News & Analysis as of

State Privacy Laws Risk Assessment

Goodwin

California’s New Privacy and Cybersecurity Regulations on Risk Assessments, Automated Decision making and Cybersecurity Audits:...

Goodwin on

During a Board Meeting on July 24, 2025, the California Privacy Protection Agency (CPPA) unanimously approved the long-awaited final text of its second rulemaking package, implementing a broad swath of new requirements...more

Morgan Lewis

State AGs Take the Lead on Privacy Enforcement as Federal Action Stalls

Morgan Lewis on

With the continued absence of comprehensive federal privacy legislation after nearly 20 years of debate, state attorneys general (AGs) are increasingly asserting their role as primary regulators in the data privacy space....more

Orrick, Herrington & Sutcliffe LLP

HealthTech Due Diligence: Key Privacy/Security Factors

Join Thora Johnson and Jeremy Sherer to learn about: Evaluating compliance through privacy notices Key questions to address, from leadership accountability to employee training...more

Davis Wright Tremaine LLP

California Privacy Regulator Finalizes Automated Decisionmaking, Cybersecurity, and Risk Assessment Regulations

At its latest meeting, the CPPA voted to finalize its regulations governing automated decisionmaking tools, cybersecurity audits, and privacy risk assessments - On July 24, the California Privacy Protection Agency ("CPPA")...more

Katten Muchin Rosenman LLP

California Regulator Finalizes CCPA Rules for Automated Decision Making, Cybersecurity Audits and Risk Assessments

On July 24, 2025, during its scheduled Board Meeting, the California Privacy Protection Agency (CPPA) Board voted unanimously to finalize rules governing the use of automated decision-making technology, risk assessments,...more

Jackson Lewis P.C.

HB1127 Explained: North Dakota’s New InfoSec Requirements for Financial Corporations

Jackson Lewis P.C. on

Earlier this year, North Dakota’s Governor signed HB 1127, which introduces new compliance obligations for financial corporations operating in North Dakota. This new law will take effect on August 1, 2025....more

Sheppard Mullin Richter & Hampton LLP

North Dakota Passes New Data Security Law for “Financial Corporations”

North Dakota recently passed a law establishing new rules for certain financial companies operating in the state – specifically “financial corporations.” The new obligations will take effect on August 1, 2025. They will apply...more

Perkins Coie

The Start of Something New? New Jersey’s Proposed Privacy Rules

Perkins Coie on

On June 2, 2025, the New Jersey Office of Consumer Protection announced proposed rules for New Jersey’s comprehensive consumer privacy law, the New Jersey Data Privacy Act (NJDPA), which went into effect on January 16, 2025....more

BakerHostetler

DSIR Deeper Dive: Artificial Intelligence - Banner Years (and Counting) for AI Guidance and Regulation

BakerHostetler on

The period of 2024-2025 was significant for AI law, regulation, and guidance, beginning in early February 2024, and the news told the tale...more

Sheppard Mullin Richter & Hampton LLP

California Regulator Releases Updated Draft Regulations, Scales Back Proposed AI Privacy Rules

California appears to be changing its approach to how it regulates artificial intelligence, likely reflecting its reaction to challenges seen recently in other states. Namely, the California Privacy Protection Agency recently...more

White & Case LLP

From California to Kentucky: Tracking the Rise of State AI Laws in 2025

White & Case LLP on

As artificial intelligence ("AI") systems and their use continue to advance, the regulatory landscape in the United States is rapidly evolving, but not in a uniform way. Unlike the European Union's comprehensive approach with...more

Davis Wright Tremaine LLP

California Privacy Regulator Approves Trimmed-Down Regulations

On May 1, the California Privacy Protection Agency ("CPPA") board (the "Board") met to discuss revisions to proposed regulations relating to cybersecurity audits, risk assessments, and automated decision-making technologies...more

Robinson+Cole Data Privacy + Security Insider

Stall on Automated Decision-Making Technology Rules from the California Privacy Protection Agency

This week, the California Privacy Protection Agency (CPPA) board held its April meeting to discuss the latest set of proposed regulations, including automated decision-making technology (ADMT) regulations. Instead of...more

ArentFox Schiff

Are You Ready for 2025? New State Privacy Laws to Take Effect Beginning on January 1

ArentFox Schiff on

2025 is set to be another important year for US state privacy laws, with five new laws effective in January and three more coming into effect through October. New laws in Delaware, Iowa, Nebraska, and New Hampshire will go...more

Sheppard Mullin Richter & Hampton LLP

California’s Privacy Regulator Had a Busy November, Risk Assessment Edition: What Does It Mean for Businesses?

In the third in our series of new CCPA regulations from California, we look at obligations for conducting risk assessments under CCPA. CCPA had called on the California agency to promulgate rules to address such assessments,...more

Sheppard Mullin Richter & Hampton LLP

California’s Privacy Regulator Had a Busy November, Automated Decisionmaking Edition: What Does It Mean for Businesses?

In the second in our series of new CCPA regulations from California, we look at proposed rules for use of automated decisionmaking technology. As a reminder, CCPA discusses these technologies in relation to profiling, namely...more

Epstein Becker & Green

Upcoming Consumer Privacy Laws: What Organizations Must Know for 2024 and 2025

Epstein Becker & Green on

Over the past several years, the number of states with comprehensive consumer data privacy laws has increased exponentially from just a handful—California, Colorado, Virginia, Connecticut, and Utah—to up to twenty by some...more

Hinshaw & Culbertson - Privacy, Cyber & AI...

More Proposed Regulations from California: What Do These Mean for Your Business?

What Issues Did the California Privacy Protection Agency Raise? On July 16, 2024, the California Privacy Protection Agency (Agency) discussed proposed updates to the California Consumer Privacy Act (CCPA) regulations....more

Wiley Rein LLP

Key Takeaways from Our Conversation with Oregon and Texas Regulators About Privacy Enforcement

Wiley Rein LLP on

With new comprehensive privacy laws in Texas and Oregon going into effect on Monday, July 1, we invited enforcers from the Texas and Oregon Attorneys General Offices – Tyler Bridegan and Kristen Hilton – to join our Wiley...more

Ballard Spahr LLP

California Privacy Protection Agency Releases Draft Regulations for Consideration at its March 8, 2024 Board Meeting

Ballard Spahr LLP on

On March 7, 2024, the California Privacy Protection Agency (CPPA) released new materials for review and discussion at the agency’s board meeting on March 8, 2024. Among the materials released were draft risk assessment and...more

Woods Rogers

CPPA’s Regulatory Enforcement Restored: It’s Time to Get Compliant

Woods Rogers on

For businesses subject to California Consumer Privacy Act (CCPA), privacy compliance just became urgent. A California appellate court agreed on February 9, 2024, with the California Privacy Protection Agency (CPPA) that there...more

Jackson Lewis P.C.

Top 10 for 2024 – Happy Data Privacy Day!

Jackson Lewis P.C. on

To celebrate Data Privacy Day (January 28), we present our top ten data privacy and cybersecurity predictions for 2024. 1. AI regulations to protect data privacy. Automated decision-making tools, smart cameras, wearables,...more

Husch Blackwell LLP

CPPA Publishes Proposed Revisions to CCPA Regulations

Husch Blackwell LLP on

Keypoint: The Agency proposed more revisions to the CCPA regulations for consideration at the December 8 board meeting. On December 1, 2023, the California Privacy Protection Agency (Agency) published proposed revisions to...more

Husch Blackwell LLP

CPPA Publishes Draft Automated Decisionmaking Technology (AI) Regulations

Husch Blackwell LLP on

Keypoint: The California Privacy Protection Agency continued its rulemaking efforts by releasing draft automated decisionmaking technology regulations although the Agency has yet to initiate the formal rulemaking process....more

Robinson+Cole Data Privacy + Security Insider

Update on CPRA Regulations for Cybersecurity Audits and Risk Assessments from the CPPA

In August, the California Privacy Protection Agency (CPPA) released its initial draft regulations for cybersecurity audits and risk assessments under the California Privacy Rights Act (CPRA). While the CPPA has not yet...more

47 Results
 / 
View per page
Page: of 2

"My best business intelligence, in one easy email…"

Your first step to building a free, personalized, morning email brief covering pertinent authors and topics on JD Supra:
*By using the service, you signify your acceptance of JD Supra's Privacy Policy.
- hide
- hide