News & Analysis as of

Data Privacy Final Rules

Ropes & Gray LLP

HHS OCR Empowered to Administer and Enforce Federal Substance Abuse Privacy Part 2 Regulations

Ropes & Gray LLP on

On August 25, 2025, the U.S. Department of Health and Human Services (“HHS”) delegated the administration and enforcement (the “Delegation”) of 42 C.F.R. Part 2 (“Part 2”), the federal rules governing the confidentiality and...more

Baker Donelson

Powering Up Part 2: HHS Announced OCR Enforcement Authority for Part 2 Final Rule

Baker Donelson on

The Office for Civil Rights (OCR) will be ready to enforce the 2024 Part 2 Final Rule by the February 16, 2026, compliance deadline now that the U.S. Department of Health & Human Services (HHS) has delegated enforcement...more

Sheppard Mullin Richter & Hampton LLP

California Finalizes New CCPA Rules on ADMT, Cybersecurity Audits, and Risk Assessments

On July 24, the California Privacy Protection Agency (CPPA) approved a major rule package covering automated decision-making technology (ADMT), mandatory cybersecurity audits, and privacy risk assessments under the California...more

Coblentz Patch Duffy & Bass

California Finalizes CCPA Regulations on Automated Decision-Making Technology, Risk Assessments, and Cybersecurity Audits

In July 2025, the California Privacy Protection Agency (CPPA) adopted final regulations governing automated decision-making technology (ADMT), privacy risk assessments, and cybersecurity audits under the California Consumer...more

Sheppard Mullin Richter & Hampton LLP

CPPA Adopts ADMT, Cybersecurity and Risk Assessment Regulations

The CPPA scratched another task off the to-do list last month when it officially adopted proposed regulations under CCPA. These rules focus on three major areas: automated decision-making technology, risk assessments, and...more

Carlton Fields

Enforcement of SEC Amendments to Regulation S-P: A Trump-Era Trompe L’oeil?

Carlton Fields on

On May 16, 2024, the SEC, under former Chair Gary Gensler, adopted sweeping amendments to Regulation S-P, which governs the privacy and data security of nonpublic consumer personal and financial information for a broad range...more

Baker Botts L.L.P.

The CPPA Finalizes Rules on ADMT, Risk Assessments, and Cybersecurity Audits

Baker Botts L.L.P. on

On 24 July 2025, the California Privacy Protection Agency (CPPA) unanimously approved a long-awaited and -debated rulemaking package that addresses: (i) the use of automated decision-making technology, (ii) mandatory risk...more

Polsinelli

What You Need to Know About California’s Finalized CCPA Amendments: Part Two

Polsinelli on

On July 24, 2025, the California Privacy Protection Agency (CPPA) approved final regulations (the Rule) under the California Consumer Privacy Act of 2018 (CCPA), introducing new obligations related to automated...more

Morgan Lewis

CPPA Board Finalizes New Rules on ADMT, Cybersecurity Audits, and Risk Assessments

Morgan Lewis on

The California Privacy Protection Agency (CPPA) board unanimously voted on July 24, 2025 to finalize a package of regulations related to automated decision-making technology (ADMT), cybersecurity audits, and risk assessments....more

Ballard Spahr LLP

Reversing course, CFPB says it will issue revised open banking rule

Ballard Spahr LLP on

In a surprise announcement, the CFPB has said it will issue a revised Section 1033 open banking rule rather than simply killing the Biden Administration rule....more

Lowenstein Sandler LLP

Compliance Deadlines to Implement Significant Amendments to Regulation S-P Are Fast Approaching: Key Implications for Covered...

On May 16, 2024, the Securities and Exchange Commission (SEC) adopted sweeping amendments to Regulation S-P, which governs the privacy of nonpublic consumer personal and financial information for a broad range of financial...more

Goodwin

California’s New Privacy and Cybersecurity Regulations on Risk Assessments, Automated Decision making and Cybersecurity Audits:...

Goodwin on

During a Board Meeting on July 24, 2025, the California Privacy Protection Agency (CPPA) unanimously approved the long-awaited final text of its second rulemaking package, implementing a broad swath of new requirements...more

Constangy, Brooks, Smith & Prophete, LLP

What the Sensitive Data Rule means for “bulk data” and National Security compliance

As of July 9, the U.S. Department of Justice has begun full enforcement of a sweeping new data regulation known as the Sensitive Data Rule, or “SDR.” Implemented under President Biden’s Executive Order 14117, the SDR marks a...more

Katten Muchin Rosenman LLP

California Regulator Finalizes CCPA Rules for Automated Decision Making, Cybersecurity Audits and Risk Assessments

On July 24, 2025, during its scheduled Board Meeting, the California Privacy Protection Agency (CPPA) Board voted unanimously to finalize rules governing the use of automated decision-making technology, risk assessments,...more

Woodruff Sawyer

Enforcement of the HIPAA Reproductive Health Care Privacy Rule Vacated Nationwide

Woodruff Sawyer on

On June 18, 2025, a federal district court in Texas vacated a significant portion of the HIPAA Privacy Rule to Support Reproductive Health Care Privacy (“Final Rule”), which was implemented on April 24, 2024, on a nationwide...more

Ropes & Gray LLP

U.S. District Court Ruling Vacates HIPAA Final Rule that Strengthened Privacy Protections for Reproductive Health Information

Ropes & Gray LLP on

On June 18, 2025, the United States District Court for the Northern District of Texas Amarillo Division issued an opinion, Purl v. Department of Health and Human Services, declaring the U.S. Department of Health and Human...more

Proskauer - Employee Benefits & Executive...

District Court Vacates HIPAA Reproductive Health Care Rule

Last month, a federal district court in Texas vacated portions of the HIPAA final rule that added heightened protections for reproductive health care information (the “Final Rule”). Purl, et al. v. U.S. Department of Health...more

Epstein Becker & Green

DOJ’s Final Rule on Bulk Data Transfers: A Road Map

To help prevent countries of concern or “covered persons” from accessing U.S. government-related data and Americans’ bulk sensitive personal data, the National Security Division (NSD) of the U.S. Department of Justice (DOJ)...more

Hogan Lovells

Compliance considerations following Texas Court decision vacating key provisions of 2024 HIPAA Privacy Rule protecting...

Hogan Lovells on

The U.S. District Court for the Northern District of Texas vacated key portions of the 2024 updates to the HIPAA Privacy Rule that had strengthened protections for reproductive health care information. HIPAA-regulated...more

Saul Ewing LLP

Federal District Court Issues Opinion Vacating HHS Rule Protecting Reproductive Health Information

Saul Ewing LLP on

On June 18, 2025, U.S. District Judge Matthew Kacsmaryk of the Northern District of Texas (the “District Court”) vacated a 2024 final rule issued by the U.S. Department of Health and Human Services (“HHS”) under the Biden...more

Orrick, Herrington & Sutcliffe LLP

RegFi Episode 63: DOJ Issues Final Rule on International Data Transfers

Orrick Partners Matthew Coleman and Jeanine McGuinness join RegFi co-hosts Jerry Buckley and Sherry Safchuk to explore the implications of the Justice Department’s recent issuance of a final rule prohibiting and restricting...more

Fenwick & West LLP

Federal Court Halts HIPAA Reproductive Health Amendments - Substance Use Disorder Rule (Part 2) Stands

Fenwick & West LLP on

On June 18, 2025, the U.S. District Court for the Northern District of Texas issued a nationwide preliminary injunction in Purl v. HHS halting enforcement of the U.S. Department of Health and Human Services’ (HHS) April 2024...more

Quarles & Brady LLP

HIPAA Reproductive Health Rule Vacated Nationally

Quarles & Brady LLP on

A federal judge in Texas has vacated almost all of the 2024 HIPAA Rule to Support Reproductive Health Care Privacy that created special protections for reproductive health care information, finding that the U.S. Department of...more

Paul Hastings LLP

Cybersecurity Compliance in the New Administration

Paul Hastings LLP on

Last month, Paul Hastings sponsored the Cybersecurity Law Workshop at the Spring Privacy & Security Forum held at George Washington University in Washington, D.C. The Cybersecurity Law Workshop featured three panels of...more

Fisher Phillips

Reproductive Healthcare Privacy Rule Struck Down Nationwide by Texas Judge: What Providers and Employer-Sponsored Health Plans...

Fisher Phillips on

A federal judge in Texas just tossed out Biden-era reproductive healthcare privacy protections, halting a 2024 final rule with nationwide effect. The rule, which largely took effect in December and created new HIPAA privacy...more

174 Results
 / 
View per page
Page: of 7

"My best business intelligence, in one easy email…"

Your first step to building a free, personalized, morning email brief covering pertinent authors and topics on JD Supra:
*By using the service, you signify your acceptance of JD Supra's Privacy Policy.
- hide
- hide