California Consumer Privacy Act (CCPA), Financial Institutions

Wiley Consumer Protection Download (July 15, 2025)

Wiley Rein LLP on 7/16/2025

FTC Sends Warning Letters Regarding Potential Noncompliance With “Made in USA” Requirements. On July 8, the FTC sent letters to a flagpole retailer, footwear maker, football equipment company, and personal care products...more

Pixel Litigation Risk at Financial Institutions

Ropes & Gray LLP on 7/14/2025

An increasingly aggressive plaintiffs’ bar has brought purported class action suits based on the nearly ubiquitous use of tracking technologies used for website analytics. Although any actual harm to the plaintiffs is...more

Where is the GLBA Entity-Level Exemption? Two More State Privacy Laws Now Apply to Financial Institutions

Orrick, Herrington & Sutcliffe LLP on 7/8/2025

In May, Montana enacted Senate Bill 297, which amends the Montana Consumer Data Privacy Act (MCDPA) to eliminate the broad exemption for financial institutions subject to the Gramm-Leach-Bliley Act (GLBA). Connecticut...more

Cybersecurity & Data Privacy Issues in Fund Finance

Akin Gump Strauss Hauer & Feld LLP on 10/10/2024

During the course of any lending transaction, lenders will conduct a due diligence review of the borrower, including reviewing any relevant “know-your-customer” information. In the context of a fund finance transaction, this...more

CPPA’s First Enforcement Advisory Focuses on Applying Data Minimization Principles to Consumer Requests

Skadden, Arps, Slate, Meagher & Flom LLP on 4/19/2024

On April 2, 2024, the Enforcement Division of the California Privacy Protection Agency (CPPA) issued Enforcement Advisory No. 2024-01. This first-ever enforcement advisory focuses on promoting compliance with California...more

Troutman Pepper Weekly Consumer Financial Services Newsletter - February 2024

Troutman Pepper Locke on 2/7/2024

To keep you informed of recent activities, below are several of the most significant federal and state events that have influenced the Consumer Financial Services industry over the past week...more

More Privacy, Please - September/October 2023

Troutman Pepper Locke on 11/28/2023

Editor’s Note: The FTC continues to crack down on privacy and cybersecurity, including issuing a new warning to tax preparation companies and entering into a consent decree with 1Health.io. VPPA and BIPA litigation continues...more

Troutman Pepper Weekly Consumer Financial Services Newsletter - July 2023 # 4

Troutman Pepper Locke on 7/26/2023

To help you keep abreast of relevant activities, below find a breakdown of some of the biggest events at the federal and state levels to impact the Consumer Finance Services industry this past week...more

Florida Governor Signs Data Privacy Law Focused on Children, Search Engines and Billion Dollar Businesses

Mintz - Privacy & Cybersecurity Viewpoints on 6/12/2023

Florida has joined the growing list of states enacting comprehensive privacy laws. Governor Ron DeSantis (R) signed the Florida Digital Bill of Rights (“FDBR”) into law on June 6th. How does it compare?...more

What Non-Financial Institutions Need to Know About Gramm-Leach-Bliley

Society of Corporate Compliance and Ethics... on 1/19/2023

The Gramm-Leach-Bliley Act (GLBA) is typically referred to in the context of financial institutions. It requires offerers of consumer financial products to explain how they share information and protect sensitive data. It’s...more

Privacy, Data and Cybersecurity Quick Bytes | Issue 1

Katten Muchin Rosenman LLP on 1/18/2023

Welcome to the inaugural issue of Katten’s Privacy, Data and Cybersecurity Quick Bytes. Each month, Quick Bytes will highlight the latest news and legal developments involving privacy, data and cybersecurity issues across the...more

Preparing for Cyberattacks and Limiting Liability

Miller Canfield on 3/18/2022

The U.S. government and military experts have been warning U.S. companies that Russia may launch significant cyberattacks against critical infrastructure, financial institutions and businesses in retaliation for the sanctions...more

New Rules, Enforcement Actions Make Financial Institutions’ Planning for Cyberattacks Even More Imperative

Skadden, Arps, Slate, Meagher & Flom LLP on 1/25/2022

Takeaways - Implementing strong cybersecurity practices helps companies prepare for future regulatory requirements. Incident-response plans must enable financial institutions to give timely and accurate notifications...more

Expanded Safeguards Rule Applicable to More Financial Institutions; Gives More Specificity on Security Requirements

Morgan Lewis on 11/22/2021

The Federal Trade Commission recently finalized a long-discussed update to its cybersecurity Safeguards Rule that includes more specific criteria for what financial institutions must implement as part of their information...more

California Attorney General Focuses on Targeted Advertising and Disclosures in CCPA Enforcement

Hudson Cook, LLP on 10/1/2021

The Office of the Attorney General of California began enforcing the California Consumer Privacy Act ("CCPA") more than a year ago and recently released a set of enforcement case examples it has pursued against businesses....more

Financial Institutions Must Assess Whether They Must Comply with CCPA Requirements for Financial Incentive Programs

Ballard Spahr LLP on 8/23/2021

Last month, California Attorney General Rob Bonta released a summary of his office’s enforcement activity under the California Consumer Privacy Act (CCPA). Although the summary did not include company names, the summary...more

And Then There Were Three: Colorado Passes Privacy Law, Effective July 2023

Sheppard Mullin Richter & Hampton LLP on 7/14/2021

Colorado recently joined Virginia and California in passing a more comprehensive privacy law. The Colorado Privacy Act (CPA) will go into effect July 1, 2023. This is six months after Virginia’s law (CDPA) and California’s...more

New Trends in Financial Compliance: How Technology Supports Adoption

Mitratech Holdings, Inc on 6/4/2021

After a period of relative calm, the world of financial services compliance is gearing up for more change; some regulatory, some economic, some operational. The issue of Operational Resilience has now fully matured, with...more

New York’s DFS Publishes A Cyber Insurance Risk Framework

Husch Blackwell LLP on 3/9/2021

Keypoint: New York’s Division of Financial Services (DFS) now requires Property and Casualty Insurers writing cyber insurance to comply with the Division’s Cyber Insurance Risk Framework to manage their risk. In her...more

Governor Cuomo Proposes Greater Data Privacy Protections and BankTech Assistance for New York Financial Institutions

Hinshaw & Culbertson - Privacy, Cyber & AI... on 1/29/2021

Happy Data Privacy Day! Today we report on New York Governor Andrew Cuomo's recent State of the State address, in which he announced the state's 2021 policy agenda. Included in the Governor's agenda are enhanced consumer...more

Privacy & Cybersecurity Update - October 2020

Skadden, Arps, Slate, Meagher & Flom LLP on 11/3/2020

In this month's edition of our Privacy & Cybersecurity Update, we examine the U.S. Treasury's advisories regarding the role of financial intermediaries in ransomware payments, a ruling by the Israeli data protection authority...more

Financial Services Report – Fall 2020

Morrison & Foerster LLP on 10/16/2020

We join the nation in mourning the passing of Supreme Court Justice Ruth Bader Ginsburg. Over her 20-year career before appointment to the D.C. circuit court, Justice Ginsburg fought for equal rights in the workplace, among...more

The CCPA Is Here: What Financial Institutions Need to Know about the California Consumer Privacy Act

Blank Rome LLP on 10/12/2020

As of January 1, 2020, the California Consumer Privacy Act of 2018 (CCPA) is now the law of the land, having gone into effect at the beginning of this year. One of the more complex issues concerning the CCPA pertains to the...more

Data Privacy + Cybersecurity Insider - October 2020

Robinson & Cole LLP on 10/5/2020

CYBERSECURITY - OFAC Issues Advisory on Sanctions for Facilitating Ransomware Payments - On October 1, 2020, the U.S. Department of the Treasury’s Office of Foreign Assets Control (OFAC) issued an advisory “to...more

Has the financial services industry adopted the “Do Not Sell My Personal Information” link?

BCLP on 6/24/2020

No. 97.62% of banks and financial service companies (collectively “banks”) within the Fortune 500 do not include a “Do Not Sell My Personal Information” link on their homepage or in their privacy notice....more

California Consumer Privacy Act (CCPA) › Financial Institutions

"My best business intelligence, in one easy email…"