California Consumer Privacy Act (CCPA), Data Protection, Opt-Outs

State Privacy Enforcement Accelerates, With California Targeting Substantive Compliance and Connecticut Bringing Its First Action

Skadden, Arps, Slate, Meagher & Flom LLP on 7/22/2025

As federal privacy enforcement shows signs of slowing, states are aggressively stepping in to fill the void. On July 1, 2025, the California attorney general (AG) announced a $1.55 million settlement with Healthline Media,...more

California AG focuses on contracts, opt-outs, and consumer disclosures in Healthline settlement

Kelley Drye & Warren LLP on 7/17/2025

On July 1, 2025, California Attorney General Rob Bonta announced a $1.55 million proposed settlement order with Healthline Media – the largest California Consumer Privacy Act (CCPA) settlement to date. The proposed settlement...more

U.S. State Privacy Regulators Create Consortium as Enforcement Trends Emerge

Benesch on 5/20/2025

Trends and areas of focus under U.S. state data protection laws emerge as U.S. states with data protection laws in place increase enforcement actions and coordination....more

CPPA Underscores That Businesses Own CCPA Compliance – Even When Privacy Management Tools Fail

Seyfarth Shaw LLP on 5/13/2025

The California Privacy Protection Agency (“CPPA”) has made it abundantly clear: privacy compliance isn’t just about publishing the right disclosures – it’s about whether your systems actually work. On May 6, the agency fined...more

New CCPA Regs: Part 2: Consumer Requests

Fox Rothschild LLP on 5/8/2025

For the second installment of this series on the new California Consumer Privacy Act (CCPA) Regs, we are looking at consumer request processes. One major eye opener: Tracker opt-outs must be immediate and you may not be...more

Get to Know the Global Privacy Control (GPC): State Attorneys General Remind Consumers of Their Right to Opt-Out of the Sale or...

Nelson Mullins Riley & Scarborough LLP on 2/21/2025

Introduction - Most businesses are aware of historical restrictions or limitations on selling personal information to third parties for monetary consideration....more

CPPA Enforcement Division Issues First Enforcement Advisory on Data Minimization

White & Case LLP on 5/9/2024

On April 2, 2024, the California Privacy Protection Agency's (CPPA) Enforcement Division issued its first enforcement advisory, titled "Applying Data Minimization to Consumer Requests," to further emphasize the importance of...more

Maryland Legislature Passes Consumer Data Privacy Bill

Husch Blackwell LLP on 4/8/2024

Keypoint: Maryland’s bill diverges from other Washington Privacy Act variants passed to date with unique data minimization, sensitive data, minor’s data privacy, and unlawful discrimination provisions (among others)....more

No Money, Mo’ Problems: DoorDash CCPA Enforcement Action Emphasizes Personal Information “Sales” Aren’t All About the Benjamins

Wyrick Robbins Yates & Ponton LLP on 3/13/2024

The California Attorney General (“AG”) recently delivered (pun very much intended) a public CCPA enforcement action against DoorDash, its second following the 2022 settlement with Sephora. The DoorDash action stems from a...more

California Attorney General investigates streaming services for CCPA violations

Orrick, Herrington & Sutcliffe LLP on 2/5/2024

On January 26, California State Attorney General Rob Bonta announced an investigative initiative by issuing letters to businesses operating streaming apps and devices, accusing them of non-compliance with the California...more

California Attorney General Announces Investigation of Streaming Services for CCPA Violations

Robinson+Cole Data Privacy + Security Insider on 2/2/2024

Last week, California Attorney General Rob Bonta announced a new enforcement focus on streaming apps’ failure to comply with the California Consumer Privacy Act (CCPA). This investigation will examine whether streaming...more

New Jersey Enacts Comprehensive Privacy Law

WilmerHale on 1/18/2024

On January 8, 2024, the New Jersey Assembly and Senate passed Senate Bill 332 (S. 332, or the “Act”), and it was signed into law by Governor Phil Murphy on January 16. This makes New Jersey the first state to enact a...more

New Jersey Adopts a Comprehensive Data Protection Law: What You Need to Know and Do Now

Lowenstein Sandler LLP on 1/15/2024

On January 8, 2024, after multiple amendments, the New Jersey Legislature passed a comprehensive data protection bill (SB 332). Gov. Philip Murphy has 45 days to execute SB 332, making New Jersey the 13th state to adopt...more

CPPA Votes in Favor of Web Browser

Robinson+Cole Data Privacy + Security Insider on 12/22/2023

Last week, the California Privacy Protection Agency (CPPA) voted in favor of a legislative proposal that would require web browsers to include a feature that allows web users the ability to exercise their privacy rights under...more

Colorado AG Releases Personal Data Universal Opt-Out List for Public Comment

Troutman Pepper Locke on 12/5/2023

Similar to other state consumer data protection acts enacted over the past two years, the Colorado Privacy Act (CPA) allows Colorado consumers to opt out of the sale of personal data and the processing of such data for...more

California Enacts One-Stop Mechanism for Data Broker Deletion Requests

Wilson Sonsini Goodrich & Rosati on 10/26/2023

California residents may soon be able to click “backspace” on data brokers doing business in the state. On October 10, 2023, California Governor Gavin Newsom signed Senate Bill 362, colloquially known as the Delete Act, into...more

Should You Wait to Comply with Updated CCPA Regulations Now that Enforcement Is Delayed? 6 Top Questions to Consider

Fisher Phillips on 8/14/2023

The first half of 2023 has been eventful for businesses subject to the California Consumer Privacy Act (CCPA), and the whirlwind of new developments may have left you confused about your current and pending obligations. In...more

With July 1st in view, Google updates CCPA contract terms

Kelley Drye & Warren LLP on 5/24/2023

Google updated its privacy terms earlier this month, shifting away from offering many of its advertising services on a “service provider” basis. With the change, Google states that its Customer Match, Audience Partner API,...more

Mintz May Madness: Tennessee’s Information Protection Act Gets Us Thinking About NIST(y) Safe Harbors

Mintz - Privacy & Cybersecurity Viewpoints on 5/12/2023

The Volunteer State became the eighth state to enact a comprehensive data privacy law after Gov. Bill Lee (R) signed the Tennessee Information Protection Act (“TIPA”) into law yesterday, May 11. Tennessee joins a growing...more

Silver Lining for Cos. in Proposed Calif. Privacy Law Changes

Troutman Pepper Locke on 2/23/2023

On Oct. 17 and again on Nov. 3, the California Privacy Protection Agency, or CPPA, modified the text of the proposed regulations implementing the California Privacy Rights Act, or CPRA. Originally published in Law360 on...more

CPPA Issues Final Statement of Reasons for Amended CCPA Regulations

Fox Rothschild LLP on 2/3/2023

The California Privacy Protection Agency (CPPA) has issued a Final Statement of Reasons for amended California Consumer Privacy (CCPA) regulations. Key Points: The amendments were “necessary” (used 135 times), just...more

California AG Announces Investigative Sweep of Mobile Applications for CCPA Compliance

WilmerHale on 2/1/2023

In a press release on January 27, 2023, California Attorney General (“California AG”) Rob Bonta announced an investigative sweep focused on mobile applications’ compliance under the California Consumer Privacy Act (CCPA),...more

Universal Opt-Out/Global Privacy Control: Preparing for the New Online World

Dorsey & Whitney LLP on 12/7/2022

2022 has been a whirlwind year for cybersecurity, data, and privacy counsel who are navigating an expanding regulatory landscape and unique sets of legal requirements from numerous jurisdictions. This trend is likely to...more

CPRA Draft Regulations – Next Round(s)

Bass, Berry & Sims PLC on 11/10/2022

It has been a bustling fall for the California Privacy Protection Agency (CPPA or Agency). In the spirit of the upcoming holiday season, the Agency gifted us not one but two rounds of proposed modifications to the regulations...more

California Privacy Law Nears Effective Date; Businesses Risk Million Dollar Penalties

Lerman Senter PLLC on 11/9/2022

The Consumer Privacy Rights Act (CPRA), which amended the California Consumer Privacy Act (CCPA), becomes fully effective on January 1, 2023. Businesses should review the new law and recent enforcement actions before the law...more

California Consumer Privacy Act (CCPA) › Data Protection › Opt-Outs

"My best business intelligence, in one easy email…"