Cross-border data transfers between the EU and U.S. remain a legal and operational minefield. While the July 2023 adequacy decision ushered in the EU-U.S. Data Privacy Framework (DPF), recent developments have called its...more
9/5/2025
/ Cross-Border Transactions ,
Data Privacy ,
Data Protection ,
Enforcement Actions ,
EU ,
General Data Protection Regulation (GDPR) ,
International Data Transfers ,
Privacy Laws ,
Regulatory Requirements ,
Risk Management ,
Sensitive Personal Information
This year marks a pivotal shift from the era of rapid, unregulated health-tech innovation to one of stringent governance. The proliferation of wearable devices, health applications and remote monitoring tools has led to an...more
Over the past year, the Federal Trade Commission (FTC) has implemented significant updates to the Children’s Online Privacy Protection Act (COPPA) Rule meant to strengthen key protections for children’s privacy online. COPPA...more
9/3/2025
/ Advertising ,
Consent ,
COPPA ,
Data Privacy ,
Data Protection ,
Data Retention ,
Federal Trade Commission (FTC) ,
Personal Information ,
Regulatory Requirements ,
State Privacy Laws ,
Third-Party
The California Privacy Protection Agency (CPPA) is now in its second year with full enforcement powers and has begun to exercise its authority under the California Consumer Privacy Act (CCPA) in significant ways in 2025. With...more
9/3/2025
/ Adtech ,
California ,
California Consumer Privacy Act (CCPA) ,
California Privacy Protection Agency (CPPA) ,
Consumer Privacy Rights ,
Cookies ,
Corporate Counsel ,
Critical Infrastructure Sectors ,
Data Management ,
Data Privacy ,
Data Protection ,
Enforcement Actions ,
Honda ,
Opt-Outs ,
Regulatory Oversight ,
Unfair Competition Law (UCL)
In July 2025, the California Privacy Protection Agency (CPPA) adopted final regulations governing automated decision-making technology (ADMT), privacy risk assessments, and cybersecurity audits under the California Consumer...more
In the wake of an explosion in digital privacy litigation, courts and legislatures are redrawing some of the boundaries of what qualifies as unlawful data collection under decades-old statutes. Claims brought under...more
By the end of 2025, eight new states will have enacted comprehensive privacy laws: Delaware, Iowa, Maryland, Minnesota, Nebraska, New Hampshire, New Jersey, and Tennessee. With twenty states expected to have such laws...more
8/22/2025
/ Consumer Privacy Rights ,
Data Protection Impact Assessments (DPIAs) ,
Enforcement Actions ,
New Legislation ,
NIST ,
Opt-Outs ,
Privacy Laws ,
Regulatory Requirements ,
Sensitive Personal Information ,
State Attorneys General ,
State Privacy Laws
Artificial intelligence is no longer a wild west frontier technology—it’s a regulated one. As AI systems become central to how companies operate, communicate, and compete, legal oversight is catching up. In 2025, AI...more
8/20/2025
/ AI Act ,
Algorithms ,
Artificial Intelligence ,
Corporate Counsel ,
Cybersecurity ,
Data Protection ,
EU ,
Executive Orders ,
Machine Learning ,
New Legislation ,
NIST ,
Regulatory Oversight ,
Regulatory Requirements ,
Risk Management
In a move that could reshape day-to-day people-management practices across the state, the California Legislature is advancing Assembly Bill 1221 (“AB 1221”), a sweeping proposal that would regulate how employers deploy...more
In a significant development for companies targeted by (or vulnerable to) litigation over website data collection practices, the U.S. Court of Appeals for the Second Circuit affirmed the dismissal of a Video Privacy...more
2024 has been another big year for privacy, with significant developments happening almost daily. Several new state privacy laws are going into effect, with several more coming in 2025, and discussions surrounding a potential...more
9/10/2024
/ Artificial Intelligence ,
Consumer Privacy Rights ,
Continuing Legal Education ,
Data Privacy ,
Data Protection ,
Emerging Technologies ,
Enforcement Actions ,
Minors ,
PHI ,
Privacy Laws ,
Risk Mitigation ,
State Privacy Laws ,
Webinars
Introduction -
2024 has been another big year for privacy. Several new state privacy laws are going into effect, with several more coming in 2025, while a federal privacy law continues to be discussed that would further...more
7/24/2024
/ Consumer Privacy Rights ,
Corporate Counsel ,
Cybersecurity ,
Data Privacy ,
Data Protection ,
Data Security ,
EU ,
EU-US Privacy Shield ,
Federal Data Privacy ,
Information Technology ,
New Regulations ,
Online Safety for Children ,
State Data Privacy Laws ,
State Privacy Laws
The California Court of Appeal just issued an opinion reversing a trial court decision from last year that stayed enforcement of the California Privacy Rights Act (“CPRA”) Regulations. If you recall, last year, on June 30,...more
Key Takeaways -
The Children’s Data Privacy Act (AB 1949) would require businesses to obtain affirmative authorization to collect, use or disclose personal data of children under 18 in California....more
1/31/2024
/ California ,
California Consumer Privacy Act (CCPA) ,
CDPA ,
Data Collection ,
Minor Children ,
Online Platforms ,
Online Safety for Children ,
Personal Data ,
Proposed Amendments ,
Regulatory Agenda ,
Regulatory Reform ,
Risk Management ,
State Attorneys General
Despite your recent efforts to comply with privacy law requirements for website cookies, pixels, and analytics, your business may be at risk of getting sued for violations of “pen register” or “trap and trace” laws based on...more
On October 8, 2023, California Governor Gavin Newsom signed into law AB-947, which expanded the category of “sensitive personal information” to include citizenship or immigration status. The category of sensitive personal...more
In 1988, Congress enacted the Video Protection Privacy Act (“VPPA”) in response to the confirmation hearing of Judge Robert Bork, where his video rental history was disclosed during his Supreme Court confirmation hearing....more
10/18/2023
/ Consumer Privacy Rights ,
Corporate Counsel ,
Data Privacy ,
Information Technology ,
Internet ,
Personally Identifiable Information ,
Risk Management ,
Tracking Systems ,
VPPA ,
Web Tracking ,
Websites
Numerous new website technologies and tools allow companies to more effectively interact with their customers. These include chatbots, session recording software, tracking pixels (snippets of code that can be used to identify...more
Despite (or possibly in reaction to) the recent court decision halting the enforcement of the regulations for the Consumer Privacy Rights Act (“CPRA”) by nine months, California regulatory authorities have made clear that...more
Although you are likely breathing a sigh of relief after just finishing compliance efforts for the California Privacy Rights Act (“CPRA”), don’t relax just yet. California has another new privacy law going into effect on July...more
Now that July 1, 2023 has passed, and the California Privacy Rights Act (“CPRA”) is in effect, California Attorney General Rob Bonta has indicated his intent to ensure compliance with the new statute by sending out letters to...more
You are likely aware of headlines spreading the news of a recent Superior Court of California decision that has delayed the enforcement of the California Privacy Rights Act (“CPRA”) regulations until March 29, 2024. However,...more
Join privacy attorney Scott Hall and members of the Coblentz Data Privacy Team for a discussion on steps your business can take now to prepare for CPRA enforcement. • Learn practical steps to take now to ensure your business...more
Introduction
It has been a busy start to 2023 on the data privacy front: from new privacy laws being passed in several states and going into effect in others, to increases in privacy litigation and data breaches....more
Although we are just a few months in, 2021 has already been another busy year for data privacy developments. From new regulations and legislation to court decisions impacting privacy rights, let’s take a look at a few of the...more
5/10/2021
/ California Consumer Privacy Act (CCPA) ,
California Privacy Rights Act (CPRA) ,
Consumer Privacy Rights ,
Corporate Counsel ,
Cybersecurity ,
Data Privacy ,
Data Protection ,
Personal Information ,
Popular ,
Privacy Laws ,
State Privacy Laws