We get Privacy for work — Episode 8: The Surge in Data Breach Lawsuits: Trends and Tactics
Regulatory Rollback: CFPB’s Withdrawal of Informal Guidance Sparks New Litigation Dynamics – The Consumer Finance Podcast
Consumer Finance Monitor Podcast Episode: Should Section 5 of the FTC Act be Amended to Add a Private Right of Action?
Consumer Finance Monitor Podcast Episode: Challenges of Using the Current Law to Address Dark Patterns, with Guest Gregory Dickinson, Assistant Professor, St. Thomas University
Webinar Recording: An Overview of the American Data Privacy and Protection Act
CF on Cyber: An Update on the Changes to the Florida Telemarketing Act
The DIFC Data Protection Law No. 5 of 2020 (DIFC Data Protection Law) was amended on 8 July 2025 to introduce several substantive changes....more
The landscape of U.S. state data privacy laws in the U.S. has grown increasingly complex in 2024. Seven additional states have enacted comprehensive privacy laws, raising the total number of states having their own privacy...more
On Thursday, June 13, 2024, Vermont’s Governor Phil Scott vetoed the Vermont Data Privacy Act (H.121) (“VTDPA”), potentially delaying what has been hailed as one of the most robust consumer data privacy laws in the nation....more
Last week, the Vermont legislature passed H. 121, the Vermont Data Privacy Act. This law will make Vermont the 18th state to grant consumers privacy rights similar to those under the California Consumer Privacy Act (CCPA). It...more
On May 9, Maryland Governor Wes Moore signed the Maryland Online Data Privacy Act (MODPA) into law, making Maryland the 17th state to enact a comprehensive privacy law. Despite its name, MODPA’s coverage is not limited to...more
Last month, two key members of Congress released a draft of the American Privacy Rights Act (“APRA”), comprehensive legislation that would change the landscape of consumer privacy law in the United States. If passed, APRA...more
On April 12, 2024, the Nebraska Legislature passed the Data Privacy Act (NEDPA), sending the bill to Governor Jim Pillen’s desk for signature. NEDPA adds to the patchwork of state consumer privacy laws in that it does not...more
2023 was a record-breaking year, with legislators in Delaware, Indiana, Iowa, Montana, Oregon, Tennessee and Texas passing comprehensive data privacy laws, joining California, Colorado, Connecticut, Utah and Virginia. Already...more
The Delaware Personal Data Privacy Act (DPDPA or Act) became law on September 11, 2023, making Delaware the 13th state to enact a comprehensive consumer data privacy law, joining California, Virginia, Colorado, Connecticut,...more
This is Part Nine in a series of legal updates on the Washington My Health My Data (“WMHMDA”) where Quarles continues its deep dive into the various factors and intricacies of WMHMDA that are creating waves in the privacy...more
Florida has joined the growing list of states enacting comprehensive privacy laws. Governor Ron DeSantis (R) signed the Florida Digital Bill of Rights (“FDBR”) into law on June 6th. How does it compare?...more
Indiana's New Law is on the Books - Last month, three more state legislatures passed comprehensive data privacy laws. Just this week, Indiana’s governor signed one of them - the Indiana Consumer Data Privacy Act (“ICDPA’) -...more
With Governor Kim Reynolds signing S.F. 262 into law on March 29, 2023, Iowa became the sixth state to enact a comprehensive consumer privacy law. The text can be found here. The law goes into effect on January 1, 2025. As...more
BakerHostetler’s Data Security Incident Response Report is a one-of-a-kind resource that leverages aggregated data from security incidents. Our Digital Risk Advisory and Cybersecurity team has shared insights from...more
On April 28, 2022, the Connecticut legislature took the final step to become very close to passing comprehensive consumer privacy legislation as the Connecticut House of Representatives voted 144-5 in favor of Senate Bill 6,...more
Following in the footsteps of California, Virginia, and Colorado, Utah has become the fourth state to pass its own comprehensive privacy law. On March 24, Utah officially enacted the Utah Consumer Privacy Act (“UCPA”) after...more
The city of Portland, Oregon, made headlines when it became the first jurisdiction in the nation to enact a blanket ban on the use of facial recognition technology (“FRT”) by all private entities physically located within its...more
The COVID-19 pandemic has rapidly accelerated our reliance on digital services and platforms, which brings new challenges and expectations for data privacy. But, to date, there has been little movement towards...more
Countries all over the globe have been changing their data privacy landscape to account for the information protection required in the digital age. Organizations are handling large amounts of personal data gathered from...more
Despite its antecedents in one of the most widely cited law review articles of all time from more than 130 years ago, modern United States privacy law is roughly twenty years old. Even though still in its relative infancy,...more
On 13 April 2021, the British Virgin Islands (“BVI” or “Virgin Islands”) became the latest jurisdiction to enact a comprehensive information privacy law when the territory published the Data Protection Act, 2021 (the “DPA...more
On Friday, April 30, Florida’s legislature closed its 2021 session without passing the much anticipated Florida Privacy Act. The Act largely failed to pass due to a disagreement between Florida’s house that wanted a private...more
On April 6, 2021, the North Carolina General Assembly introduced Senate Bill 569: the Consumer Privacy Act of North Carolina (CPA), that would expand protections to consumers in the North Carolina Identity Theft Protection...more
Turns out that Florida’s greatest rivalry is not between FSU and UF. Rather, it appears to be between businesses and consumers. At least, that is how it appears to be if you examine the Florida Legislature’s latest...more
Florida is currently considering data privacy legislation that would require covered businesses to implement comprehensive policies and procedures to provide privacy rights to consumers. The proposed legislation, House Bill...more