Compliance Perspectives: Rolling Out New Compliance Initiatives
In this Privacy, Cyber & AI Decoded alert, we cover Colorado’s Biometric Identifier Requirements, Delaware’s Data Protection Assessment Requirement, Minnesota’s new comprehensive privacy law going into effect, Tennessee’s...more
The U.S. Department of Justice (DOJ) is set to enforce its sweeping new rule on certain U.S. data transactions with countries of concern and covered persons as of July 9, 2025. The new rule regarding “Preventing Access to...more
Starting this June, the first tier of small business lenders will begin collecting certain data to report to the Consumer Financial Protection Bureau under Rule 1071, issued pursuant to Section 1071 of the Dodd-Frank Act....more
On September 29, 2024, Governor Newsom approved AB 347 which, among other things, finally answers the question of which California agency will be tasked with enforcing and interpreting at least some of California’s PFAS in...more
Exactly one year from now, on September 12, 2025, the EU Data Act will enter into application. This new regulation provides harmonized rules on data access, switching cloud providers, and interoperability requirements across...more
The Online Safety Act (the OSA) received Royal Assent on 26 October 2023 and is now in force. The OSA establishes an extensive regulatory framework for providers of online user-to-user services and search services with...more
The start of the school year for many counties in Georgia and K-12 districts across the country is only a few hours away, and the college semester is right around the corner. Another deadline, however, should be front of mind...more
The PDPL has broad extraterritorial scope and substantial penalties for non-compliance, with full enforcement expected to start in September. The Personal Data Protection Law (PDPL) is the first comprehensive data...more
On June 30, the Sacramento County Superior Court issued a ruling that will delay enforcement of regulations issued pursuant to the California Privacy Rights Act (CPRA) to March 29, 2024. These regulations were originally...more
A California court has held that the regulations the California Privacy Protection Agency adopted in March 2023 may not be enforced until March 2024. On June 30, 2023, a day before the California Consumer Privacy Act...more
In an unexpected turn of events, a California court postponed enforcement of the new California Consumer Privacy Act (CCPA) regulations until March 29, 2024. The court’s final decision came at the eleventh hour on June 30,...more
The updated California data protection law itself is now in effect and enforceable as of July 1, 2023; however, enforcement of the regulations—which clarify key provisions of the law—is delayed. Just before full...more
Companies may face class action lawsuits as early as July 2023 based on Washington’s new privacy law. Governor Jay Inslee recently signed House Bill 1155, the WA My Health, My Data Act (“MHMDA” or “the Act”), giving companies...more
The Florida legislature recently passed Senate Bill (SB) 1718 , which, if signed into law, would require both private employers with twenty-five or more employees and public employers in Florida to use the E-Verify system to...more
New York City’s Department of Consumer and Worker Protection (DCWP) is expected to begin enforcing the City’s novel artificial intelligence (AI) bias audit law on July 5, 2023. This law prohibits the use of automated decision...more
The Government has now announced that it intends to launch the Register of Overseas Entities at Companies House (“ROE”) on 1 August 2022. We await formal confirmation (in the form of a commencement order) but we anticipate...more
As we previously notified our readers, it’s a new dawn of electronic monitoring in New York. Effective May 7, 2022, employers engaging in electronic monitoring must provide detailed notice to their employees. Notice will be...more