California Consumer Privacy Act (CCPA), Data Security, Corporate Counsel

CPPA Underscores That Businesses Own CCPA Compliance – Even When Privacy Management Tools Fail

Seyfarth Shaw LLP on 5/13/2025

The California Privacy Protection Agency (“CPPA”) has made it abundantly clear: privacy compliance isn’t just about publishing the right disclosures – it’s about whether your systems actually work. On May 6, the agency fined...more

CCPA Class Actions Without a Data Breach; Courts Signal a New Litigation Frontier.

Baker Botts L.L.P. on 5/1/2025

Two recent decisions from the Northern District of California—Shah v. Capital One Financial Corp., No. 24-cv-05985-TLT, 2025 WL 714252 (N.D. Cal. Mar. 3, 2025), and M.G. v. Therapymatch, Inc., No. 23-cv-04422-AMO, 2024 WL...more

Year in Review: 2024 CCPA Litigation Trends

WilmerHale on 1/29/2025

While the California Consumer Privacy Act (CCPA) is most known for its extensive privacy compliance obligations, the law also provides for a limited private right of action for certain security-related breaches....more

Disclosure of Data Through Website Cookies May Be a Data Breach – What A Recent Court Ruling Means for Healthcare Businesses

Fisher Phillips on 8/14/2024

A California federal court recently ruled that disclosure of certain data collected through website cookies that may qualify as health information could trigger a data breach under the California Consumer Privacy Act (CCPA) –...more

Ten Days Until the Texas Data Privacy and Security Act Goes Live & AG’s Office Signals “Aggressive Enforcement”

Jackson Lewis P.C. on 6/21/2024

With the Texas Data Privacy and Security Act (TDPSA) on the verge of taking effect on July 1, 2024, the State’s Attorney General, Ken Paxton, recently launched an initiative for “aggressive enforcement of Texas privacy laws.”...more

CCPA Disclosure Requirements Emphasized by California AG’s Settlement With DoorDash‎

Troutman Pepper Locke on 4/5/2024

Enforcement of the California Consumer Privacy Act (“CCPA”) continues to heat up with California Attorney General Rob Bonta’s office announcing its second public enforcement action, this time against delivery service provider...more

Workplace Law Forecast 2024 - Your workplace law recap for 2023 and predictions for 2024 to help you prepare for the coming year.

Fisher Phillips on 12/4/2023

When I reflect on the relationship that our firm has with our clients, I’m most proud of the fact that you can always count on us. That often means defending complex litigation, steering you through regulatory threats,...more

CPPA Posts Draft Rules on Cybersecurity Audits and Risk Assessments - Significant New CCPA Compliance Requirements Likely on the...

Wilson Sonsini Goodrich & Rosati on 9/5/2023

On August 29, 2023, the California Privacy Protection Agency (CPPA) posted discussion drafts of its forthcoming regulations on cybersecurity audits and risk assessments as part of the materials for its September 8, 2023,...more

7 Steps to Comply with the CCPA

Fisher Phillips on 5/25/2023

Getting into compliance with the California Consumer Privacy Act (CCPA) can seem like an overwhelming task. After all, the law is comprised not only of a dense statute and detailed regulations, but the amendment effective...more

Mintz May Madness: Tennessee’s Information Protection Act Gets Us Thinking About NIST(y) Safe Harbors

Mintz - Privacy & Cybersecurity Viewpoints on 5/12/2023

The Volunteer State became the eighth state to enact a comprehensive data privacy law after Gov. Bill Lee (R) signed the Tennessee Information Protection Act (“TIPA”) into law yesterday, May 11. Tennessee joins a growing...more

Why “Secondary Uses” of Data Should be your Primary Concern: New Consent Requirements under California’s CCPA and Colorado’s CPA

Kilpatrick on 3/20/2023

One internet search of the CCPA or the CPA reveals a plethora of articles outlining standard data protection requirements under those laws, from privacy notice requirements to new mandatory contractual provisions. But the...more

Data Privacy Laws Zeroing in on Employees’ Rights

Bond Schoeneck & King PLLC on 1/24/2023

Data privacy continues to be a primary focus of several recently enacted or amended state laws. Employees’ right to privacy is of particular interest in light of the various ways personnel can maintain connectivity to the...more

The BR Privacy & Security Download: January 2023

Blank Rome LLP on 1/13/2023

What We’re Watching in 2023 - Happy New Year from the BR Data Privacy and Security Download! 2022 was a busy year for data privacy and security. State and federal regulatory agencies flexed their enforcement muscle, we...more

California Privacy Protection Agency Issues Notice of Modifications to Proposed CPRA Regulations

Alston & Bird on 11/9/2022

On November 3, 2022, the California Privacy Protection Agency (“CPPA”) issued a notice of modifications to the Proposed Regulations implementing the California Privacy Rights Act (“CPRA”). These proposed modifications come in...more

CPRA Rule Revisions Unlikely to be Finalized in 2022

Kelley Drye & Warren LLP on 11/7/2022

Just two months before the effective date (January 1, 2023) of the California Privacy Rights Act (“CPRA”), the California Privacy Protection Agency (“CPPA”) Board met on October 28 and 29 to discuss revisions to the agency’s...more

The Current State of General State Privacy Laws

Stoel Rives - Global Privacy & Security Blog® on 10/24/2022

It’s a great time to be a privacy attorney. On October 17, 2022, the California Privacy Protection Agency (CPPA) released the next draft of the regulations under the California Privacy Rights Act of 2020 (CPRA) as well as a...more

California Consumer Privacy Act's Employee and B2B Exemptions to Expire on January 1, 2023

Katten Muchin Rosenman LLP on 9/21/2022

The California Consumer Privacy Act (CCPA) is California's groundbreaking legislation that seeks to give California consumers certain rights over how a business handles "personal information" collected about its consumers. On...more

New U.S. State Privacy Laws: 10 Ways Companies Should Prepare

Orrick, Herrington & Sutcliffe LLP on 9/16/2022

Looking towards 2023, organizations should be mindful of the effective dates of several new state privacy laws in the U.S. Companies should review the new laws to evaluate their applicability and identify potential...more

No More Exceptions: What to Do When the California Privacy Exemptions for Employee, Applicant and B2B Data Expire on January 1,...

Epstein Becker & Green on 9/9/2022

California’s Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA) give consumers substantial rights regarding the disclosure and use of their personal information collected by businesses subject to the...more

First CCPA Enforcement Action Settlement and Sunsetting of Employee Data Exemptions Signal Significant Compliance Challenges Ahead

Blank Rome LLP on 9/9/2022

In a busy couple of weeks for California privacy, regulatory priorities came into sharp focus when California Attorney General Rob Bonta (“Attorney General”) announced the first settlement of a California Consumer Privacy Act...more

California Privacy Rights Act: Big Changes For Employers With Employees in California In 2023

Seyfarth Shaw LLP on 9/8/2022

Seyfarth Synopsis: Employers need to be aware of the significant changes that are on the horizon when the California Privacy Rights Act (CPRA) becomes operative on January 1, 2023....more

Not So Pretty: Top Takeaways From First CCPA Settlement With Sephora and Updated Enforcement Case Examples

Troutman Pepper Locke on 9/1/2022

With the notice and cure set to expire on January 1, 2023, California Attorney General Rob Bonta (CA AG) provided a glimpse at what to expect with its first settlement of alleged violations of the California Consumer Privacy...more

CCPA Financial Penalties: Four Takeaways from the California AG’s $1.2 Million Enforcement Action that Should Inform Your...

Kilpatrick on 9/1/2022

We warned you last summer that California Consumer Privacy Act (“CCPA”) enforcement was heating up! The California Attorney General (“CAG”) announced a settlement with cosmetics retailer, Sephora. That, among other penalties,...more

California Attorney General Announces First Public CCPA Enforcement Action

Husch Blackwell LLP on 8/25/2022

Keypoint: The Attorney General’s announcement of a $1.2 million penalty sends a “strong message” to companies to come into compliance. On August 24, 2022, California Attorney General Bonta announced the first public...more

Preparing for Expanded Consumer Rights Requests Under the CPRA

Kelley Drye & Warren LLP on 7/15/2022

With the clock now running on the comment period for the California Privacy Protection Agency’s (CPPA) Draft Regulations to implement the CPRA – comments are due on August 23 – one of the items on many businesses’ CPRA...more

California Consumer Privacy Act (CCPA) › Data Security › Corporate Counsel

"My best business intelligence, in one easy email…"