California Consumer Privacy Act (CCPA), Personally Identifiable Information, Consumer Privacy Rights

Honda Settlement for CCPA Violations Should Be A Warning to all Businesses

Bond Schoeneck & King PLLC on 3/17/2025

On March 12, 2025, the California Privacy Protection Agency (the Agency) announced a settlement with American Honda Motor Company, Inc. (Honda) for multiple violations of the California Consumer Privacy Act (CCPA),...more

PII Compliance Requirements & Best Practices

Osano on 2/5/2025

Businesses need data from consumers, and the sharing and selling of this resource has become quite common. However, you also need to be mindful of the rights of the people whose data you collect, especially their personally...more

2024 Year-End Recap of California Consumer Privacy Act Activity

Morgan Lewis - Health Law Scan on 12/31/2024

First passed into law in 2018, the California Consumer Privacy Act (CCPA) received its first major update in 2020 by way of the California Privacy Rights Act (CPRA), through which the California Privacy Protection Agency...more

Navigating Consumer Opt-Outs in Corporate Transactions: Insights on California’s AB 1824

BCLP on 12/9/2024

On September 29, 2024, California Governor Gavin Newsom signed AB 1824 into law, amending the California Consumer Privacy Act (CCPA) to require entities involved in corporate transactions, such as mergers and acquisitions,...more

California’s Privacy Regulatory Odyssey Continues: Formal CCPA Rulemaking on the Horizon Amidst Expanded Data Broker Requirements

Wilson Sonsini Goodrich & Rosati on 11/18/2024

On November 8, 2024, the California Privacy Protection Agency (CPPA) Board met to discuss and vote on various proposed California Consumer Privacy Act (CCPA) regulations related to cybersecurity audits, automated...more

Practical Approaches to the CCPA

Troutman Pepper Locke on 11/13/2024

The California Consumer Privacy Act of 2018 (as amended, including by the California Privacy Rights Act, the CCPA) was drafted by a privacy rights activist, initially passed and later amended multiple times by the California...more

California Protects Neural Data

Nelson Mullins Riley & Scarborough LLP on 10/3/2024

California Governor Gavin Newsom approved an amendment to the California Consumer Privacy Act (CCPA) extending privacy rights to a person’s neural data. Neural data is defined as information that is generated by measuring the...more

The Rise of State Attorney General Privacy Enforcement

Troutman Pepper Locke on 10/3/2024

Since the passage of the California Consumer Privacy Act (CCPA) in 2018, and in the absence of a comprehensive data privacy law at the federal level, states have increasingly sought to enact their own privacy legislation. ...more

Do Dark Patterns Lurk on Your Website? 4 Steps Businesses Should Take as Regulators Focus on How Privacy Rights Are Presented on...

Fisher Phillips on 9/10/2024

Businesses with a website beware: California regulators just warned that the law prohibits your website from making website users jump through hoops or otherwise confusing them as they try to exercise their privacy rights,...more

Privacy Data Mapping: How to Map Sensitive Data & PII

Osano on 8/14/2024

Sprawling. That’s one way to describe the nature of data and responsibilities in modern organizations. There’s a lot of personally identifiable information (PII) and sensitive data to track, and knowing what lives where so...more

California Agency Provides Insights into CCPA Enforcement Priorities: 3 Tips for Staying Off the Enforcement Radar

Fisher Phillips on 8/2/2024

A recent board meeting of state officials revealed that the California agency responsible for overseeing the state’s landmark consumer privacy law received over 2,000 complaints for alleged violations in the past year alone –...more

California AG Continues Privacy Enforcement: Tilting Point Media Settles for Alleged COPPA and CCPA Violations

Nelson Mullins Riley & Scarborough LLP on 6/28/2024

In an ongoing effort to enforce the California Consumer Privacy Act (CCPA) and the Children’s Online Privacy Protection Act (COPPA), the California Attorney General's Office (CAG) announced a recent settlement against Tilting...more

How Much Data is Too Much? 4 Steps Businesses Should Take as California Focuses On Data Minimization Requirements

Fisher Phillips on 4/15/2024

Businesses take heed: California state officials just warned that the law prohibits you from collecting unnecessary data and retaining data for longer than necessary. The California Privacy Protection Agency published its...more

California Privacy Protection Agency Issues First-Ever Enforcement Advisory

WilmerHale on 4/11/2024

On April 2, the California Privacy Protection Agency (CPPA or “the Agency”) issued the Agency’s first-ever enforcement advisory. The advisory (“Applying Data Minimization to Consumer Requests”) reaffirms data minimization as...more

California Appeals Court Moves Up Enforcement Date for Latest CCPA Regulations

Wilson Sonsini Goodrich & Rosati on 2/14/2024

On February 9, 2024, the California Third District Court of Appeals in Sacramento overturned a lower court order that postponed enforcement of the California Privacy Protection Agency’s (CPPA) newest rules. The decision...more

Breaking News: California Can Immediately Enforce CCPA Regulations – Your 7-Step Plan for Data Privacy Compliance

Fisher Phillips on 2/13/2024

A California appeals court just pressed fast-forward and ruled that the state can immediately begin enforcing new regulations governing the state’s cornerstone data privacy law instead of waiting until late next month. This...more

The California Attorney General and the California Privacy Protection Agency Are Accelerating Enforcement on CCPA/CPRA...

Epstein Becker & Green on 7/27/2023

California businesses, including employers, who have not already complied with their statutory data privacy obligations under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA),...more

California Employers Beware: Your 5-Step Plan as Attorney General Announces CCPA Investigative Sweep

Fisher Phillips on 7/20/2023

California employers, beware: the state’s top prosecutor just announced his office is conducting an investigative sweep of whether and how large California employers have complied with data privacy and consumer protection...more

Are You Ready for the 3Cs?: California, Colorado, and Connecticut’s New Privacy Laws Become Enforceable July 1, 2023

Wilson Sonsini Goodrich & Rosati on 6/29/2023

On July 1, 2023, the Colorado Privacy Act (ColoPA) and Connecticut Data Privacy Act (CTDPA) will go into effect, joining California and Virginia, whose data privacy laws are already in effect. Notably, while the California...more

[Webinar] Coming Soon to a State Near You: New Privacy Laws and Evolving Best Practices - May 24th, 12:00 pm - 1:00 pm EDT

McDermott Will & Emery on 5/15/2023

On July 1, 2023, two more state privacy laws will take effect. The new laws in Colorado and Connecticut will impose requirements that extend beyond the rules in California and Virginia that took effect earlier this year. July...more

A measured approach | US Cybersecurity and Data Privacy review and update: Looking back on our 2022 articles to help navigate 2023

Eversheds Sutherland (US) LLP on 3/3/2023

The year 2023 will continue to have cybersecurity and data privacy front of mind for General Counsels. With sweeping new US and global laws and regulations coming online and the California Privacy Protection Agency (CPPA)...more

California Attorney General Announces Enforcement Sweep of Mobile Applications

Farella Braun + Martel LLP on 2/6/2023

Shortly before Privacy Day, California Attorney General (Cal AG) Rob Bonta announced a California Consumer Privacy Act (CCPA) enforcement sweep that targeted mobile applications....more

Summary and Comparison of U.S. Data Privacy Laws Since California's CCPA and CPRA

Burr & Forman on 11/15/2022

California started the process of individual U.S. states enacting individual privacy laws with its California Consumer Privacy Act (“CCPA”), which currently is in effect, as supplemented and amended by the California Consumer...more

“The Kid Gloves are Coming Off”: Honor Global Privacy Control Signals Before the CCPA Notice and Cure Period Expires in 2023

Vinson & Elkins LLP on 9/15/2022

On August 24, 2022, California Attorney General Rob Bonta announced a settlement with Sephora, one of the largest cosmetic retailers in the world, to resolve allegations that the company illegally sold consumer data and...more

Sephora Ordered to “Make-Up” for CCPA Violations

Alston & Bird on 9/9/2022

On August 24, 2022, California Attorney General Rob Bonta announced a $1.2 million dollar settlement with Sephora to account for alleged violations of the California Consumer Privacy Act (CCPA). This is the first CCPA...more

California Consumer Privacy Act (CCPA) › Personally Identifiable Information › Consumer Privacy Rights

"My best business intelligence, in one easy email…"