News & Analysis as of

State Privacy Laws Compliance Data Privacy

Jackson Lewis P.C.

CCPA Enforcement Action Highlights CPPA Focus on Opt-Out Rights, Website Functionality, and Reliance on Service Providers

Jackson Lewis P.C. on

On May 1, 2025, the California Privacy Protection Agency (CPPA) issued a Final Order in one of its first public enforcement actions under the California Consumer Privacy Act (CCPA), imposing a fine of nearly $350,000 on the...more

Kelley Drye & Warren LLP

Virginia Is For Health-Privacy Lovers? Broad Reproductive Health Data Amendment May Add Unintended Compliance Obligations

Virginia S.B. 754, now effective, amends the Virginia Consumer Protection Act to prohibit unauthorized collection and disclosure of non-HIPAA reproductive and sexual health information. The law notably includes a broad scope...more

Fox Rothschild LLP

Online Privacy and Minors: It’s Not Just Under 13 Anymore

Fox Rothschild LLP on

Many U.S. states have recently added provisions regarding “minors” that greatly exceed what is required under the Children’s Online Privacy Protection Act (COPPA). In short, the new laws generally apply to people under 18,...more

Shook, Hardy & Bacon L.L.P.

California Adopts Regulations on Cybersecurity Audits

California has approved new regulations requiring some companies to conduct annual audits of their cybersecurity programs, including the policies, procedures, and practices for protecting personal information. On July 24,...more

Proskauer - New Media & Technology

Oregon Strengthens Geolocation Data Privacy and Children’s Personal Data Protections, Adding to Compliance for Data Brokers and...

On June 3, 2025, Oregon Governor Tina Kotek signed HB 2008 into law to amend the Oregon Consumer Privacy Act, the state’s comprehensive data privacy law. Among other items, effective January 1, 2026, the “sale” of two...more

Mintz - Privacy & Cybersecurity Viewpoints

No More Warnings: Ignoring AG Costs $85,000

Connecticut Attorney General William Tong recently announced the state’s first-ever enforcement settlement under the Connecticut Data Privacy Act (CTDPA) with TicketNetwork, Inc., an online ticket marketplace. The settlement...more

Wiley Rein LLP

States Continue Privacy Law Enforcement Efforts

Wiley Rein LLP on

Recent enforcement activities in California and Connecticut highlight that states are ready and willing to actively enforce their comprehensive privacy laws. These recent actions – which continue the trend of states ramping...more

Kelley Drye & Warren LLP

California AG focuses on contracts, opt-outs, and consumer disclosures in Healthline settlement

On July 1, 2025, California Attorney General Rob Bonta announced a $1.55 million proposed settlement order with Healthline Media – the largest California Consumer Privacy Act (CCPA) settlement to date. The proposed settlement...more

Sheppard Mullin Richter & Hampton LLP

Countdown to 2026: What Will the Texas AI Law Mean for Businesses?

Texas is getting into the AI action, with a new law (the Texas Responsible Artificial Intelligence Governance Act) that will place restrictions not only on AI use by government agencies, but businesses as well. In particular,...more

Brownstein Hyatt Farber Schreck

State AGs Arm Up for Privacy Enforcement with Technical Hiring Surge—Is AI Next?

State attorneys general (AGs) are significantly ramping up their technical hiring to enforce a growing patchwork of state privacy laws—potentially creating an enforcement template for other tech enforcement areas like...more

Constangy, Brooks, Smith & Prophete, LLP

New York’s unique Child Data Protection Act: Here’s everything you need to know

New York ‘s Child Data Protection Act, available here, took effect on June 20. This is a landmark piece of legislation designed to enhance the online privacy and safety of minors. As concerns over children’s digital...more

Fox Rothschild LLP

Connecticut AG Announces $85,000 CTDPA Fine

Fox Rothschild LLP on

Connecticut Attorney General William Tong recently announced his office’s first enforcement action for violations of the Connecticut Data Privacy Act. “This law has now been in effect for two years,” Tong said in a...more

Baker Botts L.L.P.

Texas Enacts Responsible AI Governance Act: What Companies Need to Know

Baker Botts L.L.P. on

Governor Greg Abbott signed HB 149, the Texas Responsible Artificial Intelligence Governance Act (TRAIGA), into law on June 22, 2025. With its passage, Texas becomes the third state to adopt a comprehensive AI law. Notably,...more

Perkins Coie

Texas Enacts Responsible Artificial Intelligence Governance Act

Perkins Coie on

Key Takeaways - - Texas’ new law governing artificial intelligence, which takes effect at the start of 2026, introduces both familiar and novel regulations on the use of AI by companies and government entities. - Provisions...more

Kelley Drye & Warren LLP

Adtech Privacy Pain Points: Top 7 List for Effective Opt-Out Compliance

As privacy enforcement ramps up, effectively managing opt-out requirements under state privacy laws is a top risk mitigation measure. But complying with opt-outs is not just a matter of providing a consumer-facing opt-out...more

Robinson+Cole Data Privacy + Security Insider

Why Dumping Sensitive Data on Network Shares is a Liability

Are you storing sensitive data on a shared network drive? If so, your organization could be at serious risk of a data breach or privacy lawsuit. Shared drives, like the common “S:\ drive,” are often used to store documents,...more

Wiley Rein LLP

New Jersey Proposes New Privacy Rules That Would Impact Compliance

Wiley Rein LLP on

On June 2, the New Jersey Division of Consumer Affairs (Division) published proposed regulations to implement the New Jersey Data Privacy Act (NJDPA). Of note, these rules were proposed months after the NJDPA went into effect...more

Foley & Lardner LLP

State Data Breach Notification Laws - June 2025

Foley & Lardner LLP on

While most state data breach notification statutes contain similar components, there are important differences, meaning a one-size-fits-all approach to notification will not suffice. What’s more, as data breaches continue to...more

McGlinchey Stafford

Montana Amends Consumer Data Privacy Act, Removes Financial Institution Exemption

McGlinchey Stafford on

On May 8, 2025, the governor of Montana signed into law SB 297, which amends the Montana Consumer Data Privacy Act (MCDPA). The amendments become effective on October 1, 2025. Among other things, SB 297: • amends the...more

Lighthouse

Current State of Data Protection Regulations in the US and EMEA

Lighthouse on

Organizations must continuously review and refine their data governance strategies to keep pace with a regulatory environment that is shifting at an unprecedented rate. In response to mandates for stronger compliance...more

Morris, Manning & Martin, LLP

The Big Long List of U.S. AI Laws

Below, we catalog certain current state laws regulating the development and use of AI systems and technologies passed between 2019 and 2025. This list focuses on legislative initiatives that have passed and are in effect or...more

Levenfeld Pearlstein, LLC

Privacy Policy Basics

In today’s digital landscape, privacy policies have evolved from obscure legal documents into essential corporate governance tools. As data privacy regulations expand globally, organizations face increasing compliance...more

Tonkon Torp LLP

Oregon Consumer Privacy Act Enforcement Takes Effect July 1, 2025 for Nonprofits

Tonkon Torp LLP on

As Oregon’s data privacy landscape continues to evolve, nonprofits must take note: the Oregon Consumer Privacy Act (OCPA) will apply to nonprofit organizations beginning on July 1, 2025. The grace period granted to nonprofits...more

Tonkon Torp LLP

Consumer Privacy Laws Are Expanding Nationwide

Tonkon Torp LLP on

Businesses operating across the U.S. should pay close attention to the rapidly evolving consumer privacy landscape. To date, 20 states, including Oregon, have enacted comprehensive consumer privacy laws, with 14 already in...more

Wyrick Robbins Yates & Ponton LLP

Blazing a Trail in Oregon: The AG’s Six Month Report on OCPA Complaints and Enforcement

To commemorate the six months since the Oregon Consumer Privacy Act (“OCPA”) became effective, Oregon Attorney General Dan Rayfield released earlier this month a Report summarizing complaints received from consumers about...more

127 Results
 / 
View per page
Page: of 6

"My best business intelligence, in one easy email…"

Your first step to building a free, personalized, morning email brief covering pertinent authors and topics on JD Supra:
*By using the service, you signify your acceptance of JD Supra's Privacy Policy.
- hide
- hide