News & Analysis as of

Regulatory Requirements Personal Information Corporate Counsel

Shook, Hardy & Bacon L.L.P.

California Adopts Regulations on Cybersecurity Audits

California has approved new regulations requiring some companies to conduct annual audits of their cybersecurity programs, including the policies, procedures, and practices for protecting personal information. On July 24,...more

Sheppard Mullin Richter & Hampton LLP

US Privacy Footprint Continues to Expand: Tennessee and Minnesota Join the State Law Club

The US “comprehensive” law landscape continues to expand, with two more states—Tennessee (July 1) and Minnesota (July 31) —joining the “comprehensive” privacy law club. Five of these -Delaware, Iowa, Nebraska, New Hampshire,...more

Loeb & Loeb LLP

China’s CAC Answers Questions on Cross-Border Data Transfer in April and May Guidance

Loeb & Loeb LLP on

China’s primary data regulator, the Cyberspace Administration of China (CAC), released two sets of Q&As with respect to exporting data from China, one in April and one in May. The questions were selected from those raised...more

Jackson Lewis P.C.

CCPA Compliance Reminder: Annual Update Requirement for Online Privacy Policies

Jackson Lewis P.C. on

For businesses subject to the California Consumer Privacy Act (CCPA), a compliance step often overlooked is the requirement to annually update the businesses online privacy policy. Under Cal. Civ. Code § 1798.130(a)(5),...more

Foley & Lardner LLP

State Data Breach Notification Laws - June 2025

Foley & Lardner LLP on

While most state data breach notification statutes contain similar components, there are important differences, meaning a one-size-fits-all approach to notification will not suffice. What’s more, as data breaches continue to...more

Robinson+Cole Data Privacy + Security Insider

State Data Minimization Laws Spark Compliance Uncertainty

A new wave of state consumer privacy laws focused on limiting data collection is creating anxiety among businesses—and Maryland is leading the charge. The Maryland Online Data Privacy Act (MODPA), set to take effect in...more

Skadden, Arps, Slate, Meagher & Flom LLP

Eight-State Consortium of Privacy Regulators Marks Shift Toward Coordinated Enforcement

In a major development for businesses subject to state data privacy laws, eight state privacy regulators have joined forces to form the “Consortium of Privacy Regulators,” a bipartisan coalition aimed at coordinating...more

Alston & Bird

FTC Publishes Amendments to COPPA Rule

Alston & Bird on

On April 22, 2025, the Federal Trade Commission (FTC) published the finalized amendments (Amendments) to the Children’s Online Privacy Protection Rule (COPPA Rule) that would impose additional restrictions on website and...more

WilmerHale

State Comprehensive Privacy Law Update - April 2025 #2

WilmerHale on

While March featured a flurry of newly introduced comprehensive privacy bills, state legislatures now appear to be primarily focused on pushing existing proposals through the chambers. ...more

Goodwin

DOJ’s Data Export Rule Is In Force April 8: What You Need to Do

Goodwin on

On April 8, 2025, a sweeping rule issued by the US Department of Justice (DOJ) will take effect. The rule imposes restrictions—and in some cases, outright prohibitions—on US companies in connection with certain types of data...more

Carlton Fields

CPPA Advances New Privacy Rules for Businesses

Carlton Fields on

The California Privacy Protection Agency (CPPA), at its board meeting on November 8, 2024, voted 4–1 to advance proposed regulations to a formal rulemaking. As currently drafted, these regulations would, among other things...more

Husch Blackwell LLP

CPPA Publishes Revised Draft Cybersecurity Audit Regulations

Husch Blackwell LLP on

Keypoint: The California Privacy Protection Agency continued its rulemaking efforts by releasing revised draft cybersecurity audit regulations although the Agency has yet to initiate the formal rulemaking process....more

Lathrop GPM

Are You Ready For 2023's New Data Privacy Laws?

Lathrop GPM on

California continues to serve as the primary driver of privacy law in the United States, but other state laws now warrant compliance. The California Privacy Rights Act (CPRA), effective January 1, 2023, amends and extends the...more

FordHarrison

Employer Obligations Under the California Privacy Rights Act of 2020

FordHarrison on

On January 1, 2020, the California Consumer Privacy Act (CCPA) became effective and created an array of protections for consumers regarding data privacy rights while creating business obligations related to the collection and...more

Littler

California Privacy Rights Act for Employers: Vendor Contracting Requirements

Littler on

This is the fourth in a series of articles about the implications of the California Privacy Rights Act for employers. The impending January 1, 2023 effective date of the California Privacy Rights Act (CPRA) has created a...more

Littler

California Privacy Rights Act for Employers: The New “Notice at Collection” California Employers Must Distribute to the Workforce

Littler on

This is the third in a series of articles about the implications of the California Privacy Rights Act for employers. - On January 1, 2023, the California Privacy Rights Act (CPRA) will go into effect and California...more

Polsinelli

Five Immediate Steps to Take in Preparation for China’s New Comprehensive Privacy Law

Polsinelli on

China has recently joined the list of countries that have adopted the world’s strictest data-privacy laws. Given China’s desirability as both a market for and a source of data, companies worldwide have started making early...more

17 Results
 / 
View per page
Page: of 1

"My best business intelligence, in one easy email…"

Your first step to building a free, personalized, morning email brief covering pertinent authors and topics on JD Supra:
*By using the service, you signify your acceptance of JD Supra's Privacy Policy.
- hide
- hide