If your company uses a third-party tool to power your website chat function or AI-assisted customer service, the 9th Circuit Court of Appeals just delivered a ruling you should know about. On July 9, the court affirmed...more
7/22/2025
/ Aiding and Abetting ,
Appeals ,
Artificial Intelligence ,
CIPA ,
Consumer Privacy Rights ,
Data Privacy ,
Digital Communications ,
Privacy Laws ,
Privacy Policy ,
Summary Judgment ,
Third-Party Service Provider ,
Vendors ,
Websites ,
Wiretapping
New Jersey officials recently released proposed privacy regulations that would create several new compliance obligations for businesses above and beyond what existing state law and many other state laws require, meaning you...more
7/18/2025
/ Artificial Intelligence ,
Comment Period ,
Consent ,
Consumer Privacy Rights ,
Corporate Counsel ,
Customer-Loyalty Programs ,
Data Collection ,
Data Controller ,
Data Privacy ,
Data Processors ,
Data Use Policies ,
Disclosure Requirements ,
Duty of Care ,
Impact Assessments ,
New Jersey ,
Notice Requirements ,
Personal Data ,
Personally Identifiable Information ,
Privacy Policy ,
Proposed Regulation ,
Public Comment ,
Sensitive Personal Information
A California bill aimed at curbing the explosion of lawsuits filed against businesses using common website tools like cookies, pixels, and session replay software has stalled out in the 2025 legislative session, meaning your...more
7/8/2025
/ California ,
CIPA ,
Class Action ,
Consent ,
Consumer Privacy Rights ,
Cookies ,
Data Collection ,
Data Privacy ,
Privacy Policy ,
Proposed Legislation ,
State Privacy Laws ,
Web Tracking ,
Websites ,
Wiretapping
Healthline Media has agreed to pay $1.55 million to resolve allegations that it violated the California Consumer Privacy Act (CCPA) – which is the largest settlement to date under the state’s landmark privacy law. The...more
7/8/2025
/ California Consumer Privacy Act (CCPA) ,
CIPA ,
Consent ,
Consumer Privacy Rights ,
Cookie Banners ,
Cookies ,
Corporate Counsel ,
Data Collection ,
Data Privacy ,
Data-Sharing ,
Enforcement Actions ,
Opt-Outs ,
Personal Information ,
Privacy Policy ,
Settlement ,
State Attorneys General ,
Targeted Digital Advertising ,
Third-Party ,
Unfair Competition Law (UCL) ,
Web Tracking ,
Websites
Businesses just received some good news when a federal court dismissed a California Invasion of Privacy Act (CIPA) claim that aimed to expand the reach of the state’s wiretapping law to cover internet communications. The...more
4/23/2025
/ California ,
CIPA ,
Consumer Privacy Rights ,
Cookies ,
Data Collection ,
Data Privacy ,
Data-Sharing ,
Dismissals ,
Eavesdropping ,
Electronic Communications ,
Internet ,
Invasion of Privacy ,
Privacy Policy ,
Risk Mitigation ,
Summary Judgment ,
Third-Party ,
Website Owner Liability ,
Websites ,
Wiretapping
Oregon consumers submitted more than 100 privacy complaints to the state’s justice department within six months of the Oregon Consumer Privacy Act (OCPA) taking effect, and businesses subject to the new law need to take note....more
4/2/2025
/ Consumer Privacy Rights ,
Cure Periods ,
Data Collection ,
Data Controller ,
Data Privacy ,
Department of Justice (DOJ) ,
Enforcement Actions ,
New Legislation ,
Oregon ,
Personal Data ,
Privacy Policy ,
State Attorneys General ,
State Privacy Laws
Businesses operating in California that rely on location tracking – whether for fleet management, employee monitoring, logistics, or marketing – should pay close attention to a bill that would dramatically alter the legal...more
3/6/2025
/ California ,
Consent ,
Consumer Privacy Rights ,
Data Collection ,
Data Privacy ,
Data Retention ,
Data Use Policies ,
Data-Sharing ,
Employee Monitoring ,
Employee Tracking ,
GPS ,
IP Addresses ,
Location Data ,
Notice Requirements ,
Opt-In ,
Privacy Policy ,
State Privacy Laws ,
Websites
Comprehensive consumer privacy laws are rapidly expanding across the United States, significantly impacting PEOs. Currently, 19 states have enacted privacy laws, with eight already in effect and 11 set to take effect between...more
12/17/2024
/ Consumer Privacy Rights ,
Data Collection ,
Data Privacy ,
Data Protection ,
Data Retention ,
Data Subjects Rights ,
Data Use Policies ,
Data-Sharing ,
Personally Identifiable Information ,
Privacy Laws ,
Privacy Policy ,
Professional Employer Organization
It’s no longer good enough for your business to have a reactive approach to consumer privacy – you need a proactive strategy to manage compliance, foster consumer trust, and stay competitive in this modern era. While many...more
11/13/2024
/ Consumer Privacy Rights ,
Cybersecurity ,
Data Breach ,
Data Collection ,
Data Deletion ,
Data Privacy ,
Data Processors ,
Data Protection ,
Data Security ,
Data Subject Access Requests ,
Data-Sharing ,
Opt-Outs ,
Personally Identifiable Information ,
Privacy Laws ,
Privacy Policy ,
State Privacy Laws ,
Third-Party Risk ,
Vendor Contacts ,
Vendors
Businesses with a website beware: California regulators just warned that the law prohibits your website from making website users jump through hoops or otherwise confusing them as they try to exercise their privacy rights,...more
9/10/2024
/ California Consumer Privacy Act (CCPA) ,
California Privacy Protection Agency (CPPA) ,
Consent ,
Consumer Confusion ,
Consumer Privacy Rights ,
Cookies ,
Data Collection ,
Data Privacy ,
Data Use Policies ,
Personally Identifiable Information ,
Privacy Policy ,
Website Owner Liability ,
Websites
A recent board meeting of state officials revealed that the California agency responsible for overseeing the state’s landmark consumer privacy law received over 2,000 complaints for alleged violations in the past year alone –...more
8/2/2024
/ California Consumer Privacy Act (CCPA) ,
California Privacy Protection Agency (CPPA) ,
Consumer Privacy Rights ,
Data Collection ,
Data Privacy ,
Data Selling ,
Data-Sharing ,
Enforcement Priorities ,
Notice Requirements ,
Opt-Outs ,
Personally Identifiable Information ,
Privacy Policy ,
State Privacy Laws
The news that California regulators can immediately begin enforcing new data privacy regulations will have an outsized impact on the PEO community. A surprise February 9 decision from a state appeals court pressed...more
4/8/2024
/ California Consumer Privacy Act (CCPA) ,
California Privacy Protection Agency (CPPA) ,
Consumer Privacy Rights ,
Data Collection ,
Data Privacy ,
Enforcement ,
New Regulations ,
Personal Information ,
Privacy Policy ,
Professional Employer Organization ,
State Attorneys General
A California appeals court just pressed fast-forward and ruled that the state can immediately begin enforcing new regulations governing the state’s cornerstone data privacy law instead of waiting until late next month. This...more
2/13/2024
/ California Consumer Privacy Act (CCPA) ,
Consumer Privacy Rights ,
Cookie Banners ,
Cookies ,
Corporate Counsel ,
Data Collection ,
Data Privacy ,
Enforcement ,
New Regulations ,
Notice Requirements ,
Personally Identifiable Information ,
Privacy Policy
California employers, beware: the state’s top prosecutor just announced his office is conducting an investigative sweep of whether and how large California employers have complied with data privacy and consumer protection...more
7/20/2023
/ California ,
California Consumer Privacy Act (CCPA) ,
Consumer Privacy Rights ,
Data Collection ,
Data Privacy ,
Employee Privacy Rights ,
Employer Liability Issues ,
Enforcement Actions ,
Job Applicants ,
Notice Requirements ,
Personally Identifiable Information ,
Privacy Policy ,
State Attorneys General
Getting into compliance with the California Consumer Privacy Act (CCPA) can seem like an overwhelming task. After all, the law is comprised not only of a dense statute and detailed regulations, but the amendment effective...more
5/25/2023
/ California Consumer Privacy Act (CCPA) ,
Consumer Privacy Rights ,
Corporate Counsel ,
Data Collection ,
Data Privacy ,
Data Retention ,
Data Security ,
Data Subject Access Requests ,
Employee Training ,
Notice Requirements ,
Personal Information ,
Privacy Policy
Last week, Montana and Tennessee became the eighth and ninth states to pass comprehensive consumer privacy legislation. The bills were approved by the respective legislatures and are expected to soon be signed by governors of...more
Iowa will soon be the sixth state in the nation with a comprehensive consumer privacy law – but the good news for employers is that it does not apply to data collected in the employment context and does not include a private...more
3/21/2023
/ Consumer Privacy Rights ,
Corporate Counsel ,
Data Collection ,
Data Privacy ,
Exemptions ,
Notice Requirements ,
Opt-Outs ,
Penalties ,
Personal Data ,
Privacy Policy ,
Right to Delete ,
Right To Know ,
Right-To-Access ,
State Privacy Laws
The California Attorney General just announced an investigative sweep of mobile apps that allegedly fail to meet the requirements of state data privacy law, meaning businesses that conduct business through apps need to...more
Effective immediately, federal contractors will need to comply with privacy training rules intended to ensure that their workforces protect personally identifiable information. As of January 19, 2017, federal contractors will...more