-
Jan 15, 2025 | 
jdsupra.com | Aaron Burstein |Alexander Schneider
Data brokers who are registering with the California Privacy Protection Agency (CPPA) this month should prepare to provide full metrics about their responses to privacy rights in calendar year 2023.
-
Jan 8, 2025 | 
jdsupra.com | Aaron Burstein |Alexander Schneider
January 8, 2025
To embed, copy and paste the code into your website or blog:
The California Privacy Protection Agency’s (CPPA) new data broker regulations took effect on December 27, 2024. They are now in effect during the CPPA’s annual data broker registration period, which lasts from January 1 to January 31, 2025. Any business that operated as a data broker in 2024 is required to register during this period.
-
Nov 25, 2024 | 
jdsupra.com | Meaghan Donahue |Alysa Zeltzer Hutnik |Alexander Schneider
Under many circumstances, state privacy laws require businesses to pass a consumer’s valid deletion request to any entity that processes the data on behalf of the business or otherwise is a recipient of the data. These so-called “flow-down” obligations can be challenging to unpack. Here’s a look at the flow-down obligations that may be applicable, depending on the circumstances.
-
Nov 20, 2024 | 
jdsupra.com | Aaron Burstein |Alysa Zeltzer Hutnik |Alexander Schneider
On November 8, the California Privacy Protection Agency (CPPA) voted 5-0 to approve new regulations to implement the DELETE Act of 2023.
-
Oct 9, 2024 | 
jdsupra.com | Aaron Burstein |Alysa Zeltzer Hutnik |Alexander Schneider
The California Privacy Protection Agency (CPPA) has signaled it will advance rulemaking at its upcoming November 8 board meeting to place restrictions on the use of automated decision-making technology (ADMT) and impose new obligations to require businesses to conduct cybersecurity audits and risk assessments.
-
Jul 5, 2024 | 
jdsupra.com | Ioana Gorecki |Alysa Zeltzer Hutnik |Alexander Schneider
AI capabilities are growing by the day, and with them, so are increasing government efforts to put in place guardrails, principles, and rules to govern the AI space. In May alone, Utah’s Artificial Intelligence Policy Act became the first state-level AI law to take effect, Colorado and Minnesota enacted new laws addressing AI, and the European Union passed historic comprehensive AI regulations.
-
Jul 2, 2024 | 
jdsupra.com | Aaron Burstein |Alexander Schneider
On July 29, 2024, the FTC’s revised (HBNR) takes effect. The Rule requires vendors of personal health records (PHRs) and related entities not covered by HIPAA to notify individuals, the FTC, and in some cases, the media in the event of a breach of unsecured personal health data. Businesses operating a wide array of services, including health, diet, and fitness apps should take care to review the revised HBNR and assess its applicability to their practices.
-
Jan 10, 2024 | 
jdsupra.com | Alysa Zeltzer Hutnik |Alexander Schneider
The year ahead promises to be busy on the state privacy front. As we’ve covered on this blog, states are continuing to fill the gap at the federal level by implementing comprehensive state laws that guarantee consumer privacy rights and regulate data sales, targeted advertising, and sensitive data. Now, more states than ever are jumping on the bandwagon with comprehensive privacy laws on the books in more than 25 percent of U.S. states and new legislative efforts underway in many other states.
-
Dec 26, 2023 | 
jdsupra.com | Alexander Schneider |Laura VanDruff
The Federal Trade Commission (FTC) announced a Notice of Proposed Rulemaking (NPRM) to amend the Children’s Online Privacy Protection Act Rule (COPPA Rule). The COPPA Rule applies to operators of websites and online services that are directed to children under 13 or that have “actual knowledge” they are collecting personal information from children under 13. It imposes notice, consent, data security, and data minimization requirements. Below we summarize highlights from the rulemaking.
-
Jul 20, 2023 | 
jdsupra.com | Alysa Zeltzer Hutnik |Alexander Schneider
The California Privacy Protection Agency (CPPA) and California Office of Attorney General (OAG) are publicly pressing ahead with enforcement now that they have the authority to enforce the California Consumer Privacy Act (CCPA) as of July 1st. While the agencies did not announce headline grabbing enforcement decisions at the start of the month, there were some notable developments.
