A U.S. District Court in the Northern District of Texas has vacated most of the HIPAA Privacy Rule to Support Reproductive Health Care Privacy (the “Rule”) in the case of Purl v. DHHS. The ruling, which has immediate nationwide…
more
/ Administrative Law, Health, Privacy
On June 24, 2025, the Connecticut governor signed into law SB 1295, a bill amending the Connecticut Data Protection Act (CTDPA). The bill will cause CTDPA to reach more entities, more data, and more data processing activities…
more
/ Privacy, Science, Computers, & Technology
Last month, the Federal Trade Commission issued guidance on the updated Safeguards Rule in the form of a set of Frequently Asked Questions for Automobile Dealers.
Although directed to auto dealers, the FAQs are a useful…
more
/ Antitrust & Trade Regulation, Commercial Law & Contracts, Consumer Protection, Finance & Banking, Privacy
Last week, the California Privacy Protection Agency (“Agency”) approved adoption of detailed new regulations under the CCPA that will include (among other notable components) a rule requiring annual cybersecurity audits for…
more
/ Consumer Protection, Privacy, Science, Computers, & Technology
On April 8, 2025, the Department of Justice’s new rule on Access to U.S. Sensitive Personal Data and Government-Related Data by Countries of Concern or Covered Persons took effect. The rule, referred to by DOJ as the Data…
more
/ Administrative Law, Business Organizations, International Law & Trade, Privacy
On April 17, 2025, the Connecticut Office of the Attorney General (“OAG”) released an Updated Enforcement Report Pursuant to the Connecticut Data Privacy Act (“Report”). The Report, the second issued by OAG (read our takeaways…
more
/ Consumer Protection, Health, Privacy
On March 25, 2025, Delaware enacted an amendment (the “Amendment”) to Section 220 of the Delaware General Corporation Law (“DGCL”). The Amendment clarifies what materials constitute a corporation’s “books and records.” It also…
more
/ Business Organizations, Commercial Law & Contracts
In a development that seems to have flown mostly under the radar this week, Virginia’s governor signed on Monday SB754, a bill passed by the state’s General Assembly that amends the state’s Consumer Protection Act to strictly…
more
/ Business Organizations, Commercial Law & Contracts, Consumer Protection, Health, Privacy
To commemorate the six months since the Oregon Consumer Privacy Act (“OCPA”) became effective, Oregon Attorney General Dan Rayfield released earlier this month a Report summarizing complaints received from consumers about…
more
/ Administrative Law, Consumer Protection, Privacy
On March 3, 2025, the Securities and Exchange Commission’s (the “SEC’s”) Division of Corporation Finance announced that it is expanding the accommodations available for issuers that submit draft registration statements for…
more
/ Finance & Banking, Mergers & Acquisitions, Securities Law
On March 21, 2025, the Financial Crimes Enforcement Network (“FinCEN”) issued an interim final rule under the Corporate Transparency Act. The revised rule changes the definition of “reporting company” to mean any entity that is…
more
/ Administrative Law, Business Organizations, Finance & Banking
US privacy lawyers have long used the “patchwork” metaphor to describe the US privacy legal landscape. Early signs suggest that metaphor may also soon apply to US AI regulation: Colorado adopted An Act Concerning Consumer…
more
/ Business Organizations, Consumer Protection, Privacy, Science, Computers, & Technology
On February 27, 2025, the Financial Crimes Enforcement Network (“FinCEN”) announced that it would not issue any fines or penalties or take any other enforcement actions against any companies based on a failure to file or update…
more
/ Administrative Law, Business Organizations, Finance & Banking
The New York State Department of Financial Services recently announced that it has entered into a consent order with PayPal, Inc. for violations of the NYDFS Cybersecurity Regulation. The consent order, under which PayPal has…
more
/ Consumer Protection, Finance & Banking, Privacy, Science, Computers, & Technology
After Washington adopted the My Health My Data Act (MHMDA) almost two years ago, we and others predicted that the law would lead to a wave of private lawsuits against companies operating in or adjacent to the health space…
more
/ Consumer Protection, Health, Privacy, Science, Computers, & Technology
