California Consumer Privacy Act (CCPA), Information Governance

Location, Location, Location: California Attorney General Investigative Sweep and State Law Proposal Target Location Data

Clark Hill PLC on 3/17/2025

On March 10, the California attorney general’s office announced an “ongoing investigative sweep into the location data industry” (“investigative sweep”) for compliance with the California Consumer Privacy Act’s (“CCPA”)...more

The Intersection of Agentic AI and Emerging Legal Frameworks

Foley & Lardner LLP on 12/20/2024

The evolution of artificial intelligence (AI) has introduced systems capable of making autonomous decisions, known as agentic AI. While generative AI essentially “creates” – providing content such as text, images, etc. –...more

Deeper Dive: Preserving Ephemeral Messaging - Capture Data Before Its Ghosts Haunt Your Compliance

BakerHostetler on 10/16/2024

Organizations whose mantra is “We just never delete anything” (i.e., organizations simply retaining all information indefinitely) are now facing headwinds, especially when the information contains personal information. As our...more

California Protects Neural Data

Nelson Mullins Riley & Scarborough LLP on 10/3/2024

California Governor Gavin Newsom approved an amendment to the California Consumer Privacy Act (CCPA) extending privacy rights to a person’s neural data. Neural data is defined as information that is generated by measuring the...more

No Money, Mo’ Problems: DoorDash CCPA Enforcement Action Emphasizes Personal Information “Sales” Aren’t All About the Benjamins

Wyrick Robbins Yates & Ponton LLP on 3/13/2024

The California Attorney General (“AG”) recently delivered (pun very much intended) a public CCPA enforcement action against DoorDash, its second following the 2022 settlement with Sephora. The DoorDash action stems from a...more

[Webcast Transcript] Notable Trends in US Privacy Law

HaystackID on 2/29/2024

Editor’s Note: On January 17, 2024, HaystackID hosted a cogent webcast, “Notable Trends in US Privacy Law,” featuring HaystackID privacy and compliance expert Chris Wall, and an esteemed panel of privacy and compliance...more

Time for Employers to Complete California Privacy Rights Act Compliance as Court of Appeal Lifts Injunction on Enforcement

Littler on 2/21/2024

Employers had a big win in late June 2023 when a trial court in Sacramento enjoined until March 29, 2024, enforcement of the final regulations under the California Privacy Rights Act (CPRA), the only one of 14 recently...more

DIFC Issues Landmark Adequacy Decision Regarding the California Consumer Privacy Act

Akin Gump Strauss Hauer & Feld LLP on 8/18/2023

On August 7, 2023, the Commissioner of Data Protection of the Dubai International Financial Centre (the DIFC), a financial free-zone in the United Arab Emirates, issued the first adequacy decision regarding the California...more

California Court Checks Enforcement Authority of New Privacy Agency

Akerman LLP on 8/10/2023

Background - Enforcement of the California Privacy Rights Act of 2020 (CPRA) Final Regulations by the California Privacy Protection Agency was put on hold June 30, 2023, by a California Superior Court, just before...more

The California Attorney General and the California Privacy Protection Agency Are Accelerating Enforcement on CCPA/CPRA...

Epstein Becker & Green on 7/27/2023

California businesses, including employers, who have not already complied with their statutory data privacy obligations under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA),...more

An 11th Hour California Court Order Provides Compliance Extensions and Enforcement Delays for CPRA

Nelson Mullins Riley & Scarborough LLP on 7/11/2023

The Superior Court of California delayed enforcement of California Privacy Rights Act of 2020 (CPRA) regulations on June 30, 2023, providing much sought-after reprieve for covered entities scrambling to get into compliance...more

Final CPRA Regulations Approved and Lawsuit Filed to Enjoin Enforcement

CDF Labor Law LLP on 4/6/2023

The California Privacy Protection Agency’s (“Agency”) long-waited regulations to guide enforcement of the California Consumer Privacy Act (“CPRA”) were approved by the California Office of Administrative Law last week and are...more

[Webcast Transcript] Today’s Privacy Reality: AI, Assessments, Breach and DSARs

HaystackID on 3/2/2023

Editor’s Note: On February 15, 2023, HaystackID shared an educational webcast to provide valuable insight into the ways in which AI is being used to address key issues in the realm of privacy and cybersecurity. The expert...more

California AG Announces CCPA Compliance Efforts

Robinson+Cole Data Privacy + Security Insider on 2/3/2023

The Office of the California Attorney General recently announced that it will initiate an investigative sweep and will start sending letters to businesses about their mobile apps for failure to comply with the California...more

Data Privacy Laws and Blocking Statutes: Five Practical Strategies for Counsel

HaystackID on 1/30/2023

Background Note: Data privacy has become a critical issue in the digital era, with laws and regulations constantly evolving. As a result, it’s important for cybersecurity, information governance, and legal discovery...more

Counting Down to 2023: CPRA Template Available

CDF Labor Law LLP on 11/21/2022

The California Privacy Rights Act (CPRA) that amended California’s Consumer Privacy Act (CPPA) comes fully into force on January 1, 2023 and the California Privacy Protection Agency is supposed to start enforcing the CPRA on...more

Summary and Comparison of U.S. Data Privacy Laws Since California's CCPA and CPRA

Burr & Forman on 11/15/2022

California started the process of individual U.S. states enacting individual privacy laws with its California Consumer Privacy Act (“CCPA”), which currently is in effect, as supplemented and amended by the California Consumer...more

Are You Ready? The California Privacy Rights Act Could now Apply to Your Business

Robinson+Cole Data Privacy + Security Insider on 11/4/2022

California law will soon require businesses to treat their employees and business partners as consumers under the California Consumer Privacy Act (CCPA). The CCPA and its successor legislation, the California Privacy Rights...more

California Legislature Passes Far-Reaching Online Privacy and Content Regulation Bill for Minors

Wilson Sonsini Goodrich & Rosati on 9/2/2022

On August 30, 2022, the California legislature passed the California Age-Appropriate Design Code Act (the Act). Modeled after the UK's Age-Appropriate Design Code, California's act drastically changes the landscape of online...more

California Privacy Protection Agency to Start Formal CPRA Rulemaking Process

Jenner & Block on 6/10/2022

On June 8, 2022, the California Privacy Protection Agency (“CPPA” or “Agency”) voted to begin the formal rulemaking process for regulations implementing the California Privacy Rights Act (CPRA). The Agency Board discussed and...more

Navigating the Financial Incentive Requirement of the California Consumer Privacy Act

Stradling Yocca Carlson & Rauth on 4/8/2022

Since its enactment at the beginning of 2020, the California Consumer Privacy Act (CCPA) has garnered a significant amount of attention. The watershed legislation, which is intended to strengthen privacy rights in the state...more

Data Privacy + Cybersecurity Insider - August 2021 #3

Robinson & Cole LLP on 8/24/2021

CYBERSECURITY - T-Mobile Clarifies Facts of Security Incident in Press Release - There has been a flurry of reporting in the past few days on the T-Mobile customer data compromise, with allegations that the compromise...more

Are California Employers Prepared To Navigate California’s Evolving Privacy Law Landscape?

CDF Labor Law LLP on 7/21/2021

Colorado’s and Virginia’s emulation of California by recently enacting comprehensive privacy laws is an important reminder to California employers that the clock is ticking to comply with California’s new privacy regulations....more

Overview of Applicability and Updated Privacy Provisions in the California Privacy Rights and Enforcement Act of 2020 (CPRA)

Burr & Forman on 6/10/2021

The CPRA – or the California Privacy Rights and Enforcement Act of 2020 – amends certain provisions of the CCPA (California Consumer Privacy Act) that went into effect on January 1, 2020. The CPRA narrows the definition of...more

Build A Data Inventory That Benefits Everyone

Ankura on 5/27/2021

A data inventory is the fundamental building block for an effective privacy program. In its simplest form, a data inventory can be thought of as a matrix which documents 1) what personal data is being collected by the...more

California Consumer Privacy Act (CCPA) › Information Governance

"My best business intelligence, in one easy email…"