News & Analysis as of

Data Privacy Corporate Counsel

Wilson Sonsini Goodrich & Rosati

State AGs Unveil Investigation Sweep Targeting Businesses Ignoring Consumer Opt-Out Signals

On September 9, 2025, the attorneys general of California, Colorado, and Connecticut and the California Privacy Protection Agency (CPPA) announced a joint investigative sweep of potential failures by businesses to honor...more

Skadden, Arps, Slate, Meagher & Flom LLP

EU Court Upholds EU-US Data Flows in Latombe v Commission

Under the EU General Data Protection Regulation (GDPR), the European Commission can issue “adequacy” decisions allowing data to be transferred from the EU to a non-EEA country without additional security measures such as...more

Loeb & Loeb LLP

A Cautionary Tale About Algorithmic Pricing Software

Loeb & Loeb LLP on

The use of algorithmic pricing software, including dynamic and competitive pricing, raises fairness, antitrust and privacy concerns when the data is based on personal, nonpublic or competitively sensitive data....more

Mintz - Privacy & Cybersecurity Viewpoints

FTC COPPA Enforcement - Still Alive and Well

Two recent high profile settlements signal that the Federal Trade Commission (“FTC”) will continue to aggressively enforce violations of the Children’s Online Privacy Protection Act (“COPPA”). In a particularly high-profile...more

Baker Botts L.L.P.

CJEU Clarifies Requirements and Definition of Pseudonymisation

Baker Botts L.L.P. on

On September 4, 2025, the Court of Justice of the European Union (“CJEU”), delivered its judgment in European Data Protection Supervisor ("EDPS") v. Single Resolution Board ("SRB") (C-413/23 P). The decision clarifies two...more

Wilson Sonsini Goodrich & Rosati

EU Court Upholds the Validity of the EU-U.S. Data Privacy Framework

On September 3, 2025, the EU General Court (the General Court) (the second-highest court in the European Union (EU)) upheld the validity of EU-U.S. Data Privacy Framework (DPF) in Philippe Latombe v European Commission...more

Troutman Pepper Locke

California Privacy and AI Legislation Update: September 2, 2025

Troutman Pepper Locke on

After the August 29 deadline for fiscal committees to report bills, four of the nine privacy-related bills and 17 of the 23 AI-related bills we have been tracking are still alive....more

Coblentz Patch Duffy & Bass

CPPA Enforcement Actions: Key Lessons from Honda, Todd Snyder, and Healthline

The California Privacy Protection Agency (CPPA) is now in its second year with full enforcement powers and has begun to exercise its authority under the California Consumer Privacy Act (CCPA) in significant ways in 2025. With...more

Ogletree, Deakins, Nash, Smoak & Stewart,...

European Court of Justice Ruling on Works Agreements: Reinforcing GDPR Compliance in the Workplace

The European Court of Justice (ECJ) recently delivered a decision that significantly impacts how employers and works councils across the European Union approach the processing of employee data. The ruling clarifies that works...more

Troutman Pepper Locke

California Privacy and AI Legislation Update: August 25, 2025

Troutman Pepper Locke on

Twenty-three privacy and AI-related bills are set for appropriations committee hearings on August 29 — the deadline for bills to advance out of fiscal committees — while three other bills have passed out of committee and are...more

Fisher Phillips

New Lawsuit Highlights Concerns About AI Notetakers: 7 Steps Businesses Should Take

Fisher Phillips on

A new lawsuit just filed against Otter.ai underscores the legal and compliance risks companies face when using AI notetakers – and serves as a good reminder to deploy best practices to reduce your risks. The August 15 case...more

Baker Botts L.L.P.

Canada's Officer of the Privacy Commissioner Issues Guidance on Biometric Data Processing

Baker Botts L.L.P. on

On August 11, 2025, the Office of the Privacy Commissioner of Canada ("OPC") issued two sets of guidance for processing of individual's biometric data: one for federal institutions and one for private businesses. Below we...more

Paul Hastings LLP

You’ve Got Mail: NYDFS Enforcement Action Highlights Cybersecurity Risk of Over-Retention and Other Risks

Paul Hastings LLP on

On Aug. 14, 2025, the New York Department of Financial Services (NYDFS) issued a Consent Decree announcing that Healthplex, Inc. (Healthplex) has agreed to pay a $2 million fine, as a result of an investigation into a 2021...more

Fisher Phillips

What Businesses Should Ask Before Hiring an AI Bias Auditor – With Bonus Free Questionnaire

Fisher Phillips on

You are increasingly using AI to help shape your decisions about who gets hired, promoted, or even approved for a loan. But if your algorithm results in bias, your organization could face lawsuits, regulatory scrutiny, and...more

Smith Anderson

Brewing Trouble: The Steep Price of Privacy Missteps

Smith Anderson on

A recent high-profile breach at a women-focused dating app underscores how quickly a privacy misstep can escalate into lawsuits and reputational harm. The incident offers a cautionary tale for any company handling sensitive...more

Foley & Lardner LLP

California Courts Announce New AI Regulations

Foley & Lardner LLP on

On July 18, 2025, California’s Judicial Council approved a set of rules for integrating generative AI into judicial operations. With the adoption of Rule 10.430 and Standard 10.80 specifically, the courts are looking to put...more

Jaburg Wilk

Think Twice Before You Type: AI Chats May Not Be Private or Protected

Jaburg Wilk on

Last week, I was half-listening to one of my favorite podcasts during a workout when something OpenAI CEO Sam Altman said immediately caught my attention. He was chatting it up with comedian Theo Von on This Past Weekend when...more

Husch Blackwell LLP

U.S. Privacy Litigation Update: July 2025 Decisions

Husch Blackwell LLP on

In this post: (1) California courts split on personal jurisdiction post-Briskin; (2) District courts dismiss VPPA claims against movie theaters & online platforms; (3) ND Cal courts find “crime-tort” exception met in...more

Wiley Rein LLP

FTC Consumer Protection and Privacy Enforcement Series: PADFA Enforcement—What Companies Need to Know

Wiley Rein LLP on

As part of our series to provide practical insights into emerging Federal Trade Commission (FTC) priority areas for consumer protection and data privacy enforcement, we are taking a deep dive into the Protecting Americans’...more

Troutman Pepper Locke

Analyzing the Amendments to State Consumer Data Privacy Laws Passed in 2025

Troutman Pepper Locke on

While no state has passed a new consumer data privacy law in 2025, five states passed bills amending their existing laws....more

Ogletree, Deakins, Nash, Smoak & Stewart,...

California Finalizes Groundbreaking Regulations on AI, Risk Assessments, and Cybersecurity, Part II: What Businesses Need to Know

In July 2025, the California Privacy Protection Agency (CPPA) Board unanimously approved new regulations pursuant to the California Consumer Privacy Act (CCPA) that specifically address the use of automated decisionmaking...more

Skadden, Arps, Slate, Meagher & Flom LLP

Cookie Consent: Unpacking the UK ICO’s Proposed New Approach to Online Advertising

- What is new: The ICO is proposing to relax its enforcement of cookie consent requirements, meaning user consent would not be required for lower-risk advertising cookies. - Why it matters: The proposals aim to address...more

Verrill

Minnesota’s Consumer Data Privacy Act: An Overview

Verrill on

Twenty-nine years after Prince warned us about the dangers of the Internet, his home state has taken action to protect consumers who use it. On July 31, 2025, Minnesota joined the roughly twenty states that have adopted...more

Morgan Lewis

State AGs Take the Lead on Privacy Enforcement as Federal Action Stalls

Morgan Lewis on

With the continued absence of comprehensive federal privacy legislation after nearly 20 years of debate, state attorneys general (AGs) are increasingly asserting their role as primary regulators in the data privacy space....more

Morris, Manning & Martin, LLP

New Laws Regulate How Companies Interact with Children's Data

If your business operates a website or provides online services that collect data about children, you should be aware of expanding legal requirements from U.S. states regulating how private companies interact with minors....more

1,201 Results
 / 
View per page
Page: of 49

"My best business intelligence, in one easy email…"

Your first step to building a free, personalized, morning email brief covering pertinent authors and topics on JD Supra:
*By using the service, you signify your acceptance of JD Supra's Privacy Policy.
- hide
- hide