Connecticut Attorney General William Tong recently announced his office’s first enforcement action for violations of the Connecticut Data Privacy Act. “This law has now been in effect for two years,” Tong said in a...more
7/11/2025
/ Attorney General ,
Compliance ,
Connecticut ,
Consumer Privacy Rights ,
Data Privacy ,
Disclosure Requirements ,
Enforcement Actions ,
Fines ,
Penalties ,
Privacy Laws ,
State Attorneys General ,
State Privacy Laws
New Jersey recently released draft privacy regulations, and there is a lot to unpack and process.
In this three-part series, I will break down the regulations -
Part 1: The New Personal data:
• Scraping is carved...more
6/27/2025
/ California Consumer Privacy Act (CCPA) ,
Consumer Privacy Rights ,
COPPA ,
Data Collection ,
Data Privacy ,
Data Protection Impact Assessments (DPIAs) ,
Data Retention ,
New Jersey ,
New Regulations ,
Opt-Outs ,
Personal Data ,
Privacy Laws ,
Proposed Rules ,
State Privacy Laws
The Attorney Generals of California, Connecticut, Delaware, New Jersey, Oregon and Vermont wrote a letter June 23, 2025 to Senate Majority Leader John Thune and Senate Minority Leader Chuck Schumer, objecting to a proposed AI...more
6/25/2025
/ Algorithms ,
Artificial Intelligence ,
Consumer Privacy Rights ,
Enforcement Actions ,
Privacy Laws ,
Proposed Legislation ,
Regulatory Reform ,
Regulatory Requirements ,
State Attorneys General ,
State Privacy Laws ,
Technology Sector
Businesses should expect to see “increased enforcement” from the California Privacy Protection Agency now that the agency has had four years to staff up and implement rules, the CPPA’s executive director said in an interview...more
6/9/2025
/ California ,
California Privacy Protection Agency (CPPA) ,
Consumer Privacy Rights ,
Data Privacy ,
Data Protection ,
Enforcement ,
Enforcement Actions ,
Enforcement Priorities ,
New Regulations ,
Personal Information ,
Privacy Laws ,
State Privacy Laws
Actual deception, substantial injury (including through AI), kids and teens, financial institutions and employees.
Those are the key enforcement priorities of the Federal Trade Commission when it comes to data privacy...more
The Commonwealth of Pennsylvania is re-joining the U.S. state privacy law race.
State Rep. Edward Neilson recently proposed H.B 78, which features all the normal trappings of a state privacy law with a very low...more
For the second installment of this series on the new California Consumer Privacy Act (CCPA) Regs, we are looking at consumer request processes.
One major eye opener: Tracker opt-outs must be immediate and you may not be...more
5/8/2025
/ California ,
California Consumer Privacy Act (CCPA) ,
Consumer Data Requests ,
Consumer Privacy Rights ,
Corporate Counsel ,
Data Collection ,
Data Protection ,
Disclosure Requirements ,
New Regulations ,
Opt-Outs ,
Privacy Laws
The office of the Oregon Attorney General recently releases a six-month enforcement report regarding the Oregon’s Consumer Privacy Act (OCPA). What are we discussing with our clients?...more
3/12/2025
/ Compliance ,
Consumer Privacy Rights ,
Data Brokers ,
Data Privacy ,
Data Protection ,
Enforcement Actions ,
Nonprofits ,
Oregon ,
Privacy Laws ,
Regulatory Requirements ,
State Privacy Laws
On the heels of the formation of the House Privacy Working Group, Congressman Brett Guthrie (KY-02), Chairman of the House Committee on Energy and Commerce, and Congressman John Joyce, M.D. (PA-13), Vice Chairman of the House...more
Hawaii’s State Data Office recently issued a series of guidance documents for its state agencies on how to handle artificial intelligence. This includes guidance on data protection, data retention and use of Generative AI....more
2/18/2025
/ Artificial Intelligence ,
Consumer Privacy Rights ,
Cybersecurity ,
Data Privacy ,
Data Protection ,
Data Retention ,
Data Security ,
Hawaii ,
Information Security ,
Privacy Laws ,
Regulatory Requirements ,
Risk Management ,
State Privacy Laws
A new decision by the United Kingdom’s high court says that even if you have cookie and marketing consent mechanisms that are sufficient for valid consent under privacy laws for the general public, they may not be enough for...more
1/31/2025
/ Consent ,
Consumer Privacy Rights ,
Consumer Protection Laws ,
Data Collection ,
Data Privacy ,
Data Protection ,
Gambling ,
General Data Protection Regulation (GDPR) ,
Personal Data ,
Personal Information ,
Privacy Laws ,
Privacy Policy ,
UK ,
UK GDPR
The old saying goes, “Don’t mess with Texas.” The same can be said of the Texas Privacy Act. The Texas Department of Information Resources recently issued an implementation status for the act....more
To paraphrase Animal Farm, all pixels are not created equal, but some pixels are more privacy invasive than others. Here are some recent points I made during a presentation to some of my firm’s litigators:...more
Recently, the Office of the New York State Attorney General (OAG) issued an advisory warning business that website tracking technology may violate New York consumer protection laws, including the state’s Uniform Deceptive...more
The U.S. Federal Trade Commission recently posted a blog outlining its enforcement priorities regarding chatbots.
Here are some takeaways.
•Don’t misrepresent what these services are or can do. Your therapy bots aren’t...more
What are the top 5 data privacy concerns for my clients the past couple of months? Here are some notes I recently compiled for a meeting of Fox Rothschild’s national Privacy Law Practice Group.
Patchwork Paralysis -
•How...more
The California Privacy Protection Agency is currently in the middle of multiple, undisclosed investigations, according to the agency’s executive director, Ashkan Soltani....more
The NYC Department of Consumer and Worker Protection has issued a FAQ regarding NYC Local Law 144, which regulates the use of automated decision making tools (AEDT).
Here are some key things to note:...more
The Superior Court of California, County of Sacramento recently issued an order delaying the enforcement of newly enacted California Privacy Rights Act (CPRA) regulations until March 29, 2024, one year from the date they were...more
The California Privacy Protection Agency (CPPA) has issued a Final Statement of Reasons for amended California Consumer Privacy (CCPA) regulations.
Key Points:
The amendments were “necessary” (used 135 times), just...more
Sixth in a series of articles on the Colorado Privacy Act draft rules.
There is a lot to know about Colorado’s draft rules regarding the Colorado Privacy Act, which was enacted in July 2021.
This alert takes a look at...more
Yes, your privacy notice does need to be “that good.” If it isn’t, the California Attorney General’s Office might come knocking.
Here are some key points from the AG’s second year enforcement report:...more
“Businesses, service providers, and contractors are to comply with not just the letter of the (California Consumer Privacy Act), but the spirit of the law.”
That is according to a new Initial Statement of Reasons issued...more
6/9/2022
/ Audits ,
California Consumer Privacy Act (CCPA) ,
California Privacy Rights Act (CPRA) ,
Consent ,
Consumer Privacy Rights ,
Consumer Requests ,
Data Collection ,
Data Privacy ,
Disclosure Requirements ,
Opt-Outs ,
Third-Party Service Provider
New York City has passed a bill limiting data sharing by food delivery apps and food service establishments.
What does that mean?
Here are some key takeaways:.....more
First we take Sacramento, then we take Berlin: How do US data protection laws affect how you do business.
The webinar is aimed at in-house or outside counsel, as well as data protection and compliance officers. In this...more
4/28/2021
/ Adtech ,
Analytics ,
California Consumer Privacy Act (CCPA) ,
California Privacy Rights Act (CPRA) ,
Chief Compliance Officers ,
Consumer Privacy Rights ,
Cookies ,
COPPA ,
Data Privacy ,
Data Processors ,
Data Protection ,
Data Sellers ,
Do Not Sell ,
E-Commerce ,
Enforcement Actions ,
Federal Trade Commission (FTC) ,
Fines ,
General Data Protection Regulation (GDPR) ,
Germany ,
GLBA Privacy ,
Health Insurance Portability and Accountability Act (HIPAA) ,
Multinationals ,
OEM ,
Personally Identifiable Information ,
Privacy Laws ,
Privacy Policy ,
State Privacy Laws ,
Suppliers ,
Third-Party Service Provider ,
Webinars