On June 7, 2021, the Colorado House of Representatives passed the Colorado Privacy Act (CPA), a comprehensive privacy law similar to the California Privacy Rights Act (CPRA) and California Consumer Privacy Act (CCPA), as well...more
6/9/2021
/ Business Associates ,
California Consumer Privacy Act (CCPA) ,
California Privacy Rights Act (CPRA) ,
Covered Entities ,
Data Controller ,
Data Privacy ,
Exemptions ,
General Data Protection Regulation (GDPR) ,
Health Insurance Portability and Accountability Act (HIPAA) ,
Opt-Outs ,
Pending Legislation ,
Personal Data ,
Sensitive Personal Information ,
State Privacy Laws
On March 12, 2020, the California Attorney General (“California AG”) released a second set of modified regulations (“Second Set of Modifications”) for the California Consumer Privacy Act (“CCPA”) that further revise the...more
As state legislatures begin their 2020 sessions, proposals for stronger privacy laws are at the top of the agenda across the country. Carrying forward the story we told in reports in February, April, and July of last year,...more
2/4/2020
/ California Consumer Privacy Act (CCPA) ,
Consumer Privacy Rights ,
Corporate Counsel ,
Fair Credit Reporting Act (FCRA) ,
General Data Protection Regulation (GDPR) ,
GLBA Privacy ,
Health Insurance Portability and Accountability Act (HIPAA) ,
Personal Data ,
Personal Information ,
Privacy Laws ,
Proposed Legislation ,
State Data Privacy Laws
As many businesses occupy themselves with coming into compliance with the California Consumer Privacy Act (CCPA) before the law’s effective date of January 1, 2020, Congress is renewing discussion of a possible comprehensive...more
12/11/2019
/ California Consumer Privacy Act (CCPA) ,
Congressional Committees ,
Corporate Counsel ,
Data Privacy ,
Enforcement Authority ,
Federal Trade Commission (FTC) ,
Legislative Agendas ,
Preemption ,
Privacy Laws ,
Private Right of Action ,
Section 5 ,
State Attorneys General ,
State Data Privacy Laws
On October 10, 2019, California Attorney General Xavier Becerra proposed regulations and issued an explanatory statement, “Initial Statement of Reasons,” aimed at clarifying the scope of the California Consumer Privacy Act...more
Since our reports on February 20, 2019 and April 30, 2019, no states have followed California in adopting comprehensive privacy legislation but three states have enacted targeted privacy laws. In May Nevada enacted a law...more
In recent months, the Office of the Information Commissioner of the UK (“ICO”) has been looking into how personal data is used in real time bidding (“RTB”) in programmatic advertising, involving key stakeholders, including in...more
Since our February 20, 2019 report on privacy bills moving through state legislatures around the country, four new bills modeled on the California Consumer Privacy Act (CCPA) have been introduced—in Connecticut, New York,...more
This week both the House and Senate held hearings kicking off the legislative process for federal privacy legislation. Legislators from both parties voiced support for comprehensive and bipartisan legislation. ...more
3/4/2019
/ California Consumer Privacy Act (CCPA) ,
Congressional Committees ,
Congressional Investigations & Hearings ,
Data Privacy ,
Federal Trade Commission (FTC) ,
General Data Protection Regulation (GDPR) ,
Preemption ,
Privacy Policy ,
Private Right of Action ,
Small Business ,
State and Local Government
The enactment in June 2018 of California’s sweeping new privacy law, the California Consumer Privacy Act (CCPA), has both increased momentum for enactment of a general federal privacy law and spurred state legislatures to...more
The enactment in June 2018 of California’s sweeping new privacy law, the California Consumer Privacy Act (CCPA), has both increased momentum for enactment of a general federal privacy law and spurred state legislatures to...more
2/20/2019
/ California Consumer Privacy Act (CCPA) ,
Congressional Intent ,
Congressional Investigations & Hearings ,
Corporate Counsel ,
Covered Entities ,
Federal Trade Commission (FTC) ,
GAO ,
General Data Protection Regulation (GDPR) ,
NIST ,
Personal Data ,
Privacy Laws ,
Proposed Legislation ,
Public Hearing ,
Trade Associations