Tag: privacy

March 25, 2024

1. What’s New? The big news last week was three bills passing out of a state chamber. In Vermont, Representative Priestley’s H.121 unanimously passed the House on March 22. As we noted last week, this general consumer data privacy bill […]

March 18, 2024

As your company grows, so do the risks of errors and missteps. Integrating new technologies across different teams and facets of your business brings countless opportunities, but the risk of privacy infringements rises, too. Take AI, for example: Last year, […]

March 14, 2024

Enacted in 1998, Illinois’ Genetic Information Privacy Act (GIPA) governs the confidentiality and use of genetic testing and genetic information by employers and insurers. The statute was designed to prevent employers and insurers from using genetic testing and information as […]

February 14, 2024

The Connecticut Office of the Attorney General (“CT AG”) has released its first report on enforcement of the Connecticut Data Privacy Act (“CTDPA”), revealing its focus on companies’ privacy policies, protections of “sensitive data” (such as genetic, biometric and geolocation […]

February 13, 2024

On February 9, 2024, the California Third District Court of Appeals in Sacramento overturned a lower court order that postponed enforcement of the California Privacy Protection Agency’s (CPPA) newest rules. The decision restores the authority of the CPPA and California […]

February 12, 2024

In an opinion filed on Friday, California’s Third District Court of Appeal reversed a lower court ruling that postponed until the end of March the enforcement of regulations promulgated pursuant to the California Privacy Rights Act. The CPRA amended the […]

February 9, 2024

Most organizations and online platforms use multifactor authentication (MFA) (also called two-factor authentication) to confirm that the user is an authorized individual and not a scammer or fraudster. We have all been trained to use MFA through our workplaces to […]

February 8, 2024

In the first part of this series we discussed why data and privacy legislation has developed and its purpose. We also provided a brief introduction to Bermuda’s privacy legislation, the Personal Information Protection Act 2016 (“PIPA”). While the substantive provisions […]

February 5, 2024

It was a busy week of committee hearings and meetings for consumer data privacy bills. In Maine, another work session was held on January 29 on the two pending consumer data privacy bills (LD 1977 / LD 1973). A work […]

January 31, 2024

Last week, California Attorney General Rob Bonta announced an investigative sweep of providers of streaming services to determine whether these businesses are complying with California Consumer Privacy Act (“CCPA”) opt-out requirements for businesses that sell or share consumer personal information. […]

January 30, 2024

New Jersey and New Hampshire are the latest states to pass comprehensive privacy legislation, joining California, Virginia, Colorado, Connecticut, Utah, Iowa, Indiana, Tennessee, Montana, Oregon, Texas, Florida, and Delaware. Below is a summary of key takeaways. New Jersey On January […]

January 24, 2024

The Video Privacy Protection Act (VPPA)i had quite a year in 2023. Building on its newfound stardom and cachet in the hands of the plaintiff class action bar toward the end of 2022, the VPPA just kept growing and growing […]

January 24, 2024

Introduction In 2023, India and Saudi Arabia each published new laws and regulations expanding on existing or setting forth new comprehensive data privacy laws. This article summarizes the notable developments in these jurisdictions, specifically focusing on the updated obligations and […]

January 17, 2024

As we have detailed previously, 2023 was a landmark year for privacy law, featuring numerous developments at the federal, state and international levels, ranging from newly enacted statutes to massive regulatory enforcement actions. Early signs already indicate that 2024 is […]

January 10, 2024

As we begin the new year, many are wondering whether the growing list of US state privacy laws apply to them, and if so, what steps they should take to address them. For companies that gather information from consumers, especially […]

January 5, 2024

On December 29, 2023, the Colorado Attorney General (the “AG”) announced that the Global Privacy Control (“GPC”) will become the first universal opt-out mechanism (“UOOM”) the AG considers valid under the Colorado Privacy Act (the “CPA”). Effective July 1, 2024, […]

January 4, 2024

You are the HIPAA privacy official of a hospital or health plan (a covered entity under HIPAA). You receive an email from a vendor that handles protected health information (a business associate), informing you that one month ago an unauthorized […]

December 29, 2023

BankInfoSecurity.com reported “Google reached a preliminary settlement in a class action lawsuit that alleged the tech giant had misled consumers about their privacy protections when using the private browsing Incognito mode of its Chrome web browser.” The December 28, 2023 […]

December 27, 2023

Looking back on 2023, the trend of privacy-based class actions has only increased, and it doesn’t seem poised to halt or even slow down in the new year. Businesses are feeling acutely the threat of future litigation. At the end […]

December 15, 2023

On December 8, 2023, the California Privacy Protection Agency (CPPA) moved forward with an insurance regulation that could expand the privacy compliance obligations of insurance companies. The California Privacy Rights Act (CPRA) required the CPPA to undertake a rulemaking to […]