2023 already is a landmark year for privacy regulation. As of January 1, 2023, two new privacy laws are now in effect: (1) the California Privacy Rights Act (CPRA), which amends the California Consumer Privacy Act (CCPA), and...more
2023 will be a landmark year for state privacy laws, with new frameworks coming into effect in California and Virginia on January 1, 2023; in Colorado and Connecticut on July 1, 2023; and in Utah on December 31, 2023. This...more
This post is the second of our series reviewing the Federal Trade Commission's (FTC) seventh annual “PrivacyCon." In yesterday’s overview, we summarized the discussions focused on consumer privacy and data security in areas...more
Join us for a webinar where we will focus on the details of the recently finalised and published Executive Order to Implement the European Union-U.S. Data Privacy Framework. Alongside Alex Brown of UK-headquartered...more
10/25/2022
/ Biden Administration ,
Binding Corporate Rules ,
Data Collection ,
Data Privacy ,
Data Transfers ,
EU ,
EU-US Privacy Shield ,
European Commission ,
Executive Orders ,
International Data Transfers ,
Personal Data ,
Standard Contractual Clauses ,
UK ,
Webinars
In August, the FTC launched a groundbreaking privacy and security rulemaking under the FTC Act with an extensive Advanced Notice of Proposed Rulemaking (ANPR) that asks a wide range of questions. The ANPR has generated...more
Nearly 100 class actions have been filed against companies whose websites offer video services to consumers and that use tracking pixels to track consumers’ video viewing activity. The use of tracking pixels is an extremely...more
On October 7, 2022, President Biden signed the Enhancing Safeguards for United States Signals Intelligence Activities Executive Order (Executive Order or EO), which implements the EU-U.S. Data Privacy Framework (EU-U.S. DPF)....more
10/10/2022
/ Court of Justice of the European Union (CJEU) ,
Data Privacy ,
Data Transfers ,
Department of Justice (DOJ) ,
EDPS ,
EU-US Privacy Shield ,
European Commission ,
Executive Orders ,
General Data Protection Regulation (GDPR) ,
Joe Biden ,
Schrems I & Schrems II ,
Standard Contractual Clauses ,
U.S. Commerce Department
On September 15, Governor Newsom signed the California Age-Appropriate Design Code Act (ADCA) into law. The bill – which is modeled after the UK ICO’s code of practice for age-appropriate design – will impose broad new...more
The Federal Trade Commission (FTC) now has a full slate of Commissioners and it is expected to ramp up privacy and cybersecurity enforcement and rulemaking in a number of critical areas. Join us for a discussion of the FTC’s...more
6/2/2022
/ Biometric Information ,
Consumer Privacy Rights ,
Cybersecurity ,
Data Privacy ,
Data Security ,
Data Use Policies ,
Electronic Protected Health Information (ePHI) ,
Enforcement ,
Federal Trade Commission (FTC) ,
Online Safety for Children ,
Personally Identifiable Information ,
PHI ,
Popular ,
Rulemaking Process ,
Targeted Digital Advertising ,
Webinars
On May 10, 2022, Connecticut became the fifth state in the nation to pass its own omnibus privacy legislation, joining California, Virginia, Colorado, and Utah. While Senate Bill 6, the Personal Data Privacy and Online...more
5/23/2022
/ Attorney General ,
California Privacy Rights Act (CPRA) ,
Connecticut ,
Data Controller ,
Data Privacy ,
Gramm-Leach-Blilely Act ,
Health Insurance Portability and Accountability Act (HIPAA) ,
Opt-Outs ,
Right To Cure ,
Right To Know ,
State Privacy Laws
The European Union (EU) and United States have reached a “deal in principle” to establish a new Trans-Atlantic Data Privacy Framework (Framework), which is meant to foster the exchange of data between the EU and U.S. This new...more
On March 3, 2022, the Utah House of Representatives passed a consumer privacy bill: the Utah Consumer Privacy Act. The bill had already passed the Utah Senate in February, and at the time of this writing, awaits a signature...more
Privacy In Focus®-
The last several years have seen major developments in state privacy laws. While Congress remains gridlocked on the federal privacy front, states enacted omnibus data privacy bills that will impact...more
1/19/2022
/ California ,
California Consumer Privacy Act (CCPA) ,
California Privacy Rights Act (CPRA) ,
CDPA ,
Colorado ,
Comment Period ,
Compliance ,
Consumer Privacy Rights ,
Corporate Counsel ,
Data Collection ,
Data Mapping ,
Data Privacy ,
Data Protection ,
Privacy Policy ,
Proposed Amendments ,
State Data Privacy Laws ,
State Privacy Laws ,
Third-Party ,
Virginia
China’s Personal Information Protection Law, adopted August 20, 2021, becomes effective on November 1. The PIPL establishes a comprehensive data protection structure for the collection, use, and disclosure of the personal...more
On September 22, 2021, the California Privacy Protection Agency (CPPA or Agency)—the new agency established by the California Privacy Rights and Enforcement Act (CPRA)—released an Invitation for Preliminary Comments on...more
Companies subject to the California Consumer Privacy Act (CCPA) are required to update their online privacy policies “at least once every 12 months,” as detailed in the statute. For many companies that updated their CCPA...more
China's draft Personal Information Protection Law (PIPL) has just gone through the second reading and is now near final form and expected to be finalized very soon. Once promulgated, it will be the first comprehensive law on...more
6/15/2021
/ Administrative Fines ,
Antitrust Violations ,
China ,
Criminal Liability ,
Cybersecurity ,
Data Breach ,
Data Privacy ,
Data Processors ,
Data Protection ,
Data Security ,
International Data Transfers ,
Legislative Agendas ,
Penalties ,
Personal Data ,
Personally Identifiable Information ,
Webinars
Virginia recently became the second state to pass a comprehensive privacy law. What does it mean for you and your business? While the law is not effective until the beginning of 2023, it requires significant changes in how...more
On March 15, 2021, the California Attorney General (AG) issued further amendments to the implementing regulations of the California Consumer Privacy Act (CCPA), clarifying how a business must facilitate a consumer’s exercise...more
Virginia is for lovers and, in the near future, may be for privacy as well, as the Commonwealth’s legislature is currently considering adopting its own comprehensive consumer data privacy law: The Consumer Data Protection Act...more
2/17/2021
/ Consumer Privacy Rights ,
Data Collection ,
Data Controller ,
Data Management ,
Data Privacy ,
Information Governance ,
Opt-Outs ,
Personal Data ,
Personally Identifiable Information ,
State Privacy Laws ,
Virginia
The California Privacy Rights Act (CPRA) – passed by voters in November – amends the California Consumer Privacy Act (CCPA) in a number of critical ways. Join us for a discussion of the CPRA’s key provisions, the issues on...more
On November 3, 2020, mere months after the California Consumer Protection Act (CCPA) took effect, California voters approved a ballot initiative that will significantly change that law and the privacy obligations for entities...more
Update: On October 29, 2020, the Department of Health and Human Services released an interim final rule extending the November 2, 2020 information blocking compliance deadline to April 5, 2021.
Wiley’s TMT of counsel Joan...more
Brazil’s long-debated privacy law – the Lei Geral de Proteção de Dados (LGPD) – took effect on August 27, 2020. The LGPD is largely inspired by the European Union’s privacy regulation – the General Data Protection Regulation...more
Next month, California voters will cast their votes on Proposition 24, a ballot initiative that, if passed, will enact the California Privacy Rights and Enforcement Act of 2020 (CPRA). The CPRA would significantly amend the...more
10/27/2020
/ Ballot Measures ,
California Consumer Privacy Act (CCPA) ,
California Privacy Rights Act (CPRA) ,
Comment Period ,
Consumer Privacy Rights ,
Cybersecurity ,
Data Collection ,
Data Management ,
Data Privacy ,
Data Protection ,
Health Insurance Portability and Accountability Act (HIPAA) ,
Information Governance ,
Legislative Agendas ,
Personal Data ,
State and Local Government