California Consumer Privacy Act (CCPA), Gramm-Leach-Blilely Act

Pixel Litigation Risk at Financial Institutions

Ropes & Gray LLP on 7/14/2025

An increasingly aggressive plaintiffs’ bar has brought purported class action suits based on the nearly ubiquitous use of tracking technologies used for website analytics. Although any actual harm to the plaintiffs is...more

Where is the GLBA Entity-Level Exemption? Two More State Privacy Laws Now Apply to Financial Institutions

Orrick, Herrington & Sutcliffe LLP on 7/8/2025

In May, Montana enacted Senate Bill 297, which amends the Montana Consumer Data Privacy Act (MCDPA) to eliminate the broad exemption for financial institutions subject to the Gramm-Leach-Bliley Act (GLBA). Connecticut...more

California Regulator Signals New Era in Privacy Enforcement

Hudson Cook, LLP on 5/1/2025

In March, 2025, the California Privacy Protection Agency announced a consent order with an auto manufacturer alleging multiple violations of the California Consumer Privacy Act and imposing a $632,500 fine for alleged failure...more

California Privacy Protection Agency Clarifies Application of the CCPA to Insurance Companies

Ogletree, Deakins, Nash, Smoak & Stewart,... on 2/26/2025

The California Privacy Protection Agency board voted on November 8, 2024, to advance a proposed rulemaking package for, among other things, a proposed regulation to clarify the application of the California Consumer Privacy...more

Are Employees Receiving Regular Data Protection Training? Are They AI Literate?

Jackson Lewis P.C. on 2/19/2025

Employee security awareness training is a best practice and a “reasonable safeguard” for protecting the privacy and security of an organization’s sensitive data. The list of data privacy and cybersecurity laws mandating...more

Cyber Monday Challenge: Test your cyber IQ

Constangy, Brooks, Smith & Prophete, LLP on 12/3/2024

In honor of Computer Security Day (which was Saturday), we have a quiz designed to test your grasp of key laws, regulations, and best practices that keep your personal, financial, and sensitive information safe....more

Consent West-Winds: The Dark Cloud of Dark Patterns

Carlton Fields on 10/7/2024

On September 4, the California Privacy Protection Agency, the agency responsible for enforcing the California Consumer Privacy Act (CCPA), issued an enforcement advisory on “dark patterns” and their inability to constitute...more

New Hampshire Passes Comprehensive Consumer Data Privacy Law

Jackson Lewis P.C. on 3/7/2024

On March 6, 2024, New Hampshire’s Governor signed Senate Bill 255, which establishes a consumer data privacy law for the state. The Granite State joins the myriad of state consumer data privacy laws. It is the second state in...more

More Privacy, Please - September/October 2023

Troutman Pepper Locke on 11/28/2023

Editor’s Note: The FTC continues to crack down on privacy and cybersecurity, including issuing a new warning to tax preparation companies and entering into a consent decree with 1Health.io. VPPA and BIPA litigation continues...more

California Data Broker Bill Expands Consumer Data Deletion Rights, Empowers Deletion Agents

Hudson Cook, LLP on 10/16/2023

Data brokers face new registration and audit obligations, consumer data deletion rights, and exposure to fines under California's SB 362, the Delete Act. The bill was signed into law by Gov. Gavin Newsom on Tuesday. Effective...more

Entity-Level vs. Data-Level Exemptions in the New State Privacy Laws

Cozen O'Connor on 8/3/2023

Businesses operating in regulated industries, particularly in the financial services and healthcare sectors, need to ensure they are paying close attention to the details of the exemptions in the increasingly complex...more

Steering Through Privacy: State Law Variation Affecting Auto Dealers

Miller & Martin PLLC on 8/3/2023

Automotive dealers and their service providers should take note of an important key difference between the California Consumer Privacy Act (CCPA) and other recent state privacy laws designed to protect consumer information....more

New State Privacy Laws Impact Auto Finance

McGlinchey Stafford on 7/6/2023

The regulation of consumer privacy and security in the United States traditionally has been sectoral in nature. In other words, outside of more highly regulated industries like financial services or health care, the use and...more

Nevada’s Governor Signs Health Data Privacy Act

Jackson Lewis P.C. on 6/26/2023

On June 16, 2023, Nevada’s Governor signed Senate Bill (SB) 370, which enacts certain protections for consumer health data. The law is similar to Washington’s My Health, My Data Act, which was passed in April. The Future...more

Florida Governor Signs Data Privacy Law Focused on Children, Search Engines and Billion Dollar Businesses

Mintz - Privacy & Cybersecurity Viewpoints on 6/12/2023

Florida has joined the growing list of states enacting comprehensive privacy laws. Governor Ron DeSantis (R) signed the Florida Digital Bill of Rights (“FDBR”) into law on June 6th. How does it compare?...more

My Health, My Data! Washington State Enacts Broad Health Data Privacy Protection Law

Mintz - Health Care Viewpoints on 5/25/2023

Washington greatly expanded the protection for consumers’ identifiable health information by enacting the “My Health My Data Act” (MHMDA), in an effort to close the gap between HIPAA protections and the laws protecting the...more

Going Beyond HIPAA – Washington Health Privacy Law Enacted: Broad Reach, Amorphous Scope, Big Litigation Risk

Proskauer on Privacy on 5/2/2023

The Health Information Portability and Accountability Act (“HIPAA”) has long been described as the floor for health care privacy laws and that states and regulators are free to enact more restrictive health care privacy laws....more

[Webcast Transcript] Today’s Privacy Reality: AI, Assessments, Breach and DSARs

HaystackID on 3/2/2023

Editor’s Note: On February 15, 2023, HaystackID shared an educational webcast to provide valuable insight into the ways in which AI is being used to address key issues in the realm of privacy and cybersecurity. The expert...more

Data Privacy in 2023: Expectations, Responsibilities & Cyber Security Tactics to Safeguard Your Information

J.S. Held on 2/9/2023

INTRODUCTION - As more of our lives and work become digitized, an inherent overlap continues to grow between data privacy and cyber security programs. Think of two similarly sized circles: in the past, data privacy and cyber...more

Video: Introduction: A Deep Dive into Privacy

McGlinchey Stafford on 1/27/2023

The world of cybersecurity and privacy have grown exponentially in recent years, both on the federal and state level. A pandemic-driven shift to remote has increased social media interaction and electronic communication, and...more

What Non-Financial Institutions Need to Know About Gramm-Leach-Bliley

Society of Corporate Compliance and Ethics... on 1/19/2023

The Gramm-Leach-Bliley Act (GLBA) is typically referred to in the context of financial institutions. It requires offerers of consumer financial products to explain how they share information and protect sensitive data. It’s...more

California AG’s Examples of CCPA Non-Compliance - Analysis of Targeted Industries

Ankura on 12/19/2022

This is the second article in a three-part series where Ankura privacy experts analyzed the 40 examples of non-compliance with the California Consumer Privacy Act (CCPA) published by the California Office of Attorney General...more

How to Prepare Your Business for Privacy Laws Taking Effect in 2023

Flaster Greenberg PC on 12/1/2022

In 2023, five new state privacy laws will become effective. How will these new laws affect your business? Currently, privacy laws in the United States include a patchwork of state laws as well as some industry- or...more

California Drafts Regulations to Implement the California Privacy Rights Act Imposing New Compliance Requirements for Businesses

Seward & Kissel LLP on 7/29/2022

On July 8, 2022, the California Privacy Protection Agency (“CPPA”) published draft regulations in the California Regulatory Notice Register (“Draft Regulations”) mandated by the California Privacy Rights Act (“CPRA”). The...more

Understanding the American Data Privacy and Protection Act

Mintz - ML Strategies on 6/9/2022

On Friday, June 3, Representative Frank Pallone (D-NJ), Chairman of the House Energy & Commerce Committee, Representative Cathy McMorris Rodgers (R-WA), the committee’s Ranking Member, and Senator Roger Wicker (R-MS), Ranking...more

California Consumer Privacy Act (CCPA) › Gramm-Leach-Blilely Act

"My best business intelligence, in one easy email…"