 100 privacy complaints to the state’s justice department within six months of the Oregon Consumer Privacy Act (OCPA) taking effect, and businesses subject to the new law need to take note....more
4/2/2025
/ Consumer Privacy Rights ,
Cure Periods ,
Data Collection ,
Data Controller ,
Data Privacy ,
Department of Justice (DOJ) ,
Enforcement Actions ,
New Legislation ,
Oregon ,
Personal Data ,
Privacy Policy ,
State Attorneys General ,
State Privacy Laws
A recent board meeting of state officials revealed that the California agency responsible for overseeing the state’s landmark consumer privacy law received over 2,000 complaints for alleged violations in the past year alone –...more
8/2/2024
/ California Consumer Privacy Act (CCPA) ,
California Privacy Protection Agency (CPPA) ,
Consumer Privacy Rights ,
Data Collection ,
Data Privacy ,
Data Selling ,
Data-Sharing ,
Enforcement Priorities ,
Notice Requirements ,
Opt-Outs ,
Personally Identifiable Information ,
Privacy Policy ,
State Privacy Laws
Businesses take heed: California state officials just warned that the law prohibits you from collecting unnecessary data and retaining data for longer than necessary. The California Privacy Protection Agency published its...more
4/15/2024
/ California ,
California Consumer Privacy Act (CCPA) ,
California Privacy Protection Agency (CPPA) ,
Consumer Privacy Rights ,
Data Collection ,
Data Deletion ,
Data Privacy ,
Data Retention ,
Data Selling ,
Data-Sharing ,
Enforcement Actions ,
Opt-Outs ,
Personally Identifiable Information ,
Security and Privacy Controls ,
State Privacy Laws ,
Verification Requirements
A California appeals court just pressed fast-forward and ruled that the state can immediately begin enforcing new regulations governing the state’s cornerstone data privacy law instead of waiting until late next month. This...more
2/13/2024
/ California Consumer Privacy Act (CCPA) ,
Consumer Privacy Rights ,
Cookie Banners ,
Cookies ,
Corporate Counsel ,
Data Collection ,
Data Privacy ,
Enforcement ,
New Regulations ,
Notice Requirements ,
Personally Identifiable Information ,
Privacy Policy
The first half of 2023 has been eventful for businesses subject to the California Consumer Privacy Act (CCPA), and the whirlwind of new developments may have left you confused about your current and pending obligations. In...more
8/14/2023
/ California Consumer Privacy Act (CCPA) ,
California Privacy Protection Agency (CPPA) ,
California Privacy Rights Act (CPRA) ,
Consumer Privacy Rights ,
Data Privacy ,
Data Protection ,
Data Security ,
Delays ,
Enforcement ,
Opt-Outs ,
Personal Data ,
Privacy Laws
California employers, beware: the state’s top prosecutor just announced his office is conducting an investigative sweep of whether and how large California employers have complied with data privacy and consumer protection...more
7/20/2023
/ California ,
California Consumer Privacy Act (CCPA) ,
Consumer Privacy Rights ,
Data Collection ,
Data Privacy ,
Employee Privacy Rights ,
Employer Liability Issues ,
Enforcement Actions ,
Job Applicants ,
Notice Requirements ,
Personally Identifiable Information ,
Privacy Policy ,
State Attorneys General
In a last-minute ruling, a California judge just delayed enforcement of the California Privacy Rights Act (CPRA) regulations until March 29, 2024. Enforcement of the regulations was otherwise set to commence on July 1. This...more
Getting into compliance with the California Consumer Privacy Act (CCPA) can seem like an overwhelming task. After all, the law is comprised not only of a dense statute and detailed regulations, but the amendment effective...more
5/25/2023
/ California Consumer Privacy Act (CCPA) ,
Consumer Privacy Rights ,
Corporate Counsel ,
Data Collection ,
Data Privacy ,
Data Retention ,
Data Security ,
Data Subject Access Requests ,
Employee Training ,
Notice Requirements ,
Personal Information ,
Privacy Policy
The California Consumer Privacy Act (CCPA) has created compliance challenges across the country for businesses – but they often stem from the fact that businesses are confused about some of the law’s basic principles. This...more
In evaluating the stringent and wide-ranging obligations of the California Consumer Privacy Act (CCPA) and the amendment to the law known as the California Privacy Rights Act (CPRA) that took effect on January 1, 2023, the...more
Under the California Consumer Privacy Act (CCPA), California consumers may exercise certain rights in relation to their personal information – and businesses have strict deadlines to respond to such consumer requests. These...more
5/25/2023
/ California ,
California Consumer Privacy Act (CCPA) ,
Consumer Privacy Rights ,
Consumer Requests ,
Data Collection ,
Data Privacy ,
Deadlines ,
Opt-Outs ,
Personal Information ,
Right to Delete ,
Right To Know ,
Right-To-Access ,
State Privacy Laws
California data privacy officials just cleared the way for key regulations to take effect as soon as this April – which means the time is now for businesses located both in and out of the state to take seriously your efforts...more
The next step in drafting the long-delayed privacy regulations for the California businesses subject to the California Consumer Privacy Act of 2018 (CCPA) and the California Privacy Rights Act of 2020 (CPRA) took place late...more
6/2/2022
/ California Consumer Privacy Act (CCPA) ,
California Privacy Rights Act (CPRA) ,
Comment Period ,
Consumer Privacy Rights ,
Data Privacy ,
Data Protection ,
Data Security ,
Personally Identifiable Information ,
Proposed Regulation ,
Public Comment ,
State Privacy Laws
A bipartisan group of New York state lawmakers recently introduced privacy legislation that would impose new obligations on businesses related to biometric identifiers and biometric information. The Biometric Privacy Act...more
1/22/2021
/ Biometric Information ,
Biometric Information Privacy Act ,
Consent ,
Consumer Privacy Rights ,
Data Collection ,
Data Privacy ,
Data Protection ,
Data Security ,
Notice Requirements ,
Personally Identifiable Information ,
Private Right of Action ,
Proposed Legislation ,
State Privacy Laws
Californians just passed a ballot measure that will soon expand the nation’s most stringent data privacy law – and it will have an impact on employers across the country. By voting in favor of Proposition 24 – the California...more
11/5/2020
/ B2B Transactions ,
Ballot Measures ,
California Consumer Privacy Act (CCPA) ,
California Privacy Rights Act (CPRA) ,
Consumer Privacy Rights ,
Data Collection ,
Data Privacy ,
Data Protection ,
Data Retention ,
Data Security ,
Data Use Policies ,
Duty to Correct ,
New Legislation ,
Personally Identifiable Information ,
Privacy Laws ,
Sensitive Personal Information
California’s landmark privacy law could soon be amended with updated compliance burdens for employers – and it will be up to voters statewide to determine whether these changes take effect. An amendment to the California...more
In 2018, the California legislature enacted the California Consumer Privacy Act (“CCPA”), which went into effect on January 1, 2020 but was amended six times before it even took effect. Concerned that amendments have weakened...more