California Consumer Privacy Act (CCPA), Personal Data, Personal Information

California Adopts Regulations on Cybersecurity Audits

Shook, Hardy & Bacon L.L.P. on 7/29/2025

California has approved new regulations requiring some companies to conduct annual audits of their cybersecurity programs, including the policies, procedures, and practices for protecting personal information. On July 24,...more

OOPS! What Website Owners Need to Know about Opt-Out Preference Signals + 4 Compliance Steps

Fisher Phillips on 7/28/2025

Businesses should be aware of recent public outreach in California – and other states with consumer privacy laws – signaling that increased enforcement activity is on the horizon. For instance, the California Privacy...more

California Regulator Signals New Era in Privacy Enforcement

Hudson Cook, LLP on 5/1/2025

In March, 2025, the California Privacy Protection Agency announced a consent order with an auto manufacturer alleging multiple violations of the California Consumer Privacy Act and imposing a $632,500 fine for alleged failure...more

State AGs Step Up Privacy Enforcement

Hudson Cook, LLP on 4/2/2025

With attention on Democratic Attorneys General vowing to fill the void left by weakened federal regulators, and perhaps a more partisan divide on enforcement generally, a bipartisan consensus is quietly emerging in the states...more

Key Takeaways from CPPA’s Recent Settlement with an Automotive Manufacturer for Alleged CCPA Violations

Alston & Bird on 3/20/2025

On March 12, 2025, the California Privacy Protection Agency (CPPA) published its decision approving a Stipulated Final Order (Order) against a major automotive manufacturer (company) for violations of the California Consumer...more

Get to Know the Global Privacy Control (GPC): State Attorneys General Remind Consumers of Their Right to Opt-Out of the Sale or...

Nelson Mullins Riley & Scarborough LLP on 2/21/2025

Introduction - Most businesses are aware of historical restrictions or limitations on selling personal information to third parties for monetary consideration....more

Strategic Artificial Intelligence Planning Alert: A State and Federal Regulatory Roadmap for 2025 Compliance

Hinshaw & Culbertson - Privacy, Cyber & AI... on 2/21/2025

The World Economic Forum has stated that 88 percent of C-suite executives indicated that adopting artificial intelligence (AI) in their companies is a key initiative for 2025. Companies are pivoting from merely testing AI to...more

Data Privacy Day Checklist: Top 10 ways to protect your organization's data

Constangy, Brooks, Smith & Prophete, LLP on 1/27/2025

Tomorrow is International Data Privacy Day, so a happy day to all! More seriously, data privacy concerns and legislation continue to rapidly increase. It has been estimated that by the end of 2024 more than 75 percent of...more

California Starts 2025 with More Regulatory Action

Venable LLP on 1/20/2025

The California Privacy Protection Agency (CPPA) is starting the year by implementing new data broker regulations, which took effect in late December, and continuing to move toward the completion of new rules for automated...more

Opt-out Signals No Longer Just Noise: State Privacy Law Requirements Taking Shape

Nelson Mullins Riley & Scarborough LLP on 10/8/2024

Most businesses are aware of historical restrictions or limitations on selling personal information to third parties for monetary consideration. Perhaps less familiar are recent state laws giving consumers the right to tell...more

California Privacy Protection Agency Free to Resume Enforcement Efforts

Baker Donelson on 2/13/2024

A decision by California's Third District Court of Appeal has allowed the California Privacy Protection Agency (CPPA) to resume enforcement efforts. On February 9, 2024, the Court overturned a California Superior Court...more

CPPA Holds Meeting to Discuss Regulations for Automated Decision-Making Technology, Cybersecurity Audits, and Cybersecurity Risk...

WilmerHale on 8/9/2023

On July 14, the California Privacy Protection Agency (CPPA or the “Board”) hosted a meeting to discuss key issues. Notably, the Board’s New CPRA Rules Subcommittee (“the Subcommittee”) previewed three areas of forthcoming...more

Privacy ‘Deep in the Heart of Texas’: An Overview of the Texas Data Privacy and Security Act

BakerHostetler on 6/21/2023

Texas, long lauded as one of the most “business-friendly” states, has passed a comprehensive privacy law that will bring new regulations to consumer personal data. The new Texas Data Privacy and Security Act (“TDPSA”), H.B....more

GDPR and U.S. States' General Privacy Laws Deskbook

Sheppard Mullin Richter & Hampton LLP on 4/18/2023

California Consumer Privacy Act of 2018 (as amended by the California Privacy Rights Act of 2020) and Related Regulations - 1798.100 General Duties of Businesses that Collect Personal Information - (a) A business that...more

A measured approach | US Cybersecurity and Data Privacy review and update: Looking back on our 2022 articles to help navigate 2023

Eversheds Sutherland (US) LLP on 3/3/2023

The year 2023 will continue to have cybersecurity and data privacy front of mind for General Counsels. With sweeping new US and global laws and regulations coming online and the California Privacy Protection Agency (CPPA)...more

Standing to Sue: Is Theft of Drivers’ License Numbers Sufficient to Allege Imminent Threat of Future Harm?

Proskauer on Privacy on 12/19/2022

Judge Jeffrey White of the Northern District of California recently dismissed a putative class action lawsuit in which plaintiffs claimed they faced an imminent threat of future of harm in the form of identity theft and fraud...more

Reminder: California Employee Personal Data In-Scope of California Data Protection Law Effective Jan. 1, 2023

Benesch on 9/9/2022

The Employee Data Exemptions that existed in the original CCPA will no longer be effective in 2023 as the scope of the data protection law expands under the CPRA. In November 2020, California residents voted to adopt the...more

Comparison of the CCPA & CPRA with Pending 2021 Comprehensive Federal Privacy Legislation - H.R. 1816

BCLP on 12/31/2021

In the last year, we continued to see a shift in the privacy landscape of the United States, including the passage of comprehensive privacy legislation in both Virginia and Colorado, while other states still have bills under...more

Top Privacy Law Issues in 2022 as Congress Debates a Federal Law

WilmerHale on 12/29/2021

Will 2022 be the year for a national privacy law? We are seeing new federal proposals, ongoing negotiations about key issues such as a private right of action and state pre-emption, and new activity at the state level. There...more

How Large Employers Can Prepare for CCPA/CPRA Obligations for “HR Data” in 2022

Dorsey & Whitney LLP on 12/22/2021

Get ready, large employers. After years of amendments exempting the personal information of employees and other personnel from the California Consumer Privacy Act (“CCPA”), covered employers now have a firm deadline by which...more

Three More California Privacy Bills Become Law: CPPA Rulemaking Responsibility, Genetic Data Breaches, and New Genetic Information...

Dorsey & Whitney LLP on 10/14/2021

Californians voted to enact the California Privacy Rights Act (“CPRA”) almost one year ago. Last week, Governor Gavin Newsom signed three new privacy bills into law....more

California Consumer Privacy Act (CCPA) › Personal Data › Personal Information