On June 3, 2025, the Connecticut legislature passed a bill amending the Connecticut Data Privacy Act (CTDPA). The amendment introduces a variety of changes, including a broadening of the CTDPA’s applicability, changed...more
New Jersey’s Office of Consumer Protection has prepared proposed rules for the New Jersey Data Privacy Act (NJDPA) (Proposed Rules). While the bulk of the Proposed Rules consist of recitations of the obligations found in the...more
6/4/2025
/ California Consumer Privacy Act (CCPA) ,
Consent ,
Consumer Privacy Rights ,
Data Collection ,
Data Controller ,
Data Protection ,
Disclosure Requirements ,
Personal Data ,
Privacy Laws ,
Proposed Rules ,
State Privacy Laws
On May 1, 2025, the California Privacy Protection Agency (CPPA) announced a major overhaul of its draft California Consumer Privacy Act (CCPA) regulations on automated decision-making, cybersecurity audits, risk assessments,...more
In advance of its April 4, 2025, board meeting, the California Privacy Protection Agency (CPPA) released a discussion draft of revisions to its proposed California Consumer Privacy Act (CCPA) regulations. These revisions...more
On March 7, 2025, the California Privacy Protection Agency (CPPA) issued a settlement order imposing a $632,500 fine on American Honda Motor Co., Inc. for violations of the California Consumer Privacy Act (CCPA). The CPPA...more
3/17/2025
/ Automotive Industry ,
California ,
California Consumer Privacy Act (CCPA) ,
California Privacy Protection Agency (CPPA) ,
Consumer Privacy Rights ,
Data Privacy ,
Data Protection ,
Enforcement Actions ,
Honda ,
Personal Information ,
Privacy Laws ,
Regulatory Requirements ,
Settlement
Ahead of its next board meeting, scheduled for March 6 and 7, 2025, the California Privacy Protection Agency (CPPA) released even more proposed regulations, adding to an already full slate of proposed regulations, to amend...more
On December 5, 2024, the Colorado Department of Law (Department) adopted an amended draft of its latest proposed Colorado Privacy Act (CPA) regulations. This set of amended regulations follows a public comment period that...more
12/11/2024
/ Colorado ,
Comment Period ,
Consumer Privacy Rights ,
Data Protection ,
Data Security ,
Legislative Agendas ,
Privacy Acts ,
Proposed Regulation ,
Proposed Rules ,
Regulatory Agenda ,
State Privacy Laws
California is set to amend the California Consumer Privacy Act of 2018 (CCPA) with two recent amendments that have been signed into law. Assembly Bill (AB 1008) and Senate Bill 1223 (SB 1223) aim to clarify how the law...more
Just past midnight on May 11, 2024, the Vermont Legislature passed H.121, the Vermont Data Privacy Act (VDPA). If signed into law, the VDPA would become the most onerous state comprehensive privacy law in the country. Among...more
5/30/2024
/ Consumer Privacy Rights ,
Governor Scott ,
Legislative Agendas ,
New Legislation ,
Popular ,
Privacy Acts ,
Privacy Laws ,
Private Right of Action ,
State and Local Government ,
State Legislatures ,
State Privacy Laws ,
Vermont
On May 19, 2024, the Minnesota Legislature passed a comprehensive privacy bill, sending the Minnesota Consumer Data Privacy Act (MCDPA) to Governor Tim Walz’s desk for signature into law.
The law, which would take effect...more
5/23/2024
/ Consumer Privacy Rights ,
Data Privacy ,
Data Protection ,
Data Protection Acts ,
Legislative Agendas ,
New Legislation ,
Personal Data ,
Privacy Laws ,
Regulatory Requirements ,
Sensitive Personal Information ,
State and Local Government ,
State Legislatures ,
State Privacy Laws ,
Summary of Consumer Rights
On April 12, 2024, the Nebraska Legislature passed the Data Privacy Act (NEDPA), sending the bill to Governor Jim Pillen’s desk for signature.
NEDPA adds to the patchwork of state consumer privacy laws in that it does not...more
4/19/2024
/ Consumer Privacy Rights ,
Data Privacy ,
Data Protection ,
Data Protection Acts ,
Enforcement Actions ,
Legislative Agendas ,
New Legislation ,
Personal Data ,
Privacy Laws ,
Privacy Policy ,
Private Right of Action ,
Regulatory Requirements ,
Small Business ,
State and Local Government ,
State Legislatures ,
State Privacy Laws
On April 6, 2024, the Maryland Legislature passed a comprehensive privacy bill, sending the Maryland Online Data Privacy Act of 2024 (MODPA) to Governor Wes Moore’s desk for signature into law. The law, which would take...more
4/11/2024
/ Consumer Privacy Rights ,
Data Privacy ,
Data Protection ,
Data Protection Acts ,
Legislative Agendas ,
New Legislation ,
Personal Data ,
Privacy Laws ,
Privacy Policy ,
Regulatory Requirements ,
State and Local Government ,
State Legislatures ,
State Privacy Laws
On January 18, 2024, the New Hampshire Senate passed by voice vote SB255, the New Hampshire Privacy Act (NHPA), amended by the New Hampshire House of Representatives. The bill will head to Governor Chris Sununu’s desk. After...more
1/25/2024
/ Consumer Privacy Rights ,
Corporate Counsel ,
Data Privacy ,
Data Protection ,
Data Protection Acts ,
Legislative Agendas ,
New Legislation ,
Personal Data ,
Privacy Acts ,
Privacy Laws ,
Regulatory Requirements ,
State and Local Government ,
State Legislatures ,
State Privacy Laws
This has been a busy year for privacy legislation, with dozens of states deliberating consumer privacy bills. Today, 13 states have their own consumer privacy laws, a tally that climbs to 15 if we include the health privacy...more
Add Oregon to the list of states passing consumer privacy laws this year. On June 22, 2023, the Oregon House of Representatives passed SB 619, the proposed Oregon Consumer Privacy Act (OCPA), following the Senate’s passage on...more
6/27/2023
/ Consumer Privacy Rights ,
Consumers ,
Data Protection ,
Enforcement ,
Exemptions ,
Legislative Agendas ,
New Legislation ,
Oregon ,
Personal Data ,
Privacy Laws ,
Proposed Legislation ,
Sensitive Personal Information ,
State and Local Government ,
State Legislatures ,
State Privacy Laws
The legal privacy landscape is quickly shifting as new consumer privacy laws spring up each year. Alcohol companies looking to maximize their customer data must understand how to comply with applicable privacy rules and...more
6/2/2023
/ Breweries ,
Consumer Privacy Rights ,
Continuing Legal Education ,
Customer Information ,
Cybersecurity ,
Data Collection ,
Data Privacy ,
Data Use Policies ,
Distilleries ,
Marketing ,
Privacy Laws ,
Risk Mitigation ,
Supply Chain ,
Webinars ,
Wineries
On July 1, 2023, two more state privacy laws will take effect. The new laws in Colorado and Connecticut will impose requirements that extend beyond the rules in California and Virginia that took effect earlier this year. July...more
5/15/2023
/ Best Practices ,
California Consumer Privacy Act (CCPA) ,
California Privacy Protection Agency (CPPA) ,
Colorado ,
Connecticut ,
Consumer Privacy Rights ,
Continuing Legal Education ,
Data Privacy ,
New Legislation ,
Personally Identifiable Information ,
State Privacy Laws ,
Webinars
On May 9, 2023, the Florida legislature passed the Florida Digital Bill of Rights (FDBR), which adds a new twist to the growing body of state consumer privacy laws. The bill now heads to Governor Ron DeSantis’ desk, and it is...more
5/11/2023
/ Consumer Privacy Rights ,
Corporate Counsel ,
Florida ,
Governor DeSantis ,
Legislative Agendas ,
New Legislation ,
Privacy Laws ,
Proposed Legislation ,
State and Local Government ,
State Legislatures ,
State Privacy Laws
We said it earlier this month: With many state legislative sessions coming to an end, we were likely to see a push by states to finish up debates and votes on consumer privacy laws, and now you can count Tennessee (and...more
4/25/2023
/ Consumer Privacy Rights ,
Corporate Counsel ,
Data Privacy ,
Data Protection ,
Data Protection Acts ,
New Legislation ,
Personal Data ,
Privacy Acts ,
Privacy Laws ,
State Legislatures ,
State Privacy Laws
We said it earlier this month: With many state legislative sessions coming to an end, we were likely to see a push by states to finish up debates and votes on consumer privacy laws. Now you can count Montana (and Tennessee)...more
4/25/2023
/ Consumer Privacy Rights ,
Data Privacy ,
Data Protection ,
Legislative Agendas ,
New Legislation ,
Personal Data ,
Privacy Acts ,
Privacy Laws ,
State and Local Government ,
State Legislatures ,
State Privacy Laws
There has been a flurry of state privacy activity in the past week, with Colorado becoming the latest state to finalize sweeping data privacy rules and Iowa on the precipice of becoming the sixth state to enact comprehensive...more
On February 3, 2023, after two comment periods and much anticipation, the California Privacy Protection Agency (CPPA) voted to adopt and approve its draft California Consumer Privacy Act (CCPA) regulations. The final...more
We would not blame companies for feeling fatigued after the race to comply with the amended California Consumer Privacy Act (CCPA), the soon-to-be finalized CCPA regulations and the new Virginia Consumer Data Protection Act...more
2022 has been a busy legislative year for privacy. Dozens of states considered consumer privacy bills, two states enacted privacy consumer bills and California released proposed California Consumer Privacy Act (CCPA)...more
8/30/2022
/ Biometric Information ,
Biometric Information Privacy Act ,
California Consumer Privacy Act (CCPA) ,
Consumer Privacy Rights ,
Continuing Legal Education ,
COPPA ,
Cybersecurity ,
Data Privacy ,
Data Protection ,
Federal Trade Commission (FTC) ,
Legislative Agendas ,
New Legislation ,
Privacy Laws ,
Proposed Legislation ,
Proposed Regulation ,
Proposed Rules ,
Rulemaking Process ,
Securities and Exchange Commission (SEC) ,
Webinars
On April 28, 2022, the Connecticut House of Representatives joined the Connecticut Senate in passing the Connecticut Data Privacy Act (CTDPA), which now heads to Governor Ned Lamont for signature. Governor Lamont is expected...more