New Jersey officials recently released proposed privacy regulations that would create several new compliance obligations for businesses above and beyond what existing state law and many other state laws require, meaning you...more
7/18/2025
/ Artificial Intelligence ,
Comment Period ,
Consent ,
Consumer Privacy Rights ,
Corporate Counsel ,
Customer-Loyalty Programs ,
Data Collection ,
Data Controller ,
Data Privacy ,
Data Processors ,
Data Use Policies ,
Disclosure Requirements ,
Duty of Care ,
Impact Assessments ,
New Jersey ,
Notice Requirements ,
Personal Data ,
Personally Identifiable Information ,
Privacy Policy ,
Proposed Regulation ,
Public Comment ,
Sensitive Personal Information
A California bill aimed at curbing the explosion of lawsuits filed against businesses using common website tools like cookies, pixels, and session replay software has stalled out in the 2025 legislative session, meaning your...more
7/8/2025
/ California ,
CIPA ,
Class Action ,
Consent ,
Consumer Privacy Rights ,
Cookies ,
Data Collection ,
Data Privacy ,
Privacy Policy ,
Proposed Legislation ,
State Privacy Laws ,
Web Tracking ,
Websites ,
Wiretapping
Healthline Media has agreed to pay $1.55 million to resolve allegations that it violated the California Consumer Privacy Act (CCPA) – which is the largest settlement to date under the state’s landmark privacy law. The...more
7/8/2025
/ California Consumer Privacy Act (CCPA) ,
CIPA ,
Consent ,
Consumer Privacy Rights ,
Cookie Banners ,
Cookies ,
Corporate Counsel ,
Data Collection ,
Data Privacy ,
Data-Sharing ,
Enforcement Actions ,
Opt-Outs ,
Personal Information ,
Privacy Policy ,
Settlement ,
State Attorneys General ,
Targeted Digital Advertising ,
Third-Party ,
Unfair Competition Law (UCL) ,
Web Tracking ,
Websites
In a significant decision for privacy class action litigation, a federal judge in California recently denied the certification of a proposed class action involving claims under the state’s invasion of privacy law. The May 29...more
6/11/2025
/ Article III ,
CIPA ,
Class Action ,
Class Certification ,
Class Representatives ,
Consent ,
Consumer Privacy Rights ,
Data Collection ,
Data Privacy ,
E-Commerce ,
Failure To Preserve ,
FRCP 23(a) ,
Invasion of Privacy ,
Privacy Laws ,
Retailers ,
Standing ,
Third-Party Liability ,
Web Tracking
In a significant enforcement move, California’s consumer privacy regulator just ordered a national clothing retailer to pay a $345,178 fine to resolve alleged violations of the state’s privacy law. The California Privacy...more
5/16/2025
/ California ,
California Consumer Privacy Act (CCPA) ,
California Privacy Protection Agency (CPPA) ,
Consent ,
Consumer Privacy Rights ,
Corporate Counsel ,
Corrective Action Plans (CAPs) ,
Data Collection ,
Data Privacy ,
Data Processors ,
Enforcement Actions ,
Internet Retailers ,
Opt-Outs ,
Personal Information ,
State Privacy Laws
Businesses just received some good news when a federal court dismissed a California Invasion of Privacy Act (CIPA) claim that aimed to expand the reach of the state’s wiretapping law to cover internet communications. The...more
4/23/2025
/ California ,
CIPA ,
Consumer Privacy Rights ,
Cookies ,
Data Collection ,
Data Privacy ,
Data-Sharing ,
Dismissals ,
Eavesdropping ,
Electronic Communications ,
Internet ,
Invasion of Privacy ,
Privacy Policy ,
Risk Mitigation ,
Summary Judgment ,
Third-Party ,
Website Owner Liability ,
Websites ,
Wiretapping
A new California investigative sweep into the location data industry focuses on whether businesses have violated state law relating to the consumers’ right to limit how their personal information – including their geolocation...more
4/2/2025
/ California ,
California Consumer Privacy Act (CCPA) ,
Consumer Privacy Rights ,
Cookies ,
Data Collection ,
Data Privacy ,
Data Selling ,
Data-Sharing ,
Enforcement Actions ,
Geolocation ,
Location Data ,
Sensitive Personal Information ,
State Attorneys General
Oregon consumers submitted more than 100 privacy complaints to the state’s justice department within six months of the Oregon Consumer Privacy Act (OCPA) taking effect, and businesses subject to the new law need to take note....more
4/2/2025
/ Consumer Privacy Rights ,
Cure Periods ,
Data Collection ,
Data Controller ,
Data Privacy ,
Department of Justice (DOJ) ,
Enforcement Actions ,
New Legislation ,
Oregon ,
Personal Data ,
Privacy Policy ,
State Attorneys General ,
State Privacy Laws
Businesses operating in California that rely on location tracking – whether for fleet management, employee monitoring, logistics, or marketing – should pay close attention to a bill that would dramatically alter the legal...more
3/6/2025
/ California ,
Consent ,
Consumer Privacy Rights ,
Data Collection ,
Data Privacy ,
Data Retention ,
Data Use Policies ,
Data-Sharing ,
Employee Monitoring ,
Employee Tracking ,
GPS ,
IP Addresses ,
Location Data ,
Notice Requirements ,
Opt-In ,
Privacy Policy ,
State Privacy Laws ,
Websites
Two recent court decisions have provided businesses with long-awaited clarity on the reach of the California Invasion of Privacy Act (CIPA) – and could begin to redefine digital privacy litigation for the better. Two separate...more
2/11/2025
/ California ,
CIPA ,
Consumer Privacy Rights ,
Cookies ,
Corporate Counsel ,
Data Collection ,
Data Privacy ,
Invasion of Privacy ,
Popular ,
State Privacy Laws ,
Web Tracking ,
Website Owner Liability ,
Websites ,
Wiretapping
In a major development for all businesses handling health data, New York lawmakers passed a sweeping health data privacy bill Wednesday that could have far-ranging consequences across the country. S929, also known as the New...more
1/24/2025
/ Consent ,
Consumer Privacy Rights ,
Corporate Counsel ,
Data Collection ,
Data Deletion ,
Data Privacy ,
Data Processors ,
Data Protection ,
Electronic Protected Health Information (ePHI) ,
Health Care Providers ,
New York ,
PHI ,
Privacy Laws ,
Proposed Legislation ,
State Privacy Laws
Some businesses might be surprised to learn that digital wiretapping litigation claims are one of today’s fastest-growing compliance risks, with over 1,560 lawsuits filed in 28 states since a groundbreaking 2022 decision...more
1/15/2025
/ Consumer Privacy Rights ,
Data Collection ,
Data Privacy ,
Employer Liability Issues ,
Mobile Apps ,
Personally Identifiable Information ,
Privacy Laws ,
Web Tracking ,
Website Owner Liability ,
Websites ,
Wiretapping
Many employers have turned to geolocation tools like GPS devices to monitor employees’ whereabouts and movements – especially those working remotely or in field-based roles. While these tools provide an effective way to boost...more
1/10/2025
/ Best Practices ,
Data Collection ,
Data Privacy ,
Data Protection ,
Data Retention ,
Data Security ,
Documentation ,
Employee Monitoring ,
Employee Privacy Rights ,
Employee Tracking ,
Geolocation ,
Informed Consent ,
Legitimate Business Purpose ,
Privacy Laws ,
Proportionality ,
Transparency
Comprehensive consumer privacy laws are rapidly expanding across the United States, significantly impacting PEOs. Currently, 19 states have enacted privacy laws, with eight already in effect and 11 set to take effect between...more
12/17/2024
/ Consumer Privacy Rights ,
Data Collection ,
Data Privacy ,
Data Protection ,
Data Retention ,
Data Subjects Rights ,
Data Use Policies ,
Data-Sharing ,
Personally Identifiable Information ,
Privacy Laws ,
Privacy Policy ,
Professional Employer Organization
It’s no longer good enough for your business to have a reactive approach to consumer privacy – you need a proactive strategy to manage compliance, foster consumer trust, and stay competitive in this modern era. While many...more
11/13/2024
/ Consumer Privacy Rights ,
Cybersecurity ,
Data Breach ,
Data Collection ,
Data Deletion ,
Data Privacy ,
Data Processors ,
Data Protection ,
Data Security ,
Data Subject Access Requests ,
Data-Sharing ,
Opt-Outs ,
Personally Identifiable Information ,
Privacy Laws ,
Privacy Policy ,
State Privacy Laws ,
Third-Party Risk ,
Vendor Contacts ,
Vendors
Businesses that use website tracking software to monitor activity for marketing purposes must comply with a growing list of state laws – but does that include a nearly 60-year-old Massachusetts law requiring consent to record...more
10/25/2024
/ Consent ,
Consumer Privacy Rights ,
Cookies ,
Data Collection ,
Data Privacy ,
MA Supreme Judicial Court ,
Privacy Laws ,
Web Tracking ,
Websites ,
Wiretap Act ,
Wiretapping
Businesses with a website beware: California regulators just warned that the law prohibits your website from making website users jump through hoops or otherwise confusing them as they try to exercise their privacy rights,...more
9/10/2024
/ California Consumer Privacy Act (CCPA) ,
California Privacy Protection Agency (CPPA) ,
Consent ,
Consumer Confusion ,
Consumer Privacy Rights ,
Cookies ,
Data Collection ,
Data Privacy ,
Data Use Policies ,
Personally Identifiable Information ,
Privacy Policy ,
Website Owner Liability ,
Websites
A California federal court recently ruled that disclosure of certain data collected through website cookies that may qualify as health information could trigger a data breach under the California Consumer Privacy Act (CCPA) –...more
8/14/2024
/ California Consumer Privacy Act (CCPA) ,
Consumer Privacy Rights ,
Cookies ,
Corporate Counsel ,
Cybersecurity ,
Data Breach ,
Data Collection ,
Data Privacy ,
Data Protection ,
Data Security ,
Electronic Protected Health Information (ePHI) ,
Health Care Providers ,
PHI ,
Popular ,
Websites
A recent board meeting of state officials revealed that the California agency responsible for overseeing the state’s landmark consumer privacy law received over 2,000 complaints for alleged violations in the past year alone –...more
8/2/2024
/ California Consumer Privacy Act (CCPA) ,
California Privacy Protection Agency (CPPA) ,
Consumer Privacy Rights ,
Data Collection ,
Data Privacy ,
Data Selling ,
Data-Sharing ,
Enforcement Priorities ,
Notice Requirements ,
Opt-Outs ,
Personally Identifiable Information ,
Privacy Policy ,
State Privacy Laws
Federal officials recently banned a software provider from selling, disclosing, or licensing any web browsing data for advertising purposes – and ordered to pay $16.5 million. The Federal Trade Commission (FTC) alleged that...more
7/3/2024
/ Consent ,
Consumer Information ,
Data Collection ,
Data Privacy ,
Data Security ,
Data Selling ,
Data Storage ,
Enforcement Actions ,
Federal Trade Commission (FTC) ,
Targeted Digital Advertising ,
Website Owner Liability
Employers and businesses are in limbo on how to prepare for a post-TikTok world after Congress passed legislation giving the social media app’s Chinese owner nine months to either sell the company or be banned throughout the...more
5/16/2024
/ China ,
Data Collection ,
Data Privacy ,
Employee Releases ,
Federal Bans ,
International Data Transfers ,
Mobile Apps ,
National Security ,
Privacy Concerns ,
Social Media ,
TikTok
State officials who oversee California’s data privacy law recently convened a public meeting to discuss various privacy-related matters – and may have signaled that an explanation of employer obligations under the law could...more
Businesses take heed: California state officials just warned that the law prohibits you from collecting unnecessary data and retaining data for longer than necessary. The California Privacy Protection Agency published its...more
4/15/2024
/ California ,
California Consumer Privacy Act (CCPA) ,
California Privacy Protection Agency (CPPA) ,
Consumer Privacy Rights ,
Data Collection ,
Data Deletion ,
Data Privacy ,
Data Retention ,
Data Selling ,
Data-Sharing ,
Enforcement Actions ,
Opt-Outs ,
Personally Identifiable Information ,
Security and Privacy Controls ,
State Privacy Laws ,
Verification Requirements
A bipartisan group of federal lawmakers just unveiled a sweeping proposal to pass the nation’s first data privacy law and hand a significant amount of power to consumers, one that would bring about a massive change in the way...more
The news that California regulators can immediately begin enforcing new data privacy regulations will have an outsized impact on the PEO community. A surprise February 9 decision from a state appeals court pressed...more
4/8/2024
/ California Consumer Privacy Act (CCPA) ,
California Privacy Protection Agency (CPPA) ,
Consumer Privacy Rights ,
Data Collection ,
Data Privacy ,
Enforcement ,
New Regulations ,
Personal Information ,
Privacy Policy ,
Professional Employer Organization ,
State Attorneys General