California Consumer Privacy Act (CCPA), Insurance Industry

California privacy agency opens comment period on regulations

Orrick, Herrington & Sutcliffe LLP on 5/19/2025

On May 9, the California Privacy Protection Agency (CPPA) announced it opened the formal public comment period for its proposed regulations concerning updates to the California Consumer Privacy Act. The proposed rules would...more

California Privacy Protection Agency Clarifies Application of the CCPA to Insurance Companies

Ogletree, Deakins, Nash, Smoak & Stewart,... on 2/26/2025

The California Privacy Protection Agency board voted on November 8, 2024, to advance a proposed rulemaking package for, among other things, a proposed regulation to clarify the application of the California Consumer Privacy...more

California’s Privacy Regulator Had a Busy November, Cybersecurity Audits and Insurance Edition: What Does It Mean for Businesses?

Sheppard Mullin Richter & Hampton LLP on 12/13/2024

In the fourth in our series of new CCPA regulations from California, we look at both cybersecurity audit obligations as well as the impact of the CCPA on the insurance industry. Cybersecurity Audits The proposed rules address...more

California’s Privacy Regulator Had a Busy November: What Does It Mean for Businesses?

Sheppard Mullin Richter & Hampton LLP on 12/9/2024

The California Privacy Protection Agency released proposed CCPA rules for a variety of topics in November, as well as announcing an investigative sweep for compliance with the Delete Act. Topics include the following, which...more

From Anatomy to Action: Navigating Data Center Contracts

Pillsbury Winthrop Shaw Pittman LLP on 10/25/2024

Businesses should carefully consider technical, operational and financial details when executing data center contracts. Appropriately addressing these considerations in data center contracts will help protect each party’s...more

Draft CCPA Regulations Stalled as Agency Struggles With Applicability of ADMT Rules

McDermott Will & Emery on 7/23/2024

On July 15, 2024, the California Privacy Protection Agency (CPPA) released proposed updates to the California Consumer Privacy Act (CCPA) regulations, including updates to the draft risk assessments, automated decisionmaking...more

CPPA Publishes Additional Proposed Regulations - Including Proposed Revisions to CCPA Regulations - For Discussion at December...

WilmerHale on 12/7/2023

In the run-up to this Friday’s December Board meeting, the California Privacy Protection Agency (CPPA or the “Agency”) has continued its recent flurry of regulatory activity. Late last week, the CPPA published an additional...more

"An Ounce of Prevention"...How to Reduce the Risk of Litigation and Enforcement Proceedings

Seward & Kissel LLP on 7/27/2023

To paraphrase what Ben Franklin may have been alluding to nearly 300 years ago in his famous quote, often the best approach when it comes to reducing the risk of litigation and government enforcement proceedings is to take...more

Privacy & Cybersecurity Update - April 2023

Skadden, Arps, Slate, Meagher & Flom LLP on 5/2/2023

In this month’s Privacy & Cybersecurity Update, we look at Washington state’s passage of the first-ever state-level health data privacy law and the finalized California Consumer Privacy Act regulations. We also examine a...more

NAIC proposes new California-style privacy model law for insurance

Eversheds Sutherland (US) LLP on 2/10/2023

On Wednesday February 1, 2023, the NAIC Privacy Protections Working Group (the Working Group) released a draft of a new model law for comment, the Insurance Consumer Privacy Protection Model Law (#674) (the Proposal), which...more

NAIC report - 2021 Fall National Meeting

Eversheds Sutherland (US) LLP on 1/6/2022

The National Association of Insurance Commissioners (NAIC) held its 2021 Fall National Meeting from December 11 to 16 in San Diego, California. The meeting was held in a hybrid in-person and remote format due to the ongoing...more

New York’s DFS Publishes A Cyber Insurance Risk Framework

Husch Blackwell LLP on 3/9/2021

Keypoint: New York’s Division of Financial Services (DFS) now requires Property and Casualty Insurers writing cyber insurance to comply with the Division’s Cyber Insurance Risk Framework to manage their risk. In her...more

NAIC’s Privacy Protections (D) Working Group begins revising privacy model laws

Eversheds Sutherland (US) LLP on 6/1/2020

On May 5, 2020, the NAIC’s Privacy Protections (D) Working Group met via conference call. The Working Group was formed on October 1, 2019, under the Market Regulation and Consumer Affairs (D) Committee on a referral from...more

Time to Check Your Cyber Insurance

Farella Braun + Martel LLP on 2/25/2020

Now that the CCPA is in effect, some companies will need to revise their policies. The cyber insurance markets are beginning to adapt to the new California Consumer Privacy Act (CCPA) which went into effect on January 1. ...more

February 2020: Survey of the Property and Casualty Insurance Industries’ Privacy Representations

BCLP on 2/24/2020

To help identify trends in privacy representations, BCLP reviewed the websites and privacy notices of those Fortune 500 companies that are primarily engaged in the property and casualty insurance industries. The data shows...more

February 2020: Survey of the Life and Health Insurance Industries’ Privacy Practices

BCLP on 2/18/2020

To help identify trends in privacy representations, BCLP reviewed the websites and privacy notices of those Fortune 500 companies identified as primarily engaged in the life and health care industries by Dun & Bradstreet. ...more

[Event] Privacy Please: How California’s Consumer Data Collection and Protection Laws Impact Nonprofits - February 27th, San...

Farella Braun + Martel LLP on 2/5/2020

Whether in connection with their marketing programs or other data-driven initiatives, nonprofit organizations are becoming more reliant on the data of their customers. Those that are collecting consumer data need to be aware...more

Reading the Fine Print: What Insurance Companies Need to Know About the CCPA

WilmerHale on 1/28/2020

The purpose of this article is to provide background information on the California Consumer Privacy Act and specifically the exemptions that generally will be applicable to the insurance industry. While developing a...more

Countdown to the CCPA: Does cyber insurance cover a data breach?

BCLP on 12/10/2019

When the California Consumer Privacy Act (“CCPA”) takes effect in January 2020, California will become the first state to permit residents whose personal information is exposed in a data breach to seek statutory damages of...more

CCPA Security FAQs: Does the CCPA open insurance companies to increased litigation?

BCLP on 10/4/2019

Yes. The CCPA provides a partial exemption for information collected by financial institutions that are subject to the Gramm Leach Bliley Act (e.g., information about individuals who have obtained personal financial...more

JONES DAY PRESENTS®: Insurance Implications of the California Consumer Privacy Act

Jones Day on 10/1/2019

Jones Day Insurance Recovery partner Rich DeNatale talks about insurance implications for clients subject to the California Consumer Privacy Act ("CCPA"), including policy limits and coverage for statutory damages. The CCPA...more

Will California Law Permit Insurance Coverage for Civil Penalties Assessed Under the California Consumer Privacy Act?

White and Williams LLP on 8/14/2019

One of the most often discussed (and debated) aspects of the soon-to-be effective California Consumer Privacy Act (CCPA) is that the CCPA provides for statutorily assessed civil penalties against any violators, up to $7,500...more

California Consumer Privacy Act Update: Assembly Approves 12 Amendments - Changes Would Exclude Employees and Vehicle Information,...

Holland & Knight LLP on 6/7/2019

• California's protracted legislative and regulatory process has complicated the landscape for businesses needing to implement the operational, technical and procedural changes required by the California Consumer Privacy Act....more

Questions to Consider Asking Your Broker About Cyberliability Coverage

Robinson+Cole Data Privacy + Security Insider on 5/30/2019

One of the first questions we ask our clients when they call about a security incident is whether they have insurance that may cover the costs associated with investigating the incident, potential forensic analysis, and...more

CCPA and IIPPA Update

Faegre Drinker Biddle & Reath LLP on 5/22/2019

Earlier this year, California legislators proposed A.B. 981 (“the proposal”), which, among other things, would have exempted insurance institutions, agents and support organizations (“insurers”) from many provisions of the...more

California Consumer Privacy Act (CCPA) › Insurance Industry

"My best business intelligence, in one easy email…"