California Consumer Privacy Act (CCPA), Sensitive Personal Information, Data Protection

State Privacy Enforcement Accelerates, With California Targeting Substantive Compliance and Connecticut Bringing Its First Action

Skadden, Arps, Slate, Meagher & Flom LLP on 7/22/2025

As federal privacy enforcement shows signs of slowing, states are aggressively stepping in to fill the void. On July 1, 2025, the California attorney general (AG) announced a $1.55 million settlement with Healthline Media,...more

Connecticut Enacts Significant Amendments to State’s Data Privacy Law

Husch Blackwell LLP on 6/26/2025

On June 25, Connecticut Governor Lamont signed Senator James Maroney’s SB 1295 into law. The bill makes several notable changes to Connecticut’s existing consumer data privacy law, including modifying its applicability...more

3 Key Takeaways | U.S. Data Protection Legal Update

Kilpatrick on 4/30/2025

Kilpatrick’s Tony Glosson recently spoke at the German Accelerator New York City Cohort during the organization’s “Immersion Week.” He discussed recent developments in the ever-evolving legal landscape of U.S. data...more

Client Alert: Latest Developments in California Privacy Enforcement in March 2025 – Investigative Sweep and CPPA Enforcement...

Jenner & Block on 3/17/2025

California has again made headlines this week with two notable data privacy developments under the California Consumer Privacy Act (“CCPA”): (1) the California Attorney General’s (“California AG”) announcement of a new...more

PII Compliance Requirements & Best Practices

Osano on 2/5/2025

Businesses need data from consumers, and the sharing and selling of this resource has become quite common. However, you also need to be mindful of the rights of the people whose data you collect, especially their personally...more

New Year, New Privacy Laws!

Bass, Berry & Sims PLC on 1/10/2025

States continued to pass comprehensive consumer privacy laws throughout 2024. 2025 brings eight new state-level comprehensive consumer privacy laws into effect. As with the five state privacy laws that went into effect in...more

That’s the Way the Cookie Crumbles

Burr & Forman on 9/13/2024

Do you know what cookies your company’s website is using? If not, you likely do not know whether your company’s website is honoring users’ data protection choices involving the use of cookies. You should know and care so your...more

Accelerating Privacy Scrutiny: Key Developments for the Auto Industry

Venable LLP on 6/4/2024

Recent U.S. developments indicate a growing focus on regulating and investigating the data privacy practices of companies in the automotive sector. The Federal Trade Commission (FTC) recently highlighted in a blog post its...more

Maryland Legislature Passes Consumer Data Privacy Bill

Husch Blackwell LLP on 4/8/2024

Keypoint: Maryland’s bill diverges from other Washington Privacy Act variants passed to date with unique data minimization, sensitive data, minor’s data privacy, and unlawful discrimination provisions (among others)....more

New Jersey Enacts Comprehensive Privacy Law

WilmerHale on 1/18/2024

On January 8, 2024, the New Jersey Assembly and Senate passed Senate Bill 332 (S. 332, or the “Act”), and it was signed into law by Governor Phil Murphy on January 16. This makes New Jersey the first state to enact a...more

Are You Ready? How CCPA-Regulated Businesses Can Plan for Compliance with California’s Forthcoming Cybersecurity Regulations

McCarter & English, LLP on 12/5/2023

The California Privacy Protection Agency (CPPA) released initial draft regulations for cybersecurity audits (which have since been amended) and risk assessments late this summer. The agency’s board of directors addressed the...more

CCPA Amendments Extend Protections to Reproductive Health and Citizenship Status

Sheppard Mullin Richter & Hampton LLP on 10/27/2023

Governor Newson recently signed two amendments to the CCPA strengthening protections for certain data types. The changes go into effect January 1, 2024....more

A measured approach | US Cybersecurity and Data Privacy review and update: Looking back on our 2022 articles to help navigate 2023

Eversheds Sutherland (US) LLP on 3/3/2023

The year 2023 will continue to have cybersecurity and data privacy front of mind for General Counsels. With sweeping new US and global laws and regulations coming online and the California Privacy Protection Agency (CPPA)...more

CPRA Draft Regulations – Next Round(s)

Bass, Berry & Sims PLC on 11/10/2022

It has been a bustling fall for the California Privacy Protection Agency (CPPA or Agency). In the spirit of the upcoming holiday season, the Agency gifted us not one but two rounds of proposed modifications to the regulations...more

CPPA Board Meeting Modifies CPRA Regulations

Snell & Wilmer on 11/9/2022

The California Privacy Protection Agency (CPPA) held a board meeting on October 28 - 29, 2022 (the “Meeting”) to review proposed modifications to the California Privacy Rights Act (CPRA). The CPRA is effectively an amendment...more

Employee and B2B Exemptions Under CCPA Expire January 1, 2023: What Employers Should Be Thinking About To Prepare

Snell & Wilmer on 9/30/2022

The California Consumer Privacy Act (CCPA) took effect on January 1, 2020, instituting requirements on certain businesses processing personal information about California consumers. Businesses subject to the law currently...more

Understanding the American Data Privacy and Protection Act

Mintz - ML Strategies on 6/9/2022

On Friday, June 3, Representative Frank Pallone (D-NJ), Chairman of the House Energy & Commerce Committee, Representative Cathy McMorris Rodgers (R-WA), the committee’s Ranking Member, and Senator Roger Wicker (R-MS), Ranking...more

California Consumer Privacy Act, California Privacy Rights Act FAQs for Covered Businesses

Jackson Lewis P.C. on 1/20/2022

The California Consumer Privacy Act (CCPA), considered one of the most expansive U.S. privacy laws to date, went into effect on January 1, 2020. The CCPA placed significant limitations on the collection and sale of a...more

Colorado’s new privacy law: How it stacks up against other US privacy laws

Eversheds Sutherland (US) LLP on 7/15/2021

There are many similarities between the Colorado Privacy Act (ColoPA), the California Consumer Privacy Act (CCPA), the California Privacy Rights Act (CPRA), the Virginia Consumer Data privacy Act (VCDPA), and Europe’s GDPR,...more

Top Operational Impacts of Virginia's New Privacy Law (CDPA)

Ankura on 6/28/2021

The Virginia Consumer Data Protection Act (CDPA) overwhelmingly passed both legislative chambers this month and is expected to be signed by the Governor in the coming weeks with an effective date of January 1, 2023. Best...more

Introduction To The Virginia Consumer Data Protection Act – Part I

Cozen O'Connor on 5/11/2021

Virginia recently joined California in enacting a comprehensive data protection law intended to protect the privacy of its residents. The Virginia Consumer Data Protection Act (the “VCDPA”) is scheduled to take effect on...more

“Data Knows No Borders”: Virginia’s Privacy Law Won’t Give Businesses Relief From The CCPA, But Consumers Nationwide Get...

Goodwin on 3/9/2021

On March 2, 2021, Virginia enacted the Consumer Data Protection Act (“VCDPA”). The VCDPA will become effective January 1, 2023. The VCDPA shares its roots with the California Consumer Protection Act (“CCPA”) and the recently...more

California Consumer Privacy Act (CCPA) › Sensitive Personal Information › Data Protection