News & Analysis as of

Regulatory Requirements Privacy Laws State Privacy Laws

Coblentz Patch Duffy & Bass

2025 Mid-Year Privacy Report - A Comprehensive Look at New Developments in Data Privacy Laws

Introduction - In 2025, privacy and AI regulation have moved from the sidelines to the center of business risk and strategy. U.S. states are rapidly enacting a patchwork of privacy laws, with new AI laws emerging and...more

Baker Donelson

Practical Next Steps for Businesses as Maryland's Updated Consumer Data Privacy Laws Take Effect in October

Baker Donelson on

Maryland's Online Data Privacy Act of 2024 (MODPA) will take effect on October 1, 2025, and will be enforced by the Maryland Attorney General (AG) beginning April 1, 2026. MODPA sets a new, more stringent benchmark among U.S....more

McDermott Will & Schulte

[Webinar] Privacy Legislation in 2025: What's New and What's Next - September 16th, 12:00 pm - 1:00 pm EDT

The US privacy law landscape continues to evolve each year, and 2025 is no exception. While there were no new comprehensive privacy laws were enacted this year, there were still significant developments. These include...more

Fox Rothschild LLP

Biometrics in Advertising: Consent Is Not Enough

Fox Rothschild LLP on

When using biometrics in advertising, consent is not enough. IAB Canada, a trade association for Canada’s interactive marketing and advertising industry, recently issued policy paper on using biometrics in digital...more

McNees Wallace & Nurick LLC

Following California’s Lead: How the CCPA’s New Rule Guides Compliance Efforts Nationwide

When it comes to data privacy and cybersecurity regulation in the United States, California continues to lead the way. The state’s latest updates to the California Consumer Privacy Act (CCPA) show that its rules do more than...more

Coblentz Patch Duffy & Bass

U.S. State Privacy Laws: 2025 Status Update

By the end of 2025, eight new states will have enacted comprehensive privacy laws: Delaware, Iowa, Maryland, Minnesota, Nebraska, New Hampshire, New Jersey, and Tennessee. With twenty states expected to have such laws...more

Kilpatrick

Colorado's Draft Rules for a New Children's Privacy Law

Kilpatrick on

The Colorado Attorney General recently published draft rules implementing a new children’s privacy law in the state. Companies have until September 10th to comment on the rules. With the new children’s privacy statute going...more

Kohrman Jackson & Krantz LLP

First Amendment Push-Me Pull-You: New Hurdles to Examining Digital Content Privately

The digital landscape has always posed a twin challenge: how to protect children online while also preserving robust free speech rights for adults consistent with the First Amendment. This tension reached a logical zenith...more

Morrison & Foerster LLP

A MoFo Privacy Minute: Neural Data Added to Montana’s Genetic Information Privacy Act

Question: How does Montana’s amendment to its Genetic Information Privacy Act (“GIPA”) regulate neurotechnology data, and what obligations might my business face compared to the amendments that were passed in Colorado and...more

Fox Rothschild LLP

To Do: Annually Review Privacy Notices or Risk CPPA Enforcement

Fox Rothschild LLP on

The annual review and update (if necessary) of privacy notices just got an upgrade to a “must do.” This provision, found in California Consumer Privacy Act from the beginning, requires companies to assess their data...more

Bradley Arant Boult Cummings LLP

Tennessee Data Privacy Law (TIPA) Effective July 1: Are You Prepared?

July 1 marked the official enforcement date of the Tennessee Information Protection Act (TIPA), the state’s comprehensive consumer privacy law. Signed into law in 2023, TIPA grants consumers specific rights concerning their...more

Orrick, Herrington & Sutcliffe LLP

Navigating Privacy Gaps and New Legal Requirements for Companies Processing Genetic Data

Interest in genetic data is on the rise, driven by the growth of direct-to-consumer (DTC) genetic testing and its value for AI in drug development and personalized medicine. Historically, gaps in privacy laws have sometimes...more

McDermott Will & Schulte

Colorado remains active, proposes amendments to CPA rules

On July 29, 2025, the Colorado Department of Law (Department) published a draft of its latest proposed Colorado Privacy Act (CPA) regulations, focused on children’s privacy. The Department is seeking comment on the proposed...more

Sheppard Mullin Richter & Hampton LLP

New Texas Law Requires Storage of Electronic Health Records in U.S.

Starting September 1, 2025, health care practitioners in Texas are required to store electronic health records in the United States under a new Act. This requirement is found in a recently enacted law that also includes...more

Troutman Amin LLP

ATTENTION ATTENTION: Minnesota’s Data Privacy Act Is Now Law As Of Today- July 31, 2025!

Troutman Amin LLP on

Starting today, July 31, 2025, the Minnesota Consumer Data Privacy Act (“MCDPA”) officially takes effect. Signed by Governor Tim Walz in May 2024, this act majorly affects how the personal data of Minnesota residents is...more

Davis Wright Tremaine LLP

California Privacy Regulator Finalizes Automated Decisionmaking, Cybersecurity, and Risk Assessment Regulations

At its latest meeting, the CPPA voted to finalize its regulations governing automated decisionmaking tools, cybersecurity audits, and privacy risk assessments - On July 24, the California Privacy Protection Agency ("CPPA")...more

Alston & Bird

CPPA Board Votes to Adopt CCPA Regulations; Open DROP Rules to Public Comment

Alston & Bird on

On July 24, 2025, the California Privacy Protection Agency (“CPPA”) Board voted to adopt draft regulations under the California Consumer Privacy Act (“CCPA”) concerning cybersecurity audits, risk assessments, automated...more

Alston & Bird

CPPA Board to Discuss Draft CCPA Regulations, DROP Requirements

Alston & Bird on

The California Privacy Protection Agency (“CPPA”) Board will meet on Thursday, July 24 to discuss the California Consumer Privacy Act (“CCPA”) draft regulations on cybersecurity audits, risk assessments, automatic...more

Mintz - Privacy & Cybersecurity Viewpoints

No More Warnings: Ignoring AG Costs $85,000

Connecticut Attorney General William Tong recently announced the state’s first-ever enforcement settlement under the Connecticut Data Privacy Act (CTDPA) with TicketNetwork, Inc., an online ticket marketplace. The settlement...more

Clark Hill PLC

Right To Know - July 2025, Vol. 31

Clark Hill PLC on

Welcome to your monthly rundown of all things cyber, privacy, and technology, where we highlight all the happenings you may have missed. State Action: Texas Limits Punitive Damage Liability For Data Security Breach...more

Hogan Lovells

New California bills aim to limit uses of consumer data and AI systems: What companies should know

Hogan Lovells on

California has long been a frontrunner when it comes to consumer protection and privacy laws, and 2025 is shaping up to be no exception. State lawmakers and regulators are advancing a wave of new bills and regulations across...more

Sheppard Mullin Richter & Hampton LLP

Countdown to 2026: What Will the Texas AI Law Mean for Businesses?

Texas is getting into the AI action, with a new law (the Texas Responsible Artificial Intelligence Governance Act) that will place restrictions not only on AI use by government agencies, but businesses as well. In particular,...more

Kelley Drye & Warren LLP

Connecticut AG Announces First Settlement Under the Connecticut Data Privacy Act

On July 8, Connecticut Attorney General William Tong announced a settlement with TicketNetwork, Inc. for alleged violations of the Connecticut Data Privacy Act (CTDPA). The settlement is the first publicly announced...more

Brownstein Hyatt Farber Schreck

State AGs Arm Up for Privacy Enforcement with Technical Hiring Surge—Is AI Next?

State attorneys general (AGs) are significantly ramping up their technical hiring to enforce a growing patchwork of state privacy laws—potentially creating an enforcement template for other tech enforcement areas like...more

McCarter & English, LLP

Connecticut Data Privacy Act: Statutory Changes and the Start of Fines

Connecticut continues to refine its data privacy act as it implements its first violation settlement. TicketNetwork, Inc., reached a settlement of $85,000 for deficiencies in its privacy notice to consumers. Despite receiving...more

144 Results
 / 
View per page
Page: of 6

"My best business intelligence, in one easy email…"

Your first step to building a free, personalized, morning email brief covering pertinent authors and topics on JD Supra:
*By using the service, you signify your acceptance of JD Supra's Privacy Policy.
- hide
- hide