California Consumer Privacy Act (CCPA), Cybersecurity, Data Processors

New California Regs Will Impact Your AI and Privacy Policies: FAQs on Automated Decision-Making, Risk Assessments, and...

Fisher Phillips on 8/1/2025

California regulators unanimously approved a sweeping set of regulations on July 24 governing the use of automated decision-making technology (ADMT) and mandating risk assessments and cybersecurity audits for businesses...more

Kilpatrick Townsend’s U.S. Privacy Law Guide: Introduction to State Regulations

Kilpatrick on 3/16/2023

While there is no comprehensive, federal United States law governing privacy, there are several major state laws that are currently in place. To help our clients assess their compliance posture, we have published a quick,...more

[Webcast Transcript] The State of US Privacy Law: What to Expect in 2023 and Beyond

HaystackID on 10/12/2022

Editor’s Note: On September 29, 2022, HaystackID shared an educational webcast on the topic of US privacy law. As privacy continues to move to the forefront of not only information consideration but of business concern for...more

United States (U.S.) State Consumer Privacy Guide

Orrick, Herrington & Sutcliffe LLP on 3/15/2022

To help your company get its United States (U.S.) state privacy compliance program on the right track in 2022, Orrick's Cyber' Privacy & Data Innovation Group has analyzed the differences between key topics for the California...more

[Webinar] Navigating Privacy Rules in a Virtual World - June 17th, 10:00 am - 11:00 am PT

Vinson & Elkins LLP on 6/7/2021

The transformation to a work from home/work from anywhere model has become the new normal and even after the pandemic ends, many expect that model to continue. This accelerated transition has forced companies to embrace...more

Build A Data Inventory That Benefits Everyone

Ankura on 5/27/2021

A data inventory is the fundamental building block for an effective privacy program. In its simplest form, a data inventory can be thought of as a matrix which documents 1) what personal data is being collected by the...more

Virginia Is For Lovers . . . Of Data Privacy - UPDATED March 2021

Vinson & Elkins LLP on 3/9/2021

Update: The VCDPA was signed into law by Governor Ralph Northam without amendment on March 2, 2021. The VCDPA will become operative on January 1, 2023, and businesses should remain mindful of pending legislation in states...more

New DIFC Data Protection Law in Force - What You Need to Know

Akin Gump Strauss Hauer & Feld LLP on 10/2/2020

On October 1, 2020, the three-month grace period for businesses to comply with the Dubai International Financial Centre (DIFC) Data Protection Law (DIFC Law No. 5 of 2020) (“DPL 2020”) came to an end. Regulating the...more

Data Privacy Is Not a Law, It’s a Lifestyle

NAVEX on 2/10/2020

The words “hodgepodge” and “patchwork” are overused in the world of risk and compliance, but they’re certainly appropriate for describing the myriad data privacy regulations popping up around the world. In 2018, the world...more

NIST Releases a Standard for Privacy

Stoel Rives - Global Privacy & Security Blog® on 2/10/2020

As states fill the legal void for consumer privacy rights,[1] a new federal standard has emerged to assist companies with their compliance efforts. The National Institute of Standards and Technology (“NIST”) Privacy Framework...more

[Event] The California Consumer Privacy Act: What Do We Know and What Can We Expect? - March 3rd, Beverly Hills, CA

Carlton Fields on 2/3/2020

California's sweeping new privacy law - the California Consumer Privacy Act (CCPA) - went into effect on January 1, 2020. For companies subject to the CCPA, the law ushered in numerous obligations regarding personal...more

Data Privacy Bill Introduced in Washington State

Morgan Lewis on 1/29/2020

Washington may be the next state to enact its own data privacy law after a bill was introduced into the Washington State Senate earlier this month. Known as the Washington Privacy Act, the bill’s sponsor, Sen. Reuven Carlyle,...more

CCPA’s Top 5 Compliance Challenges

NAVEX on 1/13/2020

The California Consumer Privacy Act (CCPA) took effect on New Year’s Day. California is the first state in the union to create a data privacy law for its residents. Other states will follow soon. For compliance purposes,...more

Though CCPA Is Now Live, Questions Concerning Its Constitutionality Linger

McDermott Will & Schulte on 1/10/2020

As businesses have scrambled to obtain compliance with the California Consumer Privacy Act (CCPA) in recent months, questions surrounding its constitutionality have arisen. As a broad, sometimes unclear state law that imposes...more

CCPA Updates: California AG Releases Proposed Regulations

Snell & Wilmer on 12/2/2019

On October 11, 2019, California Attorney General Xavier Becerra signaled his enforcement priorities and released the long awaited proposed regulations under the California Consumer Privacy Act (“CCPA”), which was signed into...more

Countdown to the California Consumer Privacy Act: Key Components Every Business Should Be Aware Of

Schwabe, Williamson & Wyatt PC on 11/27/2019

On January 1, 2020, the California Consumer Privacy Act (“CCPA”) becomes effective, and businesses around the world will be responsible for handling the personal information of Californians in accordance with the requirements...more

CCPA Update: AdTech Options to Avoid a “Sale” and What Google Has to Say About It

Kelley Drye & Warren LLP on 11/25/2019

Last Monday, Google released its answer to the CCPA: a new “service provider” contract. Given Google’s widely used advertising and analytics technologies, Google’s new contract has the potential to influence how website...more

European Guidance On Data Controller And Processor Relationship Has Takeaways For GDPR, CCPA Compliance

Fox Rothschild LLP on 11/14/2019

The European Data Protection Supervisor (EDPS) has issued guidance on the concepts of data controller and processor for European Union organizations. Though it covers EU institutions, the guidance contains many concepts that...more

The Privacist - Volume 2

K&L Gates LLP on 11/11/2019

November will see several opportunities to discuss privacy matters in Europe and meet with The Privacist contributors within the K&L Gates’ platform, in connection with the International Association of Privacy Professionals...more

New CCPA Changes/Clarifications; Some Final, Some Contingent (2 Months to Go)

Womble Bond Dickinson on 10/24/2019

This is one of several client alerts in a series counting down to the CCPA effectuation date. Don’t wait to implement your California Consumer Privacy Act (“CCPA”) compliance mechanisms as changes to your operations may be...more

Analysis of Attorney General Regulations to CCPA – Part 3: Verification Procedures

Mintz - Privacy & Cybersecurity Viewpoints on 10/21/2019

The California Attorney General’s draft regulations specify how businesses verify consumers’ identities when they receive consumers’ data requests. Specifically, Section 999.323 requires a business (i) to verify consumers’...more

California Consumer Privacy Act Update: California Legislature Provides Relief for Businesses Processing Employee Data

Moore & Van Allen PLLC on 10/4/2019

The California Consumer Privacy Act (CCPA) imposes significant protections for California residents covered by the law, and significant burdens for companies required to comply with it. One area of concern is whether the CCPA...more

The California Consumer Privacy Act - What to Know—and What to Do

Katten Muchin Rosenman LLP on 4/17/2019

Didn’t I Already Do This for GDPR? If you already have a compliance program for the EU General Data Protection Regulation (GDPR), a lot of this may sound familiar. While the CCPA borrows a number of GDPR concepts and...more

California Consumer Privacy Act (CCPA) › Cybersecurity › Data Processors

"My best business intelligence, in one easy email…"