We get Privacy for work — Episode 8: The Surge in Data Breach Lawsuits: Trends and Tactics
Regulatory Rollback: CFPB’s Withdrawal of Informal Guidance Sparks New Litigation Dynamics – The Consumer Finance Podcast
Consumer Finance Monitor Podcast Episode: Should Section 5 of the FTC Act be Amended to Add a Private Right of Action?
Consumer Finance Monitor Podcast Episode: Challenges of Using the Current Law to Address Dark Patterns, with Guest Gregory Dickinson, Assistant Professor, St. Thomas University
Webinar Recording: An Overview of the American Data Privacy and Protection Act
CF on Cyber: An Update on the Changes to the Florida Telemarketing Act
The DIFC Data Protection Law No. 5 of 2020 (DIFC Data Protection Law) was amended on 8 July 2025 to introduce several substantive changes....more
A national leader in privacy law, California was among the first states to include an express right to privacy in its constitution, create a data breach notification law, and codify robust consumer data protections. ...more
Last month, two key members of Congress released a draft of the American Privacy Rights Act (“APRA”), comprehensive legislation that would change the landscape of consumer privacy law in the United States. If passed, APRA...more
On April 12, 2024, the Nebraska Legislature passed the Data Privacy Act (NEDPA), sending the bill to Governor Jim Pillen’s desk for signature. NEDPA adds to the patchwork of state consumer privacy laws in that it does not...more
New Jersey recently became the first state to pass a comprehensive privacy law in 2024. New Jersey is the thirteenth state to pass such a law—and yet another comprehensive privacy law is making its way through New Hampshire’s...more
Florida has joined the growing list of states enacting comprehensive privacy laws. Governor Ron DeSantis (R) signed the Florida Digital Bill of Rights (“FDBR”) into law on June 6th. How does it compare?...more
Last week’s blog detailed the wave of state legislation that occurred in the U.S. during 2021. It is no surprise that there were also many data privacy developments abroad. It is crucial that organizations affected by...more
Despite its antecedents in one of the most widely cited law review articles of all time from more than 130 years ago, modern United States privacy law is roughly twenty years old. Even though still in its relative infancy,...more
On 13 April 2021, the British Virgin Islands (“BVI” or “Virgin Islands”) became the latest jurisdiction to enact a comprehensive information privacy law when the territory published the Data Protection Act, 2021 (the “DPA...more
Stricter data privacy regulations and enforcement is no longer a new trend, it’s the known future. Living in a world of increasing data that often contains private information, lawmakers in several countries have realized the...more
It’s a new year and it looks like 2021 is going to be another eventful one for privacy. In the past few weeks, we’ve seen several states introduce new privacy legislation, starting with Washington. On January 5, the...more
Businesses across Washington state – and those that do business there – might want to brace themselves for another round of debate that could lead to the passage of California-style privacy legislation in 2021. After failures...more
Next Tuesday is election day, and this year, California voters are deciding whether to support another statewide privacy initiative – the California Privacy Rights Act (CPRA) (Proposition 24). This measure would expand on...more
On Thursday, September 17, Senate Commerce Committee Chairman Roger Wicker (R-MS) and other Committee Republicans introduced a finalized version of their long-awaited data privacy legislation, which was first unveiled as a...more
The California Privacy Rights Act (CPRA) is going to be on the November 3 ballot. The CPRA would amend the California Consumer Privacy Act (CCPA) to provide a greater level of rights for consumers and more stringent...more
One of the most significant consumer rights offered by the new California Consumer Privacy Act (CCPA) is what we call the “private right of action” afforded by the law. A private right of action under a law basically means...more
In May of 2018, the European Union enacted the General Data Protection Rules, or GDPR, a legal framework that outlines not only how companies may collect and process personal information of EU residents, but how that data is...more
California recently passed the California Consumer Privacy Act of 2018, described by Former Gov. Jerry Brown as a “historic step” for California consumers, “giving them control over their personal data.” He claimed that the...more
Once the California Consumer Privacy Act (CCPA) takes effect on January 1, 2020, the California courts will be inundated with a litany of interpretive questions. One that will no doubt surface concerns the proper...more
While the California Consumer Privacy Act (CCPA) and its potential amendments are still a top concern for businesses, other states are showing that they will not be left behind when it comes to enhanced privacy legislation....more
Similarities aside, there are significant differences between the two privacy laws. The CCPA grants rights to individuals who are residents of California under a definition used for income tax purposes....more
California legislators have passed many bills to amend the California Consumer Protection Act since the law was passed. Last week there was significant developments in the status of those bills, as we reported. In addition to...more
Looking Back - the California Consumer Privacy Act, and How We Got Here - As companies were getting up-to-speed on the effects of the European Union’s General Data Protection Regulation (GDPR) last year, California quickly...more
Enacted in June 2018, the California Consumer Privacy Act (CCPA) has been criticized for its broad scope, the burdens it would impose on businesses, and its textual ambiguities. The legislation arose from a controversial...more
As noted in our two prior alerts, CCPA Part 1 and Part 2, the California Consumer Privacy Act (CCPA) is bringing GDPR-like data protection to the United States. Other states are now following suit. The California...more