California Consumer Privacy Act (CCPA), Data Processors, Personal Data

State-by-State Privacy Legislation Update: A Compliance Roadmap for 2025

Arnall Golden Gregory LLP on 6/12/2025

States have been active in passing and enacting comprehensive consumer privacy laws in the absence of a federal statute. To date, 19 states have passed such laws, starting with the California Consumer Privacy Act (“CCPA”),...more

Navigating Privacy and Data Security Challenges in the Hospitality Industry: Key Considerations for Hotel Management Agreements

Goodwin on 9/25/2024

Over the past decade, the hospitality industry has rapidly adopted intensive technologies to meet the rising expectations of guests, personalize each guest’s experience, and cultivate and enhance customer loyalty. Access to...more

Iowa Becomes the Sixth U.S. State to Pass a Comprehensive Consumer Privacy Law

BakerHostetler on 3/31/2023

On March 29, 2023, Iowa became the sixth U.S. state to pass comprehensive consumer privacy legislation. The new law will go into effect on January 1, 2025. Iowa’s privacy law bears substantial similarity to the Virginia,...more

Iowa Set to Become Sixth U.S. State to Enact an Omnibus Data Protection Law While Federal Legislation Stagnates

Benesch on 3/30/2023

Like recent new U.S. state data protection laws, the Iowa law creates a “controller” and “processor” regime modeled more so after EU law than the first U.S. state data protection law in California—the CCPA. On March 15,...more

Comparison of the CCPA & CPRA with Pending 2021 Comprehensive Federal Privacy Legislation - H.R. 1816

BCLP on 12/31/2021

In the last year, we continued to see a shift in the privacy landscape of the United States, including the passage of comprehensive privacy legislation in both Virginia and Colorado, while other states still have bills under...more

Amendments to Hong Kong Data Protection Law to Regulate Data Processors - Part 4 of 6

BCLP on 7/15/2021

In the upcoming round of amendments to the PDPO, Hong Kong likely will follow the footsteps of overseas regulatory authorities to introduce measures that regulate data processors directly. This post is the fourth in the...more

Colorado’s new privacy law: How it stacks up against other US privacy laws

Eversheds Sutherland (US) LLP on 7/15/2021

There are many similarities between the Colorado Privacy Act (ColoPA), the California Consumer Privacy Act (CCPA), the California Privacy Rights Act (CPRA), the Virginia Consumer Data privacy Act (VCDPA), and Europe’s GDPR,...more

Slippery Slopes? Colorado Joins The Fray With The Colorado Privacy Act

Vinson & Elkins LLP on 6/18/2021

Colorado is set to become the third U.S. state to pass comprehensive data privacy legislation. Following a number of revisions, Senate Bill 190, also referred to as the Colorado Privacy Act (“CPA”), passed the Colorado House...more

Virginia's New Data Privacy Law

Woods Rogers on 5/13/2021

Thank you for tuning in to Van Black Law’s Technology Roundup where we discuss the latest data and technology issues affecting your business. Today we’re going to discuss some of the major provisions of Virginia’s...more

Comprehensive Data Privacy Law Brings Big Changes to Virginia, but Excludes Employee Personal Data

Ogletree, Deakins, Nash, Smoak & Stewart,... on 4/7/2021

Virginia has joined California as the second state to enact a comprehensive data privacy law. On March 2, 2021, Virginia Governor Ralph Northam signed the Virginia Consumer Data Protection Act (VCDPA) into law....more

The Labyrinth Expands: Virginia Passes New Privacy Law with Additional Obligations for Businesses

Dorsey & Whitney LLP on 3/15/2021

As businesses continue to weave their way through the labyrinth of privacy laws, from the EU’s General Data Protection Regulation to the California Consumer Privacy Act to the numerous other sectoral and international privacy...more

“Data Knows No Borders”: Virginia’s Privacy Law Won’t Give Businesses Relief From The CCPA, But Consumers Nationwide Get...

Goodwin on 3/9/2021

On March 2, 2021, Virginia enacted the Consumer Data Protection Act (“VCDPA”). The VCDPA will become effective January 1, 2023. The VCDPA shares its roots with the California Consumer Protection Act (“CCPA”) and the recently...more

Virginia Is For Lovers . . . Of Data Privacy - UPDATED March 2021

Vinson & Elkins LLP on 3/9/2021

Update: The VCDPA was signed into law by Governor Ralph Northam without amendment on March 2, 2021. The VCDPA will become operative on January 1, 2023, and businesses should remain mindful of pending legislation in states...more

Silver Medal in Consumer Privacy Race Goes to … Virginia?

Holland & Knight LLP on 2/5/2021

Virginia seemingly came out of nowhere on the consumer privacy front and now appears to be just days away from becoming the second state in the nation, behind California, to pass comprehensive consumer privacy legislation....more

Virginia House Passes Consumer Data Protection Act

Husch Blackwell LLP on 2/2/2021

Keypoint: Virginia moves closer to enacting consumer privacy legislation. On January 29, 2021, the Virginia House of Delegates passed HB2307, the Virginia Consumer Data Protection Act (Act) in an 89 to 9 vote. The Act now...more

Recent Developments in Data Privacy Laws Impacting U.S. Companies

Miller Canfield on 11/19/2020

American companies should take notice of some important developments in data privacy laws in the U.S. and in the European Union. California Privacy Rights Act - On November 3, 2020, California voters approved the...more

New DIFC Data Protection Law in Force - What You Need to Know

Akin Gump Strauss Hauer & Feld LLP on 10/2/2020

On October 1, 2020, the three-month grace period for businesses to comply with the Dubai International Financial Centre (DIFC) Data Protection Law (DIFC Law No. 5 of 2020) (“DPL 2020”) came to an end. Regulating the...more

GDPR and the Uniform Foreign Country Money Judgments Recognition Act

Hinshaw & Culbertson LLP on 9/3/2020

You are an American company. While you sell product or otherwise interact with Europe, and thereby collect personal information about European residents, you have no assets or facilities on that continent. Nonetheless, you...more

Data Privacy Bill Introduced in Washington State

Morgan Lewis on 1/29/2020

Washington may be the next state to enact its own data privacy law after a bill was introduced into the Washington State Senate earlier this month. Known as the Washington Privacy Act, the bill’s sponsor, Sen. Reuven Carlyle,...more

The CCPA for the Land Title Industry: Who Does the CCPA Apply To?

Carlton Fields on 1/15/2020

In this program, Elizabeth Reilly from Fidelity National Financial joins Carlton Fields’ attorneys Jack Clabby, Joe Swanson, and Steve Blickensderfer as they answer real questions from real members of the American Land Title...more

Though CCPA Is Now Live, Questions Concerning Its Constitutionality Linger

McDermott Will & Emery on 1/10/2020

As businesses have scrambled to obtain compliance with the California Consumer Privacy Act (CCPA) in recent months, questions surrounding its constitutionality have arisen. As a broad, sometimes unclear state law that imposes...more

Is A Federal Privacy Law In The Cards for 2020?

Akerman LLP - Health Law Rx on 12/12/2019

In May of 2018, the European Union enacted the General Data Protection Rules, or GDPR, a legal framework that outlines not only how companies may collect and process personal information of EU residents, but how that data is...more

Countdown to the California Consumer Privacy Act: Key Components Every Business Should Be Aware Of

Schwabe, Williamson & Wyatt PC on 11/27/2019

On January 1, 2020, the California Consumer Privacy Act (“CCPA”) becomes effective, and businesses around the world will be responsible for handling the personal information of Californians in accordance with the requirements...more

European Guidance On Data Controller And Processor Relationship Has Takeaways For GDPR, CCPA Compliance

Fox Rothschild LLP on 11/14/2019

The European Data Protection Supervisor (EDPS) has issued guidance on the concepts of data controller and processor for European Union organizations. Though it covers EU institutions, the guidance contains many concepts that...more

The Privacist - Volume 2

K&L Gates LLP on 11/11/2019

November will see several opportunities to discuss privacy matters in Europe and meet with The Privacist contributors within the K&L Gates’ platform, in connection with the International Association of Privacy Professionals...more

California Consumer Privacy Act (CCPA) › Data Processors › Personal Data

"My best business intelligence, in one easy email…"