News & Insights

Insights

Blazing a Trail in Oregon: The AG’s Six Month Report on OCPA Complaints and Enforcement

To commemorate the six months since the Oregon Consumer Privacy Act (“OCPA”) became effective, Oregon Attorney General Dan Rayfield released earlier this…

Practical Privacy Privacy & Data Security

Insights

Patchwork 2.0: FAQs on Emerging US State AI Laws and What to Do About Them

US privacy lawyers have long used the “patchwork” metaphor to describe the US privacy legal landscape. Early signs suggest that metaphor may…

Practical Privacy Privacy & Data Security

Insights

Something Old, Something New: Latest NYDFS Cybersecurity Regulation Enforcement Action Emphasizes Policy Implementation, Training, and Effective Access Controls

The New York State Department of Financial Services recently announced that it has entered into a consent…

Practical Privacy Privacy & Data Security

Insights

First Lawsuit Filed under Washington’s My Health My Data Act

After Washington adopted the My Health My Data Act (MHMDA) almost two years ago, we and others predicted that the…

Practical Privacy Privacy & Data Security

Insights

Analyze This: OCR Kicks Off 2025 with Two New HIPAA Enforcement Actions Against Business Associates as Part of New Risk Analysis Initiative

Just two weeks into the year, 2025 is already shaping up to be a busy year for privacy lawyers, especially those tasked…

Practical Privacy

Insights

Addressable No More: HHS Proposes Significant Changes to HIPAA Security Rule

On December 27, 2024, the Department of Health and Human Services (“HHS”) proposed substantial revisions to the 20-year-old HIPAA Security Rule. Comments…

Practical Privacy Privacy & Data Security

Insights

Naughty and Nice: Recent Website Tracking Technology Cases Present Mixed Bag for Website Operators

Many people are thinking of holiday cookies at this time of year, but your favorite privacy lawyers are still thinking more about…

Practical Privacy Privacy & Data Security

The CPPA’s Hunt for Unregistered Data Brokers

The California Privacy Protection Agency (“CPPA”) has ramped up enforcement efforts under the California Delete Act. In the span…

Practical Privacy Privacy & Data Security

Maybe Not Practical After All: HUD Proposes Revised Cyber Incident Reporting Requirement for FHA-Approved Mortgagees

Practical Privacy Privacy & Data Security

Illinois Adopts Business-Favorable Amendment to Biometric Information Privacy Act

Practical Privacy Privacy & Data Security