News & Analysis as of

Regulatory Requirements Data Protection State Privacy Laws

Troutman Pepper Locke

US State Risk Assessment and Impact Assessment Requirements

Troutman Pepper Locke on

The number of instances in which businesses must conduct risk assessments and impact assessments under state privacy and AI laws has exploded. In recent months, California and Connecticut have added additional — and...more

Cooley LLP

Maryland’s Unique State Privacy Law Takes Effect October 1 – What You Should Know

Cooley LLP on

On October 1, Maryland’s law may be the last US state comprehensive privacy law to take effect in 2025, but it certainly is not least. While the Maryland Online Data Privacy Act of 2024 (MODPA) mirrors existing US state...more

Coblentz Patch Duffy & Bass

Updates to U.S. Health-Data Privacy and Wearable Tech

This year marks a pivotal shift from the era of rapid, unregulated health-tech innovation to one of stringent governance. The proliferation of wearable devices, health applications and remote monitoring tools has led to an...more

Baker Donelson

Practical Next Steps for Businesses as Maryland's Updated Consumer Data Privacy Laws Take Effect in October

Baker Donelson on

Maryland's Online Data Privacy Act of 2024 (MODPA) will take effect on October 1, 2025, and will be enforced by the Maryland Attorney General (AG) beginning April 1, 2026. MODPA sets a new, more stringent benchmark among U.S....more

Coblentz Patch Duffy & Bass

Updates to Children's Privacy Federal and State Laws

Over the past year, the Federal Trade Commission (FTC) has implemented significant updates to the Children’s Online Privacy Protection Act (COPPA) Rule meant to strengthen key protections for children’s privacy online. COPPA...more

McDermott Will & Schulte

[Webinar] Privacy Legislation in 2025: What's New and What's Next - September 16th, 12:00 pm - 1:00 pm EDT

The US privacy law landscape continues to evolve each year, and 2025 is no exception. While there were no new comprehensive privacy laws were enacted this year, there were still significant developments. These include...more

Fox Rothschild LLP

Biometrics in Advertising: Consent Is Not Enough

Fox Rothschild LLP on

When using biometrics in advertising, consent is not enough. IAB Canada, a trade association for Canada’s interactive marketing and advertising industry, recently issued policy paper on using biometrics in digital...more

Hudson Cook, LLP

Massachusetts Data Breach Settlement: A Wake-Up Call for Rental Housing Operators

Hudson Cook, LLP on

On August 19, 2025, the Massachusetts Attorney General announced a $795,000 settlement with Peabody Properties, Inc., a Braintree, Massachusetts-based property management company, over serious failures in its handling of...more

Morrison & Foerster LLP

A MoFo Privacy Minute: Neural Data Added to Montana’s Genetic Information Privacy Act

Question: How does Montana’s amendment to its Genetic Information Privacy Act (“GIPA”) regulate neurotechnology data, and what obligations might my business face compared to the amendments that were passed in Colorado and...more

Amundsen Davis LLC

Don’t Mess With Texas: The Lone Star State Has Become a Leader in Data Privacy and AI Regulation

Amundsen Davis LLC on

While generally considered a business-friendly state, Texas is taking an increasingly important role in regulating how U.S. companies use their information technology. Over the past few years, Texas has adopted path-breaking...more

The Volkov Law Group

AI “Hysteria” and Legal and Compliance Risks (Part I of II)

The Volkov Law Group on

Well, let’s all admit it — we have all enjoyed using the new, hot technology, AI. It is an understatement to opine that AI is transforming our world, business and personal. This development compares to the 1990s and the...more

Butler Snow LLP

What Tennessee’s New Privacy Law Means for Your Business

Butler Snow LLP on

On July 1, 2025, Tennessee officially joined the growing list of states enacting consumer privacy laws with the Tennessee Information Protection Act (TIPA). Inspired by the California Consumer Privacy Act, TIPA introduces a...more

Verrill

Minnesota’s Consumer Data Privacy Act: An Overview

Verrill on

Twenty-nine years after Prince warned us about the dangers of the Internet, his home state has taken action to protect consumers who use it. On July 31, 2025, Minnesota joined the roughly twenty states that have adopted...more

Herbert Smith Freehills Kramer

Independent Cybersecurity Audits Will Be Required for ‘Significant Risk’ Under CCPA

The California Privacy Protection Agency (CPPA) has unanimously adopted new regulations requiring certain businesses subject to the California Consumer Privacy Act (CCPA) to conduct annual audits of their cybersecurity...more

Orrick, Herrington & Sutcliffe LLP

CPPA fines data broker for failing to register under the Delete Act

On July 28, the CPPA released a stipulated final order to impose a $55,400 administrative fine on a data broker for failing to register with the agency by the January 31, 2024, deadline as required by California’s Delete Act....more

Troutman Amin LLP

ATTENTION ATTENTION: Minnesota’s Data Privacy Act Is Now Law As Of Today- July 31, 2025!

Troutman Amin LLP on

Starting today, July 31, 2025, the Minnesota Consumer Data Privacy Act (“MCDPA”) officially takes effect. Signed by Governor Tim Walz in May 2024, this act majorly affects how the personal data of Minnesota residents is...more

Shook, Hardy & Bacon L.L.P.

California Adopts Regulations on Cybersecurity Audits

California has approved new regulations requiring some companies to conduct annual audits of their cybersecurity programs, including the policies, procedures, and practices for protecting personal information. On July 24,...more

Alston & Bird

CPPA Board to Discuss Draft CCPA Regulations, DROP Requirements

Alston & Bird on

The California Privacy Protection Agency (“CPPA”) Board will meet on Thursday, July 24 to discuss the California Consumer Privacy Act (“CCPA”) draft regulations on cybersecurity audits, risk assessments, automatic...more

Miller Nash LLP

Swipe, Tap, Comply: What PCI DSS 4.0.1 Means for your Business

Miller Nash LLP on

With the seemingly never-ending updates to B2B contracts for compliance with new (and amended) comprehensive state privacy laws, the U.S. Department of Justice’s bulk data transfer rule, and artificial intelligence (AI)...more

Blake, Cassels & Graydon LLP

Gouvernail des données de Blakes : édition de l’été 2025

Voici l’édition de l’été 2025 de l’infolettre Gouvernail des données de Blakes, une publication du groupe Protection de la vie privée et des données de Blakes. Cette infolettre a pour but d’effectuer un survol des...more

Sheppard Mullin Richter & Hampton LLP

US Privacy Footprint Continues to Expand: Tennessee and Minnesota Join the State Law Club

The US “comprehensive” law landscape continues to expand, with two more states—Tennessee (July 1) and Minnesota (July 31) —joining the “comprehensive” privacy law club. Five of these -Delaware, Iowa, Nebraska, New Hampshire,...more

McDermott Will & Schulte

US healthcare offshoring: Navigating patient data privacy laws and regulations

Unlike other sectors, US healthcare businesses must reconcile cost-saving strategies with stringent compliance obligations, especially when patient data crosses national borders or is accessed overseas....more

Morrison & Foerster LLP

The New York Child Data Protection Act: What Businesses Need to Know About the Empire State’s New Teen Privacy Law

New York’s Child Data Protection Act (NYCDPA) has gone into effect, introducing sweeping new requirements for businesses that collect personal data from minors under 18. While New York has not yet joined the ranks of the...more

Cooley LLP

New Privacy Laws in Tennessee and Minnesota: What Businesses Need to Know

Cooley LLP on

Next month ushers in two new US state comprehensive consumer privacy laws in Tennessee and Minnesota, which become effective on July 1 and July 31, respectively. While these laws track the current plethora of US state...more

Wiley Rein LLP

New Jersey Proposes New Privacy Rules That Would Impact Compliance

Wiley Rein LLP on

On June 2, the New Jersey Division of Consumer Affairs (Division) published proposed regulations to implement the New Jersey Data Privacy Act (NJDPA). Of note, these rules were proposed months after the NJDPA went into effect...more

116 Results
 / 
View per page
Page: of 5

"My best business intelligence, in one easy email…"

Your first step to building a free, personalized, morning email brief covering pertinent authors and topics on JD Supra:
*By using the service, you signify your acceptance of JD Supra's Privacy Policy.
- hide
- hide