Healthline Media has agreed to pay $1.55 million to resolve allegations that it violated the California Consumer Privacy Act (CCPA) – which is the largest settlement to date under the state’s landmark privacy law. The...more
7/8/2025
/ California Consumer Privacy Act (CCPA) ,
CIPA ,
Consent ,
Consumer Privacy Rights ,
Cookie Banners ,
Cookies ,
Corporate Counsel ,
Data Collection ,
Data Privacy ,
Data-Sharing ,
Enforcement Actions ,
Opt-Outs ,
Personal Information ,
Privacy Policy ,
Settlement ,
State Attorneys General ,
Targeted Digital Advertising ,
Third-Party ,
Unfair Competition Law (UCL) ,
Web Tracking ,
Websites
A California federal court just certified a significant class action involving allegations that a health-tracking app improperly shared sensitive health information with third parties without user consent. The court’s May 22...more
5/30/2025
/ Breach of Contract ,
Class Action ,
Class Action Arbitration Waivers ,
Class Certification ,
Corporate Counsel ,
Data Collection ,
Data Privacy ,
Data-Sharing ,
Electronic Protected Health Information (ePHI) ,
Invasion of Privacy ,
Mobile Apps ,
Personal Data ,
Popular ,
Privacy Laws ,
Privacy Policy ,
Terms of Service ,
Web Tracking ,
Without Consent
In a big win for businesses, a California federal court just held that a “tester” plaintiff – someone who visits websites for purposes of initiating litigation – cannot bring a claim under the California Invasion of Privacy...more
4/16/2025
/ CIPA ,
Consumer Privacy Rights ,
Cookies ,
Corporate Counsel ,
Data Collection ,
Data Privacy ,
Data-Sharing ,
Internet ,
Invasion of Privacy ,
Opt-In ,
Opt-Outs ,
Privacy Policy ,
Reasonable Expectation of Privacy ,
State Privacy Laws ,
Third-Party Liability ,
Web Tracking ,
Website Owner Liability ,
Websites ,
Wiretapping
A new California investigative sweep into the location data industry focuses on whether businesses have violated state law relating to the consumers’ right to limit how their personal information – including their geolocation...more
4/2/2025
/ California ,
California Consumer Privacy Act (CCPA) ,
Consumer Privacy Rights ,
Cookies ,
Data Collection ,
Data Privacy ,
Data Selling ,
Data-Sharing ,
Enforcement Actions ,
Geolocation ,
Location Data ,
Sensitive Personal Information ,
State Attorneys General
Oregon consumers submitted more than 100 privacy complaints to the state’s justice department within six months of the Oregon Consumer Privacy Act (OCPA) taking effect, and businesses subject to the new law need to take note....more
4/2/2025
/ Consumer Privacy Rights ,
Cure Periods ,
Data Collection ,
Data Controller ,
Data Privacy ,
Department of Justice (DOJ) ,
Enforcement Actions ,
New Legislation ,
Oregon ,
Personal Data ,
Privacy Policy ,
State Attorneys General ,
State Privacy Laws
The government recently reminded employers and vendors that they have obligations when it comes to use of workplace-related AI tools – and your business may need to update its practices in order to comply. The Consumer...more
11/13/2024
/ Adverse Employment Action ,
Artificial Intelligence ,
Consumer Financial Protection Bureau (CFPB) ,
Consumer Reporting Agencies ,
Consumer Reports ,
Data Collection ,
Employee Monitoring ,
Employees ,
Fair Credit Reporting Act (FCRA) ,
Job Applicants ,
Vendors
A recent board meeting of state officials revealed that the California agency responsible for overseeing the state’s landmark consumer privacy law received over 2,000 complaints for alleged violations in the past year alone –...more
8/2/2024
/ California Consumer Privacy Act (CCPA) ,
California Privacy Protection Agency (CPPA) ,
Consumer Privacy Rights ,
Data Collection ,
Data Privacy ,
Data Selling ,
Data-Sharing ,
Enforcement Priorities ,
Notice Requirements ,
Opt-Outs ,
Personally Identifiable Information ,
Privacy Policy ,
State Privacy Laws
Employers and businesses are in limbo on how to prepare for a post-TikTok world after Congress passed legislation giving the social media app’s Chinese owner nine months to either sell the company or be banned throughout the...more
5/16/2024
/ China ,
Data Collection ,
Data Privacy ,
Employee Releases ,
Federal Bans ,
International Data Transfers ,
Mobile Apps ,
National Security ,
Privacy Concerns ,
Social Media ,
TikTok
Businesses take heed: California state officials just warned that the law prohibits you from collecting unnecessary data and retaining data for longer than necessary. The California Privacy Protection Agency published its...more
4/15/2024
/ California ,
California Consumer Privacy Act (CCPA) ,
California Privacy Protection Agency (CPPA) ,
Consumer Privacy Rights ,
Data Collection ,
Data Deletion ,
Data Privacy ,
Data Retention ,
Data Selling ,
Data-Sharing ,
Enforcement Actions ,
Opt-Outs ,
Personally Identifiable Information ,
Security and Privacy Controls ,
State Privacy Laws ,
Verification Requirements
President Biden just issued an Executive Order that will lead to new restrictions on transferring sensitive personal data to China and other “countries of concern” – and it may create massive new compliance obligations for...more
3/1/2024
/ Attorney General ,
Biden Administration ,
China ,
Data Collection ,
Data Privacy ,
Data Security ,
Department of Homeland Security (DHS) ,
Executive Orders ,
International Data Transfers ,
National Security ,
Personal Data ,
Vendors ,
Websites
A California appeals court just pressed fast-forward and ruled that the state can immediately begin enforcing new regulations governing the state’s cornerstone data privacy law instead of waiting until late next month. This...more
2/13/2024
/ California Consumer Privacy Act (CCPA) ,
Consumer Privacy Rights ,
Cookie Banners ,
Cookies ,
Corporate Counsel ,
Data Collection ,
Data Privacy ,
Enforcement ,
New Regulations ,
Notice Requirements ,
Personally Identifiable Information ,
Privacy Policy
California employers, beware: the state’s top prosecutor just announced his office is conducting an investigative sweep of whether and how large California employers have complied with data privacy and consumer protection...more
7/20/2023
/ California ,
California Consumer Privacy Act (CCPA) ,
Consumer Privacy Rights ,
Data Collection ,
Data Privacy ,
Employee Privacy Rights ,
Employer Liability Issues ,
Enforcement Actions ,
Job Applicants ,
Notice Requirements ,
Personally Identifiable Information ,
Privacy Policy ,
State Attorneys General
Getting into compliance with the California Consumer Privacy Act (CCPA) can seem like an overwhelming task. After all, the law is comprised not only of a dense statute and detailed regulations, but the amendment effective...more
5/25/2023
/ California Consumer Privacy Act (CCPA) ,
Consumer Privacy Rights ,
Corporate Counsel ,
Data Collection ,
Data Privacy ,
Data Retention ,
Data Security ,
Data Subject Access Requests ,
Employee Training ,
Notice Requirements ,
Personal Information ,
Privacy Policy
The California Consumer Privacy Act (CCPA) has created compliance challenges across the country for businesses – but they often stem from the fact that businesses are confused about some of the law’s basic principles. This...more
In evaluating the stringent and wide-ranging obligations of the California Consumer Privacy Act (CCPA) and the amendment to the law known as the California Privacy Rights Act (CPRA) that took effect on January 1, 2023, the...more
Under the California Consumer Privacy Act (CCPA), California consumers may exercise certain rights in relation to their personal information – and businesses have strict deadlines to respond to such consumer requests. These...more
5/25/2023
/ California ,
California Consumer Privacy Act (CCPA) ,
Consumer Privacy Rights ,
Consumer Requests ,
Data Collection ,
Data Privacy ,
Deadlines ,
Opt-Outs ,
Personal Information ,
Right to Delete ,
Right To Know ,
Right-To-Access ,
State Privacy Laws
The California Attorney General just announced an investigative sweep of mobile apps that allegedly fail to meet the requirements of state data privacy law, meaning businesses that conduct business through apps need to...more
A bipartisan group of New York state lawmakers recently introduced privacy legislation that would impose new obligations on businesses related to biometric identifiers and biometric information. The Biometric Privacy Act...more
1/22/2021
/ Biometric Information ,
Biometric Information Privacy Act ,
Consent ,
Consumer Privacy Rights ,
Data Collection ,
Data Privacy ,
Data Protection ,
Data Security ,
Notice Requirements ,
Personally Identifiable Information ,
Private Right of Action ,
Proposed Legislation ,
State Privacy Laws
Californians just passed a ballot measure that will soon expand the nation’s most stringent data privacy law – and it will have an impact on employers across the country. By voting in favor of Proposition 24 – the California...more
11/5/2020
/ B2B Transactions ,
Ballot Measures ,
California Consumer Privacy Act (CCPA) ,
California Privacy Rights Act (CPRA) ,
Consumer Privacy Rights ,
Data Collection ,
Data Privacy ,
Data Protection ,
Data Retention ,
Data Security ,
Data Use Policies ,
Duty to Correct ,
New Legislation ,
Personally Identifiable Information ,
Privacy Laws ,
Sensitive Personal Information
California’s landmark privacy law could soon be amended with updated compliance burdens for employers – and it will be up to voters statewide to determine whether these changes take effect. An amendment to the California...more
In 2018, the California legislature enacted the California Consumer Privacy Act (“CCPA”), which went into effect on January 1, 2020 but was amended six times before it even took effect. Concerned that amendments have weakened...more