California Consumer Privacy Act (CCPA), Gramm-Leach-Blilely Act, Privacy Laws

Pixel Litigation Risk at Financial Institutions

Ropes & Gray LLP on 7/14/2025

An increasingly aggressive plaintiffs’ bar has brought purported class action suits based on the nearly ubiquitous use of tracking technologies used for website analytics. Although any actual harm to the plaintiffs is...more

Where is the GLBA Entity-Level Exemption? Two More State Privacy Laws Now Apply to Financial Institutions

Orrick, Herrington & Sutcliffe LLP on 7/8/2025

In May, Montana enacted Senate Bill 297, which amends the Montana Consumer Data Privacy Act (MCDPA) to eliminate the broad exemption for financial institutions subject to the Gramm-Leach-Bliley Act (GLBA). Connecticut...more

California Privacy Protection Agency Clarifies Application of the CCPA to Insurance Companies

Ogletree, Deakins, Nash, Smoak & Stewart,... on 2/26/2025

The California Privacy Protection Agency board voted on November 8, 2024, to advance a proposed rulemaking package for, among other things, a proposed regulation to clarify the application of the California Consumer Privacy...more

Are Employees Receiving Regular Data Protection Training? Are They AI Literate?

Jackson Lewis P.C. on 2/19/2025

Employee security awareness training is a best practice and a “reasonable safeguard” for protecting the privacy and security of an organization’s sensitive data. The list of data privacy and cybersecurity laws mandating...more

Entity-Level vs. Data-Level Exemptions in the New State Privacy Laws

Cozen O'Connor on 8/3/2023

Businesses operating in regulated industries, particularly in the financial services and healthcare sectors, need to ensure they are paying close attention to the details of the exemptions in the increasingly complex...more

Florida Governor Signs Data Privacy Law Focused on Children, Search Engines and Billion Dollar Businesses

Mintz - Privacy & Cybersecurity Viewpoints on 6/12/2023

Florida has joined the growing list of states enacting comprehensive privacy laws. Governor Ron DeSantis (R) signed the Florida Digital Bill of Rights (“FDBR”) into law on June 6th. How does it compare?...more

My Health, My Data! Washington State Enacts Broad Health Data Privacy Protection Law

Mintz - Health Care Viewpoints on 5/25/2023

Washington greatly expanded the protection for consumers’ identifiable health information by enacting the “My Health My Data Act” (MHMDA), in an effort to close the gap between HIPAA protections and the laws protecting the...more

Going Beyond HIPAA – Washington Health Privacy Law Enacted: Broad Reach, Amorphous Scope, Big Litigation Risk

Proskauer on Privacy on 5/2/2023

The Health Information Portability and Accountability Act (“HIPAA”) has long been described as the floor for health care privacy laws and that states and regulators are free to enact more restrictive health care privacy laws....more

Video: Introduction: A Deep Dive into Privacy

McGlinchey Stafford on 1/27/2023

The world of cybersecurity and privacy have grown exponentially in recent years, both on the federal and state level. A pandemic-driven shift to remote has increased social media interaction and electronic communication, and...more

How to Prepare Your Business for Privacy Laws Taking Effect in 2023

Flaster Greenberg PC on 12/1/2022

In 2023, five new state privacy laws will become effective. How will these new laws affect your business? Currently, privacy laws in the United States include a patchwork of state laws as well as some industry- or...more

Utah Set to Become Fourth State to Pass Comprehensive Consumer Privacy Law

Foley & Lardner LLP on 3/8/2022

Utah is likely the next in line to pass a comprehensive consumer privacy law, joining the ranks of California, Colorado, and Virginia. Senate Bill 227, the Utah Consumer Privacy Act (UCPA), was passed by the Utah legislature...more

U.S. Privacy 2022: Compare, Contrast, and Integrate New State Laws

Lowenstein Sandler LLP on 12/10/2021

U.S. state legislatures accelerated efforts in 2021 to fill the gap created by the absence of national data privacy legislation. California, Virginia, and Colorado passed or amended data protection laws, and the trend is...more

Colorado Enacts Sweeping Privacy Law

King & Spalding on 8/11/2021

On July 7, 2021, Colorado enacted a new privacy law, titled the Colorado Privacy Act (CPA). The CPA is the third state-level omnibus data privacy law, similar in scope to the California Consumer Privacy Act (CCPA) and the...more

Colorado joins California and Virginia in Passing a Comprehensive Privacy Law

Foley & Lardner LLP on 7/23/2021

On July 7, 2021, Colorado Governor Jared Polis signed the Colorado Privacy Act (“CPA”) into law, making Colorado the third state to enact comprehensive privacy legislation, following in the footsteps of California and...more

Using the NIST Privacy Framework to Assess Privacy Risk and Build a Privacy Program

Ankura on 7/12/2021

Since the General Data Protection Regulation (GDPR) went into effect in 2018, over half a dozen countries have passed similar privacy regulations and another few dozen have updated or proposed new privacy regulations. In the...more

Top Operational Impacts of Virginia's New Privacy Law (CDPA)

Ankura on 6/28/2021

The Virginia Consumer Data Protection Act (CDPA) overwhelmingly passed both legislative chambers this month and is expected to be signed by the Governor in the coming weeks with an effective date of January 1, 2023. Best...more

[Webinar] U.S. Privacy Law Update: Analyzing the Colorado Privacy Act - June 15th, 11:00 am - 12:00 pm CDT

Husch Blackwell LLP on 6/9/2021

The Colorado legislature just passed the Colorado Privacy Act (CPA). Once signed by the Governor, Colorado will become just the third state – after California and Virginia – to enact broad consumer data privacy legislation....more

Virginia Approves New Data Privacy Law: States Take The Lead As U.S. Trends Closer To Europe’s GDPR

Lowenstein Sandler LLP on 3/9/2021

On March 2, the Virginia Consumer Data Protection Act (VCDPA) was signed into law, becoming the second comprehensive state privacy law in the United States. The VCDPA reflects core principles from the California Consumer...more

What is the average size of a bank’s California privacy notice?

BCLP on 6/15/2020

3,987 words (or 15 double spaced pages). Banks and financial service companies (collectively “banks”) often post more than one privacy notice. For example, they may post a privacy notice that applies to their customers...more

The CCPA and Similar State Laws – Considerations for Private Investment Funds

Morgan Lewis on 2/28/2020

Managers of private investment funds that collect personal information are required to comply with the landmark California Consumer Privacy Act – with some exemptions. ...more

Privacy Law and the First-Year Law School Curriculum

WilmerHale on 2/13/2020

I am not a real academic. I teach privacy law very part-time as an adjunct professor. I am a full-time law firm partner, focusing on privacy and data security issues. I have been teaching formal privacy and data security...more

Florida’s Legislature to Consider Consumer Data Privacy Bill Akin to California’s CCPA

Carlton Fields on 1/15/2020

Florida lawmakers have proposed data privacy legislation that, if adopted, would impose significant new obligations on companies offering a website or online service to Florida residents, including allowing consumers to “opt...more

Do Companies Need a Written Security Information Plan?

BCLP on 1/7/2020

As of January 1, 2020, California became the first state to permit residents whose personal information is exposed in a data breach to seek statutory damages between $100-$750 per incident, even in the absence of any actual...more

CCPA Advent: Waiting on the World to Change

Hudson Cook, LLP on 12/23/2019

January 1, 2020, opens both a new decade and a new landscape in privacy regulation in the United States. On that day, the California Consumer Privacy Act, or CCPA, is set to become effective. The law will be the first of its...more

Proposed Regulations and Recent Amendments Clarify Compliance with the California Consumer Privacy Act as Effective Date Looms

Buchalter on 11/13/2019

The California Consumer Privacy Act (the “CCPA”) is poised to become the strongest consumer privacy law in the United States when it goes into effect on January 1, 2020. The CCPA affords consumers unprecedented rights in...more

California Consumer Privacy Act (CCPA) › Gramm-Leach-Blilely Act › Privacy Laws

"My best business intelligence, in one easy email…"