California regulators unanimously approved a sweeping set of regulations on July 24 governing the use of automated decision-making technology (ADMT) and mandating risk assessments and cybersecurity audits for businesses...more
8/1/2025
/ Administrative Procedure Act ,
Artificial Intelligence ,
Automated Decision Systems (ADS) ,
California ,
California Consumer Privacy Act (CCPA) ,
California Privacy Protection Agency (CPPA) ,
Consumer Privacy Rights ,
Covered Business ,
Cybersecurity ,
Data Privacy ,
Data Processors ,
Data Security ,
New Regulations ,
Notice Requirements ,
Office of Administrative Law ,
Opt-Outs ,
Personal Information ,
Popular ,
Privacy Policy ,
Risk Assessment ,
Security Audits ,
Sensitive Personal Information
Healthline Media has agreed to pay $1.55 million to resolve allegations that it violated the California Consumer Privacy Act (CCPA) – which is the largest settlement to date under the state’s landmark privacy law. The...more
7/8/2025
/ California Consumer Privacy Act (CCPA) ,
CIPA ,
Consent ,
Consumer Privacy Rights ,
Cookie Banners ,
Cookies ,
Corporate Counsel ,
Data Collection ,
Data Privacy ,
Data-Sharing ,
Enforcement Actions ,
Opt-Outs ,
Personal Information ,
Privacy Policy ,
Settlement ,
State Attorneys General ,
Targeted Digital Advertising ,
Third-Party ,
Unfair Competition Law (UCL) ,
Web Tracking ,
Websites
A California federal court just certified a significant class action involving allegations that a health-tracking app improperly shared sensitive health information with third parties without user consent. The court’s May 22...more
5/30/2025
/ Breach of Contract ,
Class Action ,
Class Action Arbitration Waivers ,
Class Certification ,
Corporate Counsel ,
Data Collection ,
Data Privacy ,
Data-Sharing ,
Electronic Protected Health Information (ePHI) ,
Invasion of Privacy ,
Mobile Apps ,
Personal Data ,
Popular ,
Privacy Laws ,
Privacy Policy ,
Terms of Service ,
Web Tracking ,
Without Consent
In a big win for businesses, a California federal court just held that a “tester” plaintiff – someone who visits websites for purposes of initiating litigation – cannot bring a claim under the California Invasion of Privacy...more
4/16/2025
/ CIPA ,
Consumer Privacy Rights ,
Cookies ,
Corporate Counsel ,
Data Collection ,
Data Privacy ,
Data-Sharing ,
Internet ,
Invasion of Privacy ,
Opt-In ,
Opt-Outs ,
Privacy Policy ,
Reasonable Expectation of Privacy ,
State Privacy Laws ,
Third-Party Liability ,
Web Tracking ,
Website Owner Liability ,
Websites ,
Wiretapping
Oregon consumers submitted more than 100 privacy complaints to the state’s justice department within six months of the Oregon Consumer Privacy Act (OCPA) taking effect, and businesses subject to the new law need to take note....more
4/2/2025
/ Consumer Privacy Rights ,
Cure Periods ,
Data Collection ,
Data Controller ,
Data Privacy ,
Department of Justice (DOJ) ,
Enforcement Actions ,
New Legislation ,
Oregon ,
Personal Data ,
Privacy Policy ,
State Attorneys General ,
State Privacy Laws
A recent board meeting of state officials revealed that the California agency responsible for overseeing the state’s landmark consumer privacy law received over 2,000 complaints for alleged violations in the past year alone –...more
8/2/2024
/ California Consumer Privacy Act (CCPA) ,
California Privacy Protection Agency (CPPA) ,
Consumer Privacy Rights ,
Data Collection ,
Data Privacy ,
Data Selling ,
Data-Sharing ,
Enforcement Priorities ,
Notice Requirements ,
Opt-Outs ,
Personally Identifiable Information ,
Privacy Policy ,
State Privacy Laws
A California appeals court just pressed fast-forward and ruled that the state can immediately begin enforcing new regulations governing the state’s cornerstone data privacy law instead of waiting until late next month. This...more
2/13/2024
/ California Consumer Privacy Act (CCPA) ,
Consumer Privacy Rights ,
Cookie Banners ,
Cookies ,
Corporate Counsel ,
Data Collection ,
Data Privacy ,
Enforcement ,
New Regulations ,
Notice Requirements ,
Personally Identifiable Information ,
Privacy Policy
California employers, beware: the state’s top prosecutor just announced his office is conducting an investigative sweep of whether and how large California employers have complied with data privacy and consumer protection...more
7/20/2023
/ California ,
California Consumer Privacy Act (CCPA) ,
Consumer Privacy Rights ,
Data Collection ,
Data Privacy ,
Employee Privacy Rights ,
Employer Liability Issues ,
Enforcement Actions ,
Job Applicants ,
Notice Requirements ,
Personally Identifiable Information ,
Privacy Policy ,
State Attorneys General
Getting into compliance with the California Consumer Privacy Act (CCPA) can seem like an overwhelming task. After all, the law is comprised not only of a dense statute and detailed regulations, but the amendment effective...more
5/25/2023
/ California Consumer Privacy Act (CCPA) ,
Consumer Privacy Rights ,
Corporate Counsel ,
Data Collection ,
Data Privacy ,
Data Retention ,
Data Security ,
Data Subject Access Requests ,
Employee Training ,
Notice Requirements ,
Personal Information ,
Privacy Policy
The California Attorney General just announced an investigative sweep of mobile apps that allegedly fail to meet the requirements of state data privacy law, meaning businesses that conduct business through apps need to...more