Recent enforcement activities in California and Connecticut highlight that states are ready and willing to actively enforce their comprehensive privacy laws. These recent actions – which continue the trend of states ramping...more
7/17/2025
/ California Consumer Privacy Act (CCPA) ,
Compliance ,
Connecticut ,
Consumer Privacy Rights ,
Corporate Counsel ,
Data Privacy ,
Enforcement Actions ,
Opt-Outs ,
Personal Data ,
Privacy Policy ,
Sensitive Personal Information ,
State Attorneys General ,
State Privacy Laws
On June 2, the New Jersey Division of Consumer Affairs (Division) published proposed regulations to implement the New Jersey Data Privacy Act (NJDPA). Of note, these rules were proposed months after the NJDPA went into effect...more
6/17/2025
/ Comment Period ,
Compliance ,
Consumer Privacy Rights ,
Corporate Counsel ,
Data Privacy ,
Data Protection ,
Data Protection Impact Assessments (DPIAs) ,
New Jersey ,
Notice Requirements ,
Personal Data ,
Proposed Legislation ,
Proposed Rules ,
Regulatory Requirements ,
State Privacy Laws
State enforcement agencies are keeping the pressure on businesses, with two new enforcement actions announced this week in California and Texas. This activity signals to companies – both within and outside of the United...more
IAPP’s Global Privacy Summit in DC this week has featured panels with several state regulators charged with enforcing their state’s privacy laws, including regulators from California, Colorado, Connecticut, and Oregon. The...more
IAPP’s Global Privacy Summit kicked off on April 22 with keynote remarks from Federal Trade Commission (FTC) Commissioner Melissa Holyoak, who highlighted her top priorities for privacy enforcement and the digital economy. ...more
This week in our March Privacy Forecast, we discuss privacy and data security enforcement trends at the state and federal levels. Particularly as state privacy laws continue to expand and evolve, companies should understand...more
On March 12, 2025, the California Consumer Privacy Protection Agency (CPPA or Agency) announced a settlement with an auto manufacturer, marking the Agency’s first enforcement action under the California Consumer Privacy Act...more
On January 16, 2025, the Federal Trade Commission (FTC or Commission) finalized changes to the Children’s Online Privacy Protection Act (COPPA) Rule (Final Rule). The Final Rule adopts certain amendments that were proposed in...more
1/20/2025
/ Biometric Information ,
Consent ,
Consumer Privacy Rights ,
COPPA ,
Data Privacy ,
Data Retention ,
Federal Trade Commission (FTC) ,
NPRM ,
Online Safety for Children ,
Personal Information ,
Privacy Laws
As we enter the New Year, Wiley is looking ahead to the top privacy developments and trends to watch in 2025. On the state side, 2025 kicked off with several new privacy laws going into effect in January, and states continue...more
1/9/2025
/ Biometric Information ,
Consumer Privacy Rights ,
Corporate Counsel ,
Data Brokers ,
Data Privacy ,
Data Protection ,
Enforcement Actions ,
Federal Trade Commission (FTC) ,
Personal Data ,
Privacy Laws ,
State Attorneys General ,
State Privacy Laws
Over the weekend, lawmakers unveiled the latest push for a federal privacy law – the American Privacy Rights Act (APRA). The bill was circulated as a discussion draft by Sen. Maria Cantwell (D-WA), Chair of the Senate...more
4/11/2024
/ California Consumer Privacy Act (CCPA) ,
California Privacy Protection Agency (CPPA) ,
Consumer Privacy Rights ,
Corporate Counsel ,
Data Privacy ,
Federal Trade Commission (FTC) ,
FTC Act ,
Government Entities ,
Minors ,
Nonprofits ,
Privacy Framework ,
Private Right of Action ,
Right to Delete ,
Right-To-Access ,
Small Business ,
Social Media ,
Third-Party Service Provider ,
Transparency
2024 has started off with a bang for state privacy law developments. Only two months into the new year, there has been significant enforcement activity in California and Connecticut – with the California Privacy Protection...more
The New Jersey Legislature this week passed Senate Bill 332 (SB 332), a comprehensive consumer data privacy bill. Since its conception, the bill has undergone significant revisions that expanded a once narrow bill into a more...more
1/15/2024
/ Biometric Information ,
Consumer Privacy Rights ,
Minors ,
New Jersey ,
New Legislation ,
Opt-Outs ,
Privacy Laws ,
Right to Delete ,
Right To Know ,
Sensitive Personal Information ,
State Privacy Laws
The end of the year is a good time to revisit your organization’s privacy policy to ensure it is accurate and up to date. Notably, at least one state privacy law – the California Consumer Privacy Act (CCPA) – requires that a...more
California Attorney General Rob Bonta (California AG) recently announced that his office issued several inquiry letters to large California employers requesting information about their compliance with the California Consumer...more
It has been an active legislative season, with numerous states advancing new data privacy laws. In May, Indiana, Montana, and Tennessee joined Iowa in adopting new privacy laws, while the legislature in Texas sent an omnibus...more
6/8/2023
/ Consumer Privacy Rights ,
Corporate Counsel ,
Data Privacy ,
Data Protection Impact Assessments (DPIAs) ,
Health Insurance Portability and Accountability Act (HIPAA) ,
New Legislation ,
NIST ,
Online Safety for Children ,
Opt-Outs ,
Personal Data ,
Privacy Laws
New state privacy laws and regulations have emerged at a record pace this year, and companies need to stay ahead of developments to comply.
This webinar will provide:
- A deep dive into new laws and regulations in...more
March wrapped up with several significant state privacy developments. First, on March 28, Iowa Governor Kim Reynolds signed Senate File 262 (SF 262) into law, making Iowa the sixth state to adopt comprehensive data privacy...more
4/7/2023
/ California Consumer Privacy Act (CCPA) ,
California Privacy Rights Act (CPRA) ,
Consent ,
Consumer Privacy Rights ,
Data Collection ,
Data Privacy ,
New Legislation ,
Opt-Outs ,
Personal Information ,
Sensitive Personal Information ,
State Privacy Laws
This week saw two new major developments in the state privacy law landscape. On March 15, Iowa’s House unanimously passed Senate File 262 (SF 262), an omnibus privacy bill that already unanimously passed the Senate earlier...more
2023 already is a landmark year for privacy regulation. As of January 1, 2023, two new privacy laws are now in effect: (1) the California Privacy Rights Act (CPRA), which amends the California Consumer Privacy Act (CCPA), and...more
In August, the FTC launched a groundbreaking privacy and security rulemaking under the FTC Act with an extensive Advanced Notice of Proposed Rulemaking (ANPR) that asks a wide range of questions. The ANPR has generated...more
The Federal Trade Commission (FTC) now has a full slate of Commissioners and it is expected to ramp up privacy and cybersecurity enforcement and rulemaking in a number of critical areas. Join us for a discussion of the FTC’s...more
6/2/2022
/ Biometric Information ,
Consumer Privacy Rights ,
Cybersecurity ,
Data Privacy ,
Data Security ,
Data Use Policies ,
Electronic Protected Health Information (ePHI) ,
Enforcement ,
Federal Trade Commission (FTC) ,
Online Safety for Children ,
Personally Identifiable Information ,
PHI ,
Popular ,
Rulemaking Process ,
Targeted Digital Advertising ,
Webinars
On March 3, 2022, the Utah House of Representatives passed a consumer privacy bill: the Utah Consumer Privacy Act. The bill had already passed the Utah Senate in February, and at the time of this writing, awaits a signature...more
Privacy In Focus®-
The last several years have seen major developments in state privacy laws. While Congress remains gridlocked on the federal privacy front, states enacted omnibus data privacy bills that will impact...more
1/19/2022
/ California ,
California Consumer Privacy Act (CCPA) ,
California Privacy Rights Act (CPRA) ,
CDPA ,
Colorado ,
Comment Period ,
Compliance ,
Consumer Privacy Rights ,
Corporate Counsel ,
Data Collection ,
Data Mapping ,
Data Privacy ,
Data Protection ,
Privacy Policy ,
Proposed Amendments ,
State Data Privacy Laws ,
State Privacy Laws ,
Third-Party ,
Virginia
China’s Personal Information Protection Law, adopted August 20, 2021, becomes effective on November 1. The PIPL establishes a comprehensive data protection structure for the collection, use, and disclosure of the personal...more
On September 22, 2021, the California Privacy Protection Agency (CPPA or Agency)—the new agency established by the California Privacy Rights and Enforcement Act (CPRA)—released an Invitation for Preliminary Comments on...more