As we enter a new year, the patchwork of US privacy laws continues to expand and become more complex. With the change in control of the White House and Congress, the prospects for a federal privacy law have grown even less...more
1/29/2025
/ Consumer Privacy Rights ,
Corporate Counsel ,
Data Privacy ,
Data Protection ,
Data Security ,
Legislative Agendas ,
Personal Data ,
Privacy Laws ,
Regulatory Agenda ,
Regulatory Requirements ,
State and Local Government ,
State Legislatures ,
State Privacy Laws
On February 28, 2024, President Biden issued Executive Order 14117 on Preventing Access to Americans’ Bulk Sensitive Personal Data and United States Government-Related Data by Countries of Concern (the EO). The EO empowers...more
3/7/2024
/ Biden Administration ,
Cross-Border Transactions ,
Cybersecurity ,
Cybersecurity Information Sharing Act (CISA) ,
Data Brokers ,
Department of Homeland Security (DHS) ,
Department of Justice (DOJ) ,
Enforcement Actions ,
Executive Orders ,
National Security ,
Office of Foreign Assets Control (OFAC) ,
Privacy Laws ,
Regulatory Agenda ,
Regulatory Requirements ,
Sensitive Personal Information
On February 26, 2024, the National Institute of Standards and Technology (NIST), an agency within the U.S. Department of Commerce, released Version 2.0 of its Cybersecurity Framework (CSF), the first major update since its...more
Businesses subject to the California Consumer Privacy Act (CCPA) could be forgiven for feeling like they have whiplash from the twists and turns in the California privacy rulemaking process.
To recap: In June 2023, the...more
On October 30, 2023, President Biden signed the Executive Order on Safe, Secure, and Trustworthy Artificial Intelligence (the “Federal AI Executive Order”), a long-awaited executive order that builds upon the Biden...more
11/1/2023
/ Anti-Discrimination Policies ,
Artificial Intelligence ,
Biden Administration ,
Competition ,
Cybersecurity ,
Executive Orders ,
Intellectual Property Protection ,
Legislative Agendas ,
New Legislation ,
Popular ,
Privacy Laws ,
Procurement Guidelines ,
Regulatory Agenda ,
Regulatory Reform ,
Regulatory Requirements ,
Reporting Requirements
On June 8, 2022, the California Privacy Protection Agency (“CPPA” or “Agency”) voted to begin the formal rulemaking process for regulations implementing the California Privacy Rights Act (CPRA). The Agency Board discussed and...more
6/10/2022
/ California ,
California Consumer Privacy Act (CCPA) ,
California Privacy Rights Act (CPRA) ,
Consumer Privacy Rights ,
Corporate Counsel ,
Cybersecurity ,
Data Collection ,
Data Management ,
Data Privacy ,
Data Protection ,
Information Governance ,
Regulatory Agenda
Connecticut is poised to become the fifth state to pass comprehensive consumer privacy legislation, after California, Virginia, Colorado, and Utah. Senate Bill 6, the Connecticut Data Privacy Act (“CTDPA”), passed the...more
5/6/2022
/ Connecticut ,
Consumer Privacy Rights ,
Cybersecurity ,
Data Management ,
Data Privacy ,
Data Protection ,
Information Governance ,
Pending Legislation ,
Personally Identifiable Information ,
Regulatory Agenda ,
Regulatory Reform
On Friday, March 25, President Biden and European Commission President Ursula von der Leyen announced a new agreement in principle for trans-Atlantic data flows. Although details about the new Trans-Atlantic Data Privacy...more
3/30/2022
/ Cybersecurity Framework ,
Data Privacy ,
Data Protection ,
EU ,
EU-US Privacy Shield ,
International Data Transfers ,
Personal Information ,
Popular ,
Privacy Framework ,
Regulatory Agenda ,
Regulatory Reform
Utah is poised to become the fourth state to pass comprehensive consumer privacy legislation, after California, Virginia, and Colorado. The Utah Consumer Privacy Act (UCPA) was approved by the Utah House of Representatives on...more
3/7/2022
/ Consumer Privacy Rights ,
Data Collection ,
Data Management ,
Data Privacy ,
Data Protection ,
Information Governance ,
Legislative Agendas ,
Pending Legislation ,
Personal Data ,
Personally Identifiable Information ,
Regulatory Agenda ,
Regulatory Reform
The new California Privacy Protection Agency (“CPPA”) has made two recent notable announcements. On September 22, 2021, CPPA issued an Invitation for Preliminary Comments on Proposed Rulemaking Under the California Privacy...more
10/18/2021
/ California Privacy Rights Act (CPRA) ,
Comment Period ,
Consumer Privacy Rights ,
Cybersecurity ,
Data Collection ,
Data Management ,
Data Privacy ,
Data Protection ,
Information Governance ,
Personal Data ,
Personally Identifiable Information ,
Regulatory Agencies ,
Regulatory Agenda ,
Rulemaking Process