California Consumer Privacy Act (CCPA), Personal Data, Data Collection

New Jersey Issues Draft Privacy Regulations: The New

Fox Rothschild LLP on 6/27/2025

New Jersey recently released draft privacy regulations, and there is a lot to unpack and process. In this three-part series, I will break down the regulations - Part 1: The New Personal data: • Scraping is carved...more

State-by-State Privacy Legislation Update: A Compliance Roadmap for 2025

Arnall Golden Gregory LLP on 6/12/2025

States have been active in passing and enacting comprehensive consumer privacy laws in the absence of a federal statute. To date, 19 states have passed such laws, starting with the California Consumer Privacy Act (“CCPA”),...more

Updates on CIPA Reform: CA SB 690 Progresses to the Assembly Without Retroactivity Provision.

Benesch on 6/11/2025

A national leader in privacy law, California was among the first states to include an express right to privacy in its constitution, create a data breach notification law, and codify robust consumer data protections. ...more

New Jersey Proposes Rules for the New Jersey Data Privacy Act

McDermott Will & Schulte on 6/4/2025

New Jersey’s Office of Consumer Protection has prepared proposed rules for the New Jersey Data Privacy Act (NJDPA) (Proposed Rules). While the bulk of the Proposed Rules consist of recitations of the obligations found in the...more

California Regulator Signals New Era in Privacy Enforcement

Hudson Cook, LLP on 5/1/2025

In March, 2025, the California Privacy Protection Agency announced a consent order with an auto manufacturer alleging multiple violations of the California Consumer Privacy Act and imposing a $632,500 fine for alleged failure...more

State AGs Step Up Privacy Enforcement

Hudson Cook, LLP on 4/2/2025

With attention on Democratic Attorneys General vowing to fill the void left by weakened federal regulators, and perhaps a more partisan divide on enforcement generally, a bipartisan consensus is quietly emerging in the states...more

California Privacy Protection Agency Begins Investigative Sweep into Location Data Collection under CCPA

Robinson+Cole Data Privacy + Security Insider on 3/14/2025

The California Privacy Protection Agency (CPPA) the agency responsible for implementing and enforcing the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA) (collectively the CCPA), protecting...more

House Committee Announces Formation of Working Group to Develop Federal Comprehensive Privacy Law

Ballard Spahr LLP on 2/20/2025

On February 12, 2025, the House Energy and Commerce Committee Chair Brett Guthrie (R-Ky) and Vice Chair John Joyce (R-Pa) announced the formation of 12-member working group tasked with developing comprehensive data privacy...more

2024 Year-End Recap of California Consumer Privacy Act Activity

Morgan Lewis - Health Law Scan on 12/31/2024

First passed into law in 2018, the California Consumer Privacy Act (CCPA) received its first major update in 2020 by way of the California Privacy Rights Act (CPRA), through which the California Privacy Protection Agency...more

California’s Privacy Regulatory Odyssey Continues: Formal CCPA Rulemaking on the Horizon Amidst Expanded Data Broker Requirements

Wilson Sonsini Goodrich & Rosati on 11/18/2024

On November 8, 2024, the California Privacy Protection Agency (CPPA) Board met to discuss and vote on various proposed California Consumer Privacy Act (CCPA) regulations related to cybersecurity audits, automated...more

Stronger Privacy Protections and Enforcement Still High on the Agenda in California

Troutman Pepper Locke on 11/15/2024

As we near the end of 2024, we consider a recent new round of California bills amending the California Consumer Protection Act (“CCPA”) and new laws concerning AI. This activity provides an opportunity to both reflect on the...more

California agency announces sweep on data broker compliance

Orrick, Herrington & Sutcliffe LLP on 11/11/2024

On October 30, the California Privacy Protection Agency (CPPA) announced an investigative sweep to ensure data brokers comply with the Delete Act. Effective January 1, the Delete Act requires parties to register by January 31...more

Colorado and California Get Ahead of Neural Data Regulation

BakerHostetler on 10/17/2024

It is often said that the law lags behind the pace of technological development. Yet, while computer chip implants and wearable brain activity monitors are only just starting to show technical viability, two states recently...more

That’s the Way the Cookie Crumbles

Burr & Forman on 9/13/2024

Do you know what cookies your company’s website is using? If not, you likely do not know whether your company’s website is honoring users’ data protection choices involving the use of cookies. You should know and care so your...more

California Joins the Neural Data Bandwagon

Alston & Bird on 9/13/2024

On August 31, the California assembly passed SB1223, which amends the CCPA/CPRA to include “neural data” as a type of sensitive data. SB1223, which is likely to become law, defines “neural data” as “information that is...more

Privacy Data Mapping: How to Map Sensitive Data & PII

Osano on 8/14/2024

Sprawling. That’s one way to describe the nature of data and responsibilities in modern organizations. There’s a lot of personally identifiable information (PII) and sensitive data to track, and knowing what lives where so...more

California Attorney General's Recent Enforcement of CCPA and COPPA

Venable LLP on 7/10/2024

On June 18, 2024, California Attorney General (AG) Rob Bonta announced a third CCPA enforcement settlement, this one with Tilting Point Media LLC. Tilting Point was allegedly using its mobile app game "SpongeBob: Krusty...more

Accelerating Privacy Scrutiny: Key Developments for the Auto Industry

Venable LLP on 6/4/2024

Recent U.S. developments indicate a growing focus on regulating and investigating the data privacy practices of companies in the automotive sector. The Federal Trade Commission (FTC) recently highlighted in a blog post its...more

CPPA Enforcement Division Issues First Enforcement Advisory on Data Minimization

White & Case LLP on 5/9/2024

On April 2, 2024, the California Privacy Protection Agency's (CPPA) Enforcement Division issued its first enforcement advisory, titled "Applying Data Minimization to Consumer Requests," to further emphasize the importance of...more

Year in Review: 2023 Data Protection Litigation Trends

WilmerHale on 3/21/2024

2023 was an active year for data protection-related litigation. Plaintiffs continued to advance creative theories of liability against businesses, using both older and more established privacy laws (such as the Telephone...more

California Proposes CCPA Amendments to Further Protect Children's Privacy

Jones Day on 3/5/2024

Proposed amendments to the California Consumer Privacy Act would require businesses to obtain opt-in consent prior to collecting, selling, sharing, using, or disclosing a minor's personal information....more

Time for Employers to Complete California Privacy Rights Act Compliance as Court of Appeal Lifts Injunction on Enforcement

Littler on 2/21/2024

Employers had a big win in late June 2023 when a trial court in Sacramento enjoined until March 29, 2024, enforcement of the final regulations under the California Privacy Rights Act (CPRA), the only one of 14 recently...more

California Consumer Privacy Act (CCPA) › Personal Data › Data Collection