Tag: privacy

July 18, 2024

Rhode Island Governor Daniel McKee allowed the Rhode Island Data Transparency and Privacy Protection Act (“RIDTPPA”) to pass on June 25, 2024 when he transmitted the bill back to the legislature without signature, making Rhode Island the 20th U.S. state to enact […]

June 4, 2024

To whom does the Minnesota Act apply? The Minnesota Act imposes obligations on “controllers” – individuals or legal entities that determine the purpose and means of processing personal data – who either conduct business in the state of Minnesota or […]

May 31, 2024

Just past midnight on May 11, 2024, the Vermont Legislature passed H.121, the Vermont Data Privacy Act (VDPA). If signed into law, the VDPA would become the most onerous state comprehensive privacy law in the country. Among other things, the […]

May 21, 2024

On April 4, Governor Andy Beshear signed the Kentucky Consumer Data Protection Act (KCDPA), making Kentucky the fifteenth state to enact a comprehensive data privacy law. Set to go into effect on January 1, 2026, the KCDPA largely conforms to […]

May 6, 2024

As we move closer to the end of many states’ legislative sessions, a number of comprehensive privacy law proposals continue to work their way through the legislative process. Since our last update, Nebraska became the sixteenth state to enact a […]

March 25, 2024

1. What’s New? The big news last week was three bills passing out of a state chamber. In Vermont, Representative Priestley’s H.121 unanimously passed the House on March 22. As we noted last week, this general consumer data privacy bill […]

March 18, 2024

As your company grows, so do the risks of errors and missteps. Integrating new technologies across different teams and facets of your business brings countless opportunities, but the risk of privacy infringements rises, too. Take AI, for example: Last year, […]

March 14, 2024

Enacted in 1998, Illinois’ Genetic Information Privacy Act (GIPA) governs the confidentiality and use of genetic testing and genetic information by employers and insurers. The statute was designed to prevent employers and insurers from using genetic testing and information as […]

February 14, 2024

The Connecticut Office of the Attorney General (“CT AG”) has released its first report on enforcement of the Connecticut Data Privacy Act (“CTDPA”), revealing its focus on companies’ privacy policies, protections of “sensitive data” (such as genetic, biometric and geolocation […]

February 13, 2024

On February 9, 2024, the California Third District Court of Appeals in Sacramento overturned a lower court order that postponed enforcement of the California Privacy Protection Agency’s (CPPA) newest rules. The decision restores the authority of the CPPA and California […]

February 12, 2024

In an opinion filed on Friday, California’s Third District Court of Appeal reversed a lower court ruling that postponed until the end of March the enforcement of regulations promulgated pursuant to the California Privacy Rights Act. The CPRA amended the […]

February 9, 2024

Most organizations and online platforms use multifactor authentication (MFA) (also called two-factor authentication) to confirm that the user is an authorized individual and not a scammer or fraudster. We have all been trained to use MFA through our workplaces to […]

February 8, 2024

In the first part of this series we discussed why data and privacy legislation has developed and its purpose. We also provided a brief introduction to Bermuda’s privacy legislation, the Personal Information Protection Act 2016 (“PIPA”). While the substantive provisions […]

February 5, 2024

It was a busy week of committee hearings and meetings for consumer data privacy bills. In Maine, another work session was held on January 29 on the two pending consumer data privacy bills (LD 1977 / LD 1973). A work […]

January 31, 2024

Last week, California Attorney General Rob Bonta announced an investigative sweep of providers of streaming services to determine whether these businesses are complying with California Consumer Privacy Act (“CCPA”) opt-out requirements for businesses that sell or share consumer personal information. […]

January 30, 2024

New Jersey and New Hampshire are the latest states to pass comprehensive privacy legislation, joining California, Virginia, Colorado, Connecticut, Utah, Iowa, Indiana, Tennessee, Montana, Oregon, Texas, Florida, and Delaware. Below is a summary of key takeaways. New Jersey On January […]

January 24, 2024

The Video Privacy Protection Act (VPPA)i had quite a year in 2023. Building on its newfound stardom and cachet in the hands of the plaintiff class action bar toward the end of 2022, the VPPA just kept growing and growing […]

January 24, 2024

Introduction In 2023, India and Saudi Arabia each published new laws and regulations expanding on existing or setting forth new comprehensive data privacy laws. This article summarizes the notable developments in these jurisdictions, specifically focusing on the updated obligations and […]

January 17, 2024

As we have detailed previously, 2023 was a landmark year for privacy law, featuring numerous developments at the federal, state and international levels, ranging from newly enacted statutes to massive regulatory enforcement actions. Early signs already indicate that 2024 is […]

January 10, 2024

As we begin the new year, many are wondering whether the growing list of US state privacy laws apply to them, and if so, what steps they should take to address them. For companies that gather information from consumers, especially […]