State Privacy Laws, Automated Decision Systems (ADS), Regulatory Requirements

California Privacy Regulator Finalizes Automated Decisionmaking, Cybersecurity, and Risk Assessment Regulations

Davis Wright Tremaine LLP on 7/31/2025

At its latest meeting, the CPPA voted to finalize its regulations governing automated decisionmaking tools, cybersecurity audits, and privacy risk assessments - On July 24, the California Privacy Protection Agency ("CPPA")...more

California Regulator Finalizes CCPA Rules for Automated Decision Making, Cybersecurity Audits and Risk Assessments

Katten Muchin Rosenman LLP on 7/28/2025

On July 24, 2025, during its scheduled Board Meeting, the California Privacy Protection Agency (CPPA) Board voted unanimously to finalize rules governing the use of automated decision-making technology, risk assessments,...more

AGs Continue Fighting For their Right to Regulate AI

Cozen O'Connor on 6/27/2025

A group of seven Democratic AGs, through the Consortium of Privacy Regulators, sent a letter to U.S. Senate leadership opposing a federal ban against state-level regulation of artificial intelligence (AI) systems....more

From California to Kentucky: Tracking the Rise of State AI Laws in 2025

White & Case LLP on 5/27/2025

As artificial intelligence ("AI") systems and their use continue to advance, the regulatory landscape in the United States is rapidly evolving, but not in a uniform way. Unlike the European Union's comprehensive approach with...more

Nearly Half of States Have Now Adopted NAIC Model Bulletin on Insurers’ Use of AI

Quarles & Brady LLP on 4/3/2025

As of March 2025, 24 states have adopted the National Association of Insurance Commissioners (NAIC) Model Bulletin on the Use of Artificial Intelligence (AI) Systems by insurers with little to no material changes. As we...more

CPPA’s Regulatory Enforcement Restored: It’s Time to Get Compliant

Woods Rogers on 2/15/2024

For businesses subject to California Consumer Privacy Act (CCPA), privacy compliance just became urgent. A California appellate court agreed on February 9, 2024, with the California Privacy Protection Agency (CPPA) that there...more