Recent enforcement activities in California and Connecticut highlight that states are ready and willing to actively enforce their comprehensive privacy laws. These recent actions – which continue the trend of states ramping...more
7/17/2025
/ California Consumer Privacy Act (CCPA) ,
Compliance ,
Connecticut ,
Consumer Privacy Rights ,
Corporate Counsel ,
Data Privacy ,
Enforcement Actions ,
Opt-Outs ,
Personal Data ,
Privacy Policy ,
Sensitive Personal Information ,
State Attorneys General ,
State Privacy Laws
Texas Governor Greg Abbott has signed the App Store Accountability Act (“the Act”) into law, instituting sweeping new obligations regarding age verification and parental consent for app stores and app developers operating in...more
7/15/2025
/ App Store ,
Consumer Protection Laws ,
COPPA ,
Cybersecurity ,
Data Privacy ,
Enforcement ,
Minors ,
Mobile Apps ,
New Legislation ,
Online Safety for Children ,
Parental Consent ,
Software Developers ,
State Privacy Laws ,
Technology Sector ,
Texas ,
Unfair or Deceptive Trade Practices
On June 22, 2025, Texas Governor Greg Abbott signed the Texas Responsible Artificial Intelligence Governance Act (TRAIGA or the Texas AI Act) into law. The new law goes into effect January 1, 2026. The law places obligations...more
6/24/2025
/ Algorithms ,
Artificial Intelligence ,
Biometric Information ,
Corporate Counsel ,
Data Privacy ,
Enforcement ,
Enforcement Actions ,
Governance Standards ,
Government Agencies ,
Governor Abbott ,
Machine Learning ,
New Legislation ,
NIST ,
Privacy Laws ,
Regulatory Requirements ,
State and Local Government ,
State Attorneys General ,
State Privacy Laws ,
Texas
On June 2, the New Jersey Division of Consumer Affairs (Division) published proposed regulations to implement the New Jersey Data Privacy Act (NJDPA). Of note, these rules were proposed months after the NJDPA went into effect...more
6/17/2025
/ Comment Period ,
Compliance ,
Consumer Privacy Rights ,
Corporate Counsel ,
Data Privacy ,
Data Protection ,
Data Protection Impact Assessments (DPIAs) ,
New Jersey ,
Notice Requirements ,
Personal Data ,
Proposed Legislation ,
Proposed Rules ,
Regulatory Requirements ,
State Privacy Laws
State enforcement agencies are keeping the pressure on businesses, with two new enforcement actions announced this week in California and Texas. This activity signals to companies – both within and outside of the United...more
IAPP’s Global Privacy Summit in DC this week has featured panels with several state regulators charged with enforcing their state’s privacy laws, including regulators from California, Colorado, Connecticut, and Oregon. The...more
Virginia recently amended its Consumer Protection Act (the Act) to provide enhanced protection for reproductive and sexual health information. These protections take effect on July 1, 2025.
The amendment prohibits a...more
This week in our March Privacy Forecast, we discuss privacy and data security enforcement trends at the state and federal levels. Particularly as state privacy laws continue to expand and evolve, companies should understand...more
This week in our March Privacy Forecast, we discuss a growing trend at both the federal and the state level – new laws and regulations that specifically target data brokers.
At the federal level, two new legal frameworks...more
Welcome to our new series, the March Privacy Forecast. In this weekly series, during the month of March, we will delve into the evolving landscape of data privacy, explore new laws, proposed legislation and enforcement...more
3/10/2025
/ Consent ,
COPPA ,
Data Privacy ,
Data Protection ,
Federal Trade Commission (FTC) ,
New Legislation ,
Online Safety for Children ,
Personal Data ,
Privacy Laws ,
Sensitive Personal Information ,
State Privacy Laws
As we enter the New Year, Wiley is looking ahead to the top privacy developments and trends to watch in 2025. On the state side, 2025 kicked off with several new privacy laws going into effect in January, and states continue...more
1/9/2025
/ Biometric Information ,
Consumer Privacy Rights ,
Corporate Counsel ,
Data Brokers ,
Data Privacy ,
Data Protection ,
Enforcement Actions ,
Federal Trade Commission (FTC) ,
Personal Data ,
Privacy Laws ,
State Attorneys General ,
State Privacy Laws
In January 2025, five new state privacy laws will take effect in Delaware, Iowa, Nebraska, New Hampshire, and New Jersey. These laws will join laws already in effect in California, Colorado, Connecticut, Montana, Oregon,...more
The Texas Attorney General’s (AG) office announced its first enforcement action under a new children’s and teens’ state privacy law that went into effect a mere month ago. Texas’ Securing Children Online Through Parental...more
10/8/2024
/ Chat Rooms ,
Corporate Counsel ,
Data Sellers ,
Data-Sharing ,
Digital Service Providers ,
Health Insurance Portability and Accountability Act (HIPAA) ,
Message Boards ,
Minors ,
Online Safety for Children ,
Personal Information ,
Social Media ,
State Attorneys General ,
State Privacy Laws ,
Texas ,
TikTok
2024 has started off with a bang for state privacy law developments. Only two months into the new year, there has been significant enforcement activity in California and Connecticut – with the California Privacy Protection...more
The New Jersey Legislature this week passed Senate Bill 332 (SB 332), a comprehensive consumer data privacy bill. Since its conception, the bill has undergone significant revisions that expanded a once narrow bill into a more...more
1/15/2024
/ Biometric Information ,
Consumer Privacy Rights ,
Minors ,
New Jersey ,
New Legislation ,
Opt-Outs ,
Privacy Laws ,
Right to Delete ,
Right To Know ,
Sensitive Personal Information ,
State Privacy Laws
On Friday, June 30, 2023, a California state superior court ruled that any California Privacy Rights Act (CPRA) regulation may not be enforced until one year after the regulation is promulgated. Practically speaking, this...more
New state privacy laws and regulations have emerged at a record pace this year, and companies need to stay ahead of developments to comply.
This webinar will provide:
- A deep dive into new laws and regulations in...more
March wrapped up with several significant state privacy developments. First, on March 28, Iowa Governor Kim Reynolds signed Senate File 262 (SF 262) into law, making Iowa the sixth state to adopt comprehensive data privacy...more
4/7/2023
/ California Consumer Privacy Act (CCPA) ,
California Privacy Rights Act (CPRA) ,
Consent ,
Consumer Privacy Rights ,
Data Collection ,
Data Privacy ,
New Legislation ,
Opt-Outs ,
Personal Information ,
Sensitive Personal Information ,
State Privacy Laws
This week saw two new major developments in the state privacy law landscape. On March 15, Iowa’s House unanimously passed Senate File 262 (SF 262), an omnibus privacy bill that already unanimously passed the Senate earlier...more
At its February 3 meeting, the California Privacy Protection Agency (CPPA) Board took steps pursuant to the California Privacy Rights Act (CPRA) towards (1) finalizing its updated California Consumer Privacy Act (CCPA)...more
2023 already is a landmark year for privacy regulation. As of January 1, 2023, two new privacy laws are now in effect: (1) the California Privacy Rights Act (CPRA), which amends the California Consumer Privacy Act (CCPA), and...more
2023 will be a landmark year for state privacy laws, with new frameworks coming into effect in California and Virginia on January 1, 2023; in Colorado and Connecticut on July 1, 2023; and in Utah on December 31, 2023. This...more
Of the five new state-level omnibus privacy laws that are going into effect in 2023, two authorize state-level rulemakings: the California Privacy Rights Act (CPRA) and the Colorado Privacy Act (CPA). These two states’...more
On September 15, Governor Newsom signed the California Age-Appropriate Design Code Act (ADCA) into law. The bill – which is modeled after the UK ICO’s code of practice for age-appropriate design – will impose broad new...more
On May 10, 2022, Connecticut became the fifth state in the nation to pass its own omnibus privacy legislation, joining California, Virginia, Colorado, and Utah. While Senate Bill 6, the Personal Data Privacy and Online...more
5/23/2022
/ Attorney General ,
California Privacy Rights Act (CPRA) ,
Connecticut ,
Data Controller ,
Data Privacy ,
Gramm-Leach-Blilely Act ,
Health Insurance Portability and Accountability Act (HIPAA) ,
Opt-Outs ,
Right To Cure ,
Right To Know ,
State Privacy Laws