Category: Privacy

July 18, 2024

Rhode Island Governor Daniel McKee allowed the Rhode Island Data Transparency and Privacy Protection Act (“RIDTPPA”) to pass on June 25, 2024 when he transmitted the bill back to the legislature without signature, making Rhode Island the 20th U.S. state to enact […]

July 15, 2024

As we wait for a federal privacy law in the U.S., the Land of 10,000 Lakes joins a growing number of states that now have their own laws. As expected, Minnesota’s data privacy law has similarities to other state privacy laws and […]

July 9, 2024

On April 17, 2024, Nebraska’s governor signed Legislative Bill 1074, which establishes a consumer data privacy law for the state. Nebraska’s law takes effect January 1, 2025. To Whom does the law apply? The law applies to businesses that: Conduct business in […]

July 1, 2024

Today, July 1, 2024, Texas joins seven other states that have active consumer data privacy regulations as the Texas Data Privacy and Security Act (TDPSA) goes into effect. As we previously discussed, like its counterparts, the TDPSA specifies requirements for data […]

June 25, 2024

The Act affects businesses located in Minnesota or that offer products or services to residents of Minnesota and meet certain thresholds regarding the control or processing of personal data. Specifically, it applies to: (i) those that are handling (during a […]

June 19, 2024

On May 31, 2024, Governor Jared Polis signed into law Colorado House Bill 24-1130 (HB 1130), amending the Colorado Privacy Act (the CPA) to impose new requirements on controllers that process biometric data. The amendments go into effect July 1, […]

June 18, 2024

Minnesota has become the 18th state to enact a comprehensive consumer privacy law. On May 24, Gov. Tim Walz (D) signed the Minnesota Consumer Data Privacy Act into law to provide privacy rights to Minnesotans and to impose new requirements […]

June 17, 2024

On May 24, 2024, Governor Walz signed the recently passed Minnesota Consumer Data Privacy Act (“MCDPA” or “the Act”), making Minnesota the nineteenth state to enact a comprehensive data privacy law.  The MCDPA, effective July 31, 2025, provides robust protections […]

June 12, 2024

The Colorado state legislature recently passed an amendment to the Colorado Privacy Act. The Colorado Privacy Act previously established the third broad data protection law in the U.S., after California and Virginia. The Colorado Privacy Act came into effect July 1, 2023, […]

June 4, 2024

To whom does the Minnesota Act apply? The Minnesota Act imposes obligations on “controllers” – individuals or legal entities that determine the purpose and means of processing personal data – who either conduct business in the state of Minnesota or […]

May 31, 2024

Just past midnight on May 11, 2024, the Vermont Legislature passed H.121, the Vermont Data Privacy Act (VDPA). If signed into law, the VDPA would become the most onerous state comprehensive privacy law in the country. Among other things, the […]

May 22, 2024

Federal Data Privacy Bill Introduced with Bipartisan Support Online marketers may be on the verge of finally obtaining a single, unified federal framework for consumer data privacy regulation. In April, a bipartisan coalition, with sponsors in both houses of Congress, […]

May 21, 2024

On April 4, Governor Andy Beshear signed the Kentucky Consumer Data Protection Act (KCDPA), making Kentucky the fifteenth state to enact a comprehensive data privacy law. Set to go into effect on January 1, 2026, the KCDPA largely conforms to […]

May 13, 2024

The U.S. Department of Health and Human Services (“HHS”), and Office for Civil Rights (“OCR”) issued a “Final Rule,” HIPAA Privacy Rule to Support Reproductive Health Care Privacy, which was published in the Federal Register on April 26, 2024.1 In […]

May 6, 2024

As we move closer to the end of many states’ legislative sessions, a number of comprehensive privacy law proposals continue to work their way through the legislative process. Since our last update, Nebraska became the sixteenth state to enact a […]

April 30, 2024

On April 17, the Nebraska governor signed the Nebraska Data Privacy Act (the “NDPA”) into law. Nebraska is the latest state to enact comprehensive privacy legislation, joining California, Virginia, Colorado, Connecticut, Utah, Iowa, Indiana, Tennessee, Montana, Oregon, Texas, Florida, Delaware, […]

April 18, 2024

Will the U.S. finally join most developed nations and pass a comprehensive federal privacy law? Some believe this may be the year that the U.S. does just that. Calls for passage of a comprehensive U.S. federal privacy law have come […]

April 11, 2024

U.S. Senate and House committee chairs took a decisive step toward enacting national data privacy legislation with the release (in draft) of the American Privacy Rights Act (APRA) on March 31. Sen. Maria Cantwell, D-Wash., and Rep. Cathy McMorris Rodgers, […]

April 9, 2024

Washington’s new data privacy statute, “My Health, My Data Act” (“MHMD” or the “Act”), officially became fully effective on March 31, 2024, for regulated entities under the Act, while small businesses have until June 30, 2024, to comply. The purpose […]

April 5, 2024

The recent enactment of SB 19 (the Oregon Consumer Privacy Act or “OCPA”) will have varying impacts on a large portion of businesses (including nonprofits) operating within Oregon –especially those with websites. For those businesses required to follow the OCPA, […]