News & Insights

Clear Filter

Insights

CalPrivacy’s Latest Data Broker Crackdown: Three Practical Takeaways for Companies

The California Privacy Protection Agency has issued two new enforcement decisions that underscore its expanding focus on data broker accountability under the…

Practical Privacy Privacy & Data Security

Insights

New CCPA Risk Assessment and Automated Decision-making Technology Regulations: Maybe Not Quite as Bad as They Look?

As we recently discussed, CalPrivacy (the cool new name the California Privacy Protection Agency recently gave itself) adopted new CCPA regulations earlier…

Practical Privacy Privacy & Data Security

Insights

California’s New CCPA Cybersecurity Audit Regulations: A Roadmap to “Reasonable” Security?

Last week, the California Privacy Protection Agency (“Agency”) approved adoption of detailed new regulations under the CCPA that will include…

Practical Privacy Privacy & Data Security

Insights

Not Just for Auto Dealers: What the FTC’s Updated Safeguards Rule Means for All Non-Bank Financial Institutions

Last month, the Federal Trade Commission issued guidance on the updated Safeguards Rule in the form of a set of …

Practical Privacy Privacy & Data Security

Insights

Connecting the Dots: Privacy Law Updates from the Nutmeg State

On June 24, 2025, the Connecticut governor signed into law SB 1295, a bill amending the Connecticut Data Protection…

Practical Privacy Privacy & Data Security

Insights

U.S. District Court Vacates HIPAA Reproductive Health Privacy Rule Nationwide

A U.S. District Court in the Northern District of Texas has vacated most of the HIPAA Privacy Rule to Support Reproductive Health…

Practical Privacy Privacy & Data Security

Insights

The Justice Department’s New Rule on Access to U.S. Sensitive Personal Data and Government-Related Data by Countries of Concern or Covered Persons: A Guide to Determining Whether Your Business is Covered

On April 8, 2025, the Department of Justice’s new rule on Access to U.S. Sensitive Personal Data and…

Privacy & Data Security

Insights

ConnectiCut to the Chase: Lessons from the Connecticut AG’s Latest CTDPA Enforcement Report

On April 17, 2025, the Connecticut Office of the Attorney General (“OAG”) released an Updated Enforcement Report Pursuant to the Connecticut Data…

Practical Privacy Privacy & Data Security

Insights

5 Reasons Virginia’s New Reproductive and Sexual Health Privacy Law is a BFD for Business (Spoiler: There’s a Private Right of Action)

In a development that seems to have flown mostly under the radar this week, Virginia’s governor signed on Monday …

Practical Privacy Privacy & Data Security

Insights

Blazing a Trail in Oregon: The AG’s Six Month Report on OCPA Complaints and Enforcement

To commemorate the six months since the Oregon Consumer Privacy Act (“OCPA”) became effective, Oregon Attorney General Dan Rayfield released earlier this…

Practical Privacy Privacy & Data Security