California Consumer Privacy Act (CCPA), Personal Data, Compliance

California Adopts Regulations on Cybersecurity Audits

Shook, Hardy & Bacon L.L.P. on 7/29/2025

California has approved new regulations requiring some companies to conduct annual audits of their cybersecurity programs, including the policies, procedures, and practices for protecting personal information. On July 24,...more

States Continue Privacy Law Enforcement Efforts

Wiley Rein LLP on 7/17/2025

Recent enforcement activities in California and Connecticut highlight that states are ready and willing to actively enforce their comprehensive privacy laws. These recent actions – which continue the trend of states ramping...more

Strategic Artificial Intelligence Planning Alert: A State and Federal Regulatory Roadmap for 2025 Compliance

Hinshaw & Culbertson - Privacy, Cyber & AI... on 2/21/2025

The World Economic Forum has stated that 88 percent of C-suite executives indicated that adopting artificial intelligence (AI) in their companies is a key initiative for 2025. Companies are pivoting from merely testing AI to...more

Proposed State Privacy Law Update: February 17, 2025

Husch Blackwell LLP on 2/17/2025

Keypoint: Last week saw a flurry of activity across numerous states, including bills advancing in Virginia, Oklahoma, Washington, Utah, and South Carolina, while lawmakers continued to introduce bills across the country. ...more

Data Privacy Day Checklist: Top 10 ways to protect your organization's data

Constangy, Brooks, Smith & Prophete, LLP on 1/27/2025

Tomorrow is International Data Privacy Day, so a happy day to all! More seriously, data privacy concerns and legislation continue to rapidly increase. It has been estimated that by the end of 2024 more than 75 percent of...more

Navigating Privacy and Data Security Challenges in the Hospitality Industry: Key Considerations for Hotel Management Agreements

Goodwin on 9/25/2024

Over the past decade, the hospitality industry has rapidly adopted intensive technologies to meet the rising expectations of guests, personalize each guest’s experience, and cultivate and enhance customer loyalty. Access to...more

Accelerating Privacy Scrutiny: Key Developments for the Auto Industry

Venable LLP on 6/4/2024

Recent U.S. developments indicate a growing focus on regulating and investigating the data privacy practices of companies in the automotive sector. The Federal Trade Commission (FTC) recently highlighted in a blog post its...more

California Privacy Protection Agency Free to Resume Enforcement Efforts

Baker Donelson on 2/13/2024

A decision by California's Third District Court of Appeal has allowed the California Privacy Protection Agency (CPPA) to resume enforcement efforts. On February 9, 2024, the Court overturned a California Superior Court...more

Peekaboo: How To Continue Preparations for Brave New (Data Privacy) World

DarrowEverett LLP on 9/28/2023

On September 12, 2023, Delaware became the 13th state to adopt a consumer data privacy act, joining Florida, another state to recently adopt consumer privacy laws, and others in providing resident consumers with rights...more

Florida Governor Signs Data Privacy Law Focused on Children, Search Engines and Billion Dollar Businesses

Mintz - Privacy & Cybersecurity Viewpoints on 6/12/2023

Florida has joined the growing list of states enacting comprehensive privacy laws. Governor Ron DeSantis (R) signed the Florida Digital Bill of Rights (“FDBR”) into law on June 6th. How does it compare?...more

California AG Announces Investigative Sweep of Mobile Applications for CCPA Compliance

WilmerHale on 2/1/2023

In a press release on January 27, 2023, California Attorney General (“California AG”) Rob Bonta announced an investigative sweep focused on mobile applications’ compliance under the California Consumer Privacy Act (CCPA),...more

Virginia’s Data Privacy Law Just Went Into Effect – What You Should Know.

Butler Snow LLP on 1/13/2023

On January 1, 2023, Virginia’s Consumer Data Protection Act (“Virginia Privacy Law”) went into effect, the second in the US aimed to protect consumers’ personal data. We previously blogged about its passage. Here’s what you...more

Reminder: California Employee Personal Data In-Scope of California Data Protection Law Effective Jan. 1, 2023

Benesch on 9/9/2022

The Employee Data Exemptions that existed in the original CCPA will no longer be effective in 2023 as the scope of the data protection law expands under the CPRA. In November 2020, California residents voted to adopt the...more

DSIR Deeper Dive: Are you ready for the CPRA?

BakerHostetler on 7/12/2022

In sports, they sometimes call it a rebuilding year - the team hires new players or a new coach, restructures, updates strategy, and prepares for the next season. In the world of California privacy compliance, 2021 was a...more

Overview of California AG’s Examples of CCPA Non-Compliance

Ankura on 9/23/2021

The California Office of Attorney General (OAG) is responsible for enforcing the CCPA and began sending notifications of alleged non-compliance to companies on July 1, 2020. Almost a year later, in June of 2021, the OAG...more

Data Deletion under CPRA and GDPR, And How to Operationalize a Deletion Program

Ankura on 7/20/2021

Authors: David Manek, Joe Shepley and Mark Melnychenko The California Privacy Rights Act (CPRA) which goes live January 1, 2023 introduces data retention and deletion requirements very similar to those that we see in the...more

Recent Developments in the State Data-Privacy Landscape: Is Federal Involvement the Best Way Forward?

Patterson Belknap Webb & Tyler LLP on 4/7/2021

With a dizzying array of state privacy laws on the horizon, the prospect of a federal solution has come into sharp focus. Rather than a patchwork of regional legislation, a comprehensive national framework would potentially...more

Virginia Becomes the Second State—and the First on the Eastern Seaboard—to Adopt a Comprehensive Data Protection Law

Brooks Pierce on 3/31/2021

In March of 2021, Virginia became the second state to adopt a comprehensive data protection law. The Virginia Consumer Data Protection Act (VCDPA), which goes into effect on Jan. 1, 2023, borrows many concepts from the...more

Virginia Is For Lovers . . . Of Data Privacy - UPDATED March 2021

Vinson & Elkins LLP on 3/9/2021

Update: The VCDPA was signed into law by Governor Ralph Northam without amendment on March 2, 2021. The VCDPA will become operative on January 1, 2023, and businesses should remain mindful of pending legislation in states...more

7 Tips to Make Your Website CCPA Compliant

NAVEX on 8/19/2020

On Friday, California's Office of Administrative Law officially approved final regulations under the California Consumer Privacy Act (CCPA), arguably the nation’s most comprehensive legislation governing the collection,...more

Facebook’s Limited Data Use Functionality – Turn On or Turn Off?

Fenwick & West LLP on 7/29/2020

To help its business customers with CCPA compliance efforts, Facebook has implemented the “Limited Data Use” feature which restricts how Facebook uses personal information of California individuals that it collects or...more

Does Accidental Listening by Smart Speakers Raise Compliance Concerns?

Foley Hoag LLP - Security, Privacy and the... on 2/21/2020

That sixth sense you have that someone is listening – could it be your smart speaker? There’s a chance the answer is yes, even when you don’t ask it to. A new study from Northeastern University finds that smart speakers...more

UK Business Exposure To The California Consumer Privacy Act 2018 ("CCPA")

White & Case LLP on 2/1/2020

The CCPA took effect on 1 January 2020, introducing significant compliance burdens for most businesses that collect personal information about California residents. The reach of the CCPA extends beyond California and the US;...more

[Event] CCPA Compliance: An Interactive Workshop - Multiple Dates/Locations, February 11th - 24th

McDermott Will & Emery on 1/16/2020

Effective as of January 1, 2020, the California Consumer Privacy Act (CCPA) gives broad rights to people on their personal data in the custody of companies. This focus on data rights significantly raises the compliance burden...more

[Event] CCPA Compliance: An Interactive Workshop - Multiple Dates/Locations, Jan. 22nd - 30th

McDermott Will & Emery on 1/14/2020

Effective as of January 1, 2020, the California Consumer Privacy Act (CCPA) gives broad rights to people on their personal data in the custody of companies. This focus on data rights significantly raises the compliance burden...more

California Consumer Privacy Act (CCPA) › Personal Data › Compliance

"My best business intelligence, in one easy email…"