News & Analysis as of

State Privacy Laws Compliance Enforcement Actions

Jackson Lewis P.C.

CCPA Enforcement Action Highlights CPPA Focus on Opt-Out Rights, Website Functionality, and Reliance on Service Providers

Jackson Lewis P.C. on

On May 1, 2025, the California Privacy Protection Agency (CPPA) issued a Final Order in one of its first public enforcement actions under the California Consumer Privacy Act (CCPA), imposing a fine of nearly $350,000 on the...more

Mintz - Privacy & Cybersecurity Viewpoints

No More Warnings: Ignoring AG Costs $85,000

Connecticut Attorney General William Tong recently announced the state’s first-ever enforcement settlement under the Connecticut Data Privacy Act (CTDPA) with TicketNetwork, Inc., an online ticket marketplace. The settlement...more

Wiley Rein LLP

States Continue Privacy Law Enforcement Efforts

Wiley Rein LLP on

Recent enforcement activities in California and Connecticut highlight that states are ready and willing to actively enforce their comprehensive privacy laws. These recent actions – which continue the trend of states ramping...more

Kelley Drye & Warren LLP

State AGs, and Mark Twain, Hold Companies Accountable for AI Use

This week, two state attorneys general on very different ends of the political spectrum announced separate actions related to purported discrimination by AI services. Missouri sent inquiry letters to four Big Tech companies...more

Fox Rothschild LLP

Connecticut AG Announces $85,000 CTDPA Fine

Fox Rothschild LLP on

Connecticut Attorney General William Tong recently announced his office’s first enforcement action for violations of the Connecticut Data Privacy Act. “This law has now been in effect for two years,” Tong said in a...more

McGlinchey Stafford

Montana Amends Consumer Data Privacy Act, Removes Financial Institution Exemption

McGlinchey Stafford on

On May 8, 2025, the governor of Montana signed into law SB 297, which amends the Montana Consumer Data Privacy Act (MCDPA). The amendments become effective on October 1, 2025. Among other things, SB 297: • amends the...more

Lighthouse

Current State of Data Protection Regulations in the US and EMEA

Lighthouse on

Organizations must continuously review and refine their data governance strategies to keep pace with a regulatory environment that is shifting at an unprecedented rate. In response to mandates for stronger compliance...more

Wiley Rein LLP

5 Key Privacy Enforcement Insights Shared by State Regulators at IAPP’s #GPS25

Wiley Rein LLP on

IAPP’s Global Privacy Summit in DC this week has featured panels with several state regulators charged with enforcing their state’s privacy laws, including regulators from California, Colorado, Connecticut, and Oregon. The...more

Tonkon Torp LLP

Consumer Privacy Laws Are Expanding Nationwide

Tonkon Torp LLP on

Businesses operating across the U.S. should pay close attention to the rapidly evolving consumer privacy landscape. To date, 20 states, including Oregon, have enacted comprehensive consumer privacy laws, with 14 already in...more

Wyrick Robbins Yates & Ponton LLP

Blazing a Trail in Oregon: The AG’s Six Month Report on OCPA Complaints and Enforcement

To commemorate the six months since the Oregon Consumer Privacy Act (“OCPA”) became effective, Oregon Attorney General Dan Rayfield released earlier this month a Report summarizing complaints received from consumers about...more

Fox Rothschild LLP

How is Oregon Handling the Oregon Consumer Privacy Act?

Fox Rothschild LLP on

The office of the Oregon Attorney General recently releases a six-month enforcement report regarding the Oregon’s Consumer Privacy Act (OCPA). What are we discussing with our clients?...more

White & Case LLP

Automated Decision Making Emerges as an Early Target of State AI Regulation

White & Case LLP on

In the absence of comprehensive artificial Intelligence ("AI") regulation at the federal level, state and local legislatures have been busy considering their own AI legislation. Laws regulating automated decision making have...more

Cozen O'Connor

California Delete Act Enforcement Sweep

Cozen O'Connor on

Businesses that sell data regarding California residents have been put on notice by the California Privacy Protection Agency’s (the CPPA’s) recent aggressive enforcement of the California Delete Act. On October 30, 2024, the...more

Baker Botts L.L.P.

U.S. House Republicans Reignite Efforts to Pass Federal Privacy Law

Baker Botts L.L.P. on

In a renewed effort to establish a U.S. national data privacy standard, House Republicans have announced a new working group dedicated to drafting comprehensive federal privacy legislation. The initiative, spearheaded by...more

Sheppard Mullin Richter & Hampton LLP

New Year, Old Tradition: CPPA Focuses on Unregistered Data Brokers

The California privacy regulator recently settled with a data broker (Key Marketing Advantage LLC) that it alleged had violated the state’s data broker law. Under the Delete Act, data brokers must, among other things,...more

Vinson & Elkins LLP

Texas AG Targets Allstate in First Enforcement of Texas Data Privacy and Security Act

Vinson & Elkins LLP on

On January 13, 2025, Texas Attorney General Ken Paxton (“Texas AG”) filed the first-ever enforcement action under the Texas Data Privacy and Security Act (“TDPSA”) against insurance company Allstate and its subsidiary, Arity...more

Pierce Atwood LLP

AI Tools on Trial: Emerging Litigation Trends Impacting AI-Powered Technologies

Pierce Atwood LLP on

With the increase in AI-related litigation and regulatory action, it is critical for companies to monitor the AI technology landscape and think proactively about how to minimize risk. To help companies navigate these...more

White & Case LLP

2025 State Privacy Laws: What Businesses Need to Know for Compliance

White & Case LLP on

The momentum for change in US state privacy laws accelerated in 2024, driven by several significant developments, including efforts for a federal privacy law, state-level enforcement actions and the activation of four new...more

Health Care Compliance Association (HCCA)

With Nod to OCR, Indiana Inks $350K Deal With Dental Firm Following Hack

Recent federal enforcement actions have brought home the lesson that there’s really no acceptable reason for denying a patient timely access to medical records. Last year, for example, the HHS Office for Civil Rights (OCR)...more

Smith Anderson

Preparing for Data Privacy Expansion in 2025: Is Your Business Ready?

Smith Anderson on

As we step into 2025, data privacy laws in the United States are evolving rapidly. With eight new state privacy laws taking effect, businesses face an increasingly complex web of compliance obligations—even in states without...more

Constangy, Brooks, Smith & Prophete, LLP

Garden State, are you ready for the NJ Data Privacy Act?

The NJ Data Privacy Act takes effect tomorrow. The New Jersey Data Privacy Act is set to take effect tomorrow, January 15. The NJDPA was signed into law by Gov. Phil Murphy (D) on January 16, 2024. The NJDPA is similar to...more

Morrison & Foerster LLP

The FTC’s Final “Click-to-Cancel” Rule Faces Legal and Political Hurdles

The fate of the FTC’s long-awaited final “Click-to-Cancel” rule has become tangled in uncertainty as it faces numerous lawsuits and the new incoming presidential administration. In October, the FTC published its Final Rule...more

Shook, Hardy & Bacon L.L.P.

The Year Ahead in Privacy Compliance

2025 has all the ingredients for a critical year in privacy: new laws coupled with active regulators and legislators—both of whom are likely eager to get onto artificial intelligence (AI). As a companion piece to our 2024...more

Sheppard Mullin Richter & Hampton LLP

Colorado Rolls Out Updated Privacy Rules Ahead of 2025 CPA Amendments

The Colorado AG’s office adopted draft amendments to the Colorado Privacy Act rules last month. The adopted draft reflected input from the public to AG’s September 2024 version and addresses three key issues. First, on...more

Venable LLP

Data Broker Compliance in the Spotlight

Venable LLP on

The California Privacy Protection Agency (CPPA) made headlines on November 14, 2024, by issuing its first significant monetary penalties related to data brokers, totaling nearly $70,000, in settlements with two data brokers,...more

29 Results
 / 
View per page
Page: of 2

"My best business intelligence, in one easy email…"

Your first step to building a free, personalized, morning email brief covering pertinent authors and topics on JD Supra:
*By using the service, you signify your acceptance of JD Supra's Privacy Policy.
- hide
- hide