California Bills, Rulemaking, and Enforcement Update -
CPPA automated decision-making technology -
On November 22, 2024, the California Privacy Protection Agency (CPPA) opened the formal public comment period on its...more
1/21/2025
/ Algorithms ,
Automated Decision Systems (ADS) ,
California ,
California Consumer Privacy Act (CCPA) ,
California Privacy Protection Agency (CPPA) ,
Consumer Privacy Rights ,
Data Brokers ,
Data Privacy ,
Data Protection ,
Enforcement Actions ,
Federal Trade Commission (FTC) ,
New York ,
Online Safety for Children ,
Privacy Laws ,
State Privacy Laws ,
Texas
In June 2024, California Attorney General Rob Bonta and Los Angeles City Attorney Hydee Feldstein Soto announced a $500,000 settlement1 with Tilting Point Media LLC (Tilting Point). After a joint investigation by the...more
On April 2, 2024, the California Privacy Protection Agency's (CPPA) Enforcement Division issued its first enforcement advisory, titled "Applying Data Minimization to Consumer Requests," to further emphasize the importance of...more
5/9/2024
/ California ,
California Consumer Privacy Act (CCPA) ,
California Privacy Protection Agency (CPPA) ,
Data Collection ,
Data Deletion ,
Data Protection ,
Data Selling ,
Data-Sharing ,
Enforcement ,
New Regulations ,
Opt-Outs ,
Personal Data ,
Regulatory Requirements
On February 21, 2024, California Attorney General Rob Bonta ("Cal AG") announced that his office reached a settlement with DoorDash, the food delivery service company, for violating the California Consumer Privacy Act...more
3/25/2024
/ California Consumer Privacy Act (CCPA) ,
Consumer Privacy Rights ,
Data Selling ,
DoorDash ,
Enforcement Actions ,
Opt-Outs ,
Personal Information ,
Privacy Policy ,
Settlement ,
State Attorneys General ,
State Privacy Laws ,
Third-Party Service Provider
The effective dates of new U.S. data privacy laws are closing in. Currently, thirteen states have passed comprehensive data privacy laws in the United States: California, Virginia, Colorado, Connecticut, Utah, Iowa, Indiana,...more
2/7/2024
/ California Consumer Privacy Act (CCPA) ,
Data Collection ,
Data Privacy ,
Data Protection ,
Data Protection Acts ,
Data Security ,
New Legislation ,
Personal Information ,
Privacy Laws ,
Regulatory Reform ,
Regulatory Requirements ,
State and Local Government ,
State Privacy Laws
In 2019, the US data privacy framework changed significantly with the emergence of the California Consumer Privacy Act which created a significant compliance burden for most businesses that collect personal information about...more
12/27/2023
/ California ,
California Consumer Privacy Act (CCPA) ,
Data Privacy ,
Data Protection ,
Data Protection Acts ,
Data Security ,
Enforcement ,
Legislative Agendas ,
Personal Information ,
State and Local Government ,
State Legislatures ,
State Privacy Laws
The California Attorney General's (the "Cal AG") office appears to be moving forward with enforcement activities, despite a recent court ruling delaying enforcement of CPRA regulations. In the past month, since the amendments...more
8/16/2023
/ California ,
California Consumer Privacy Act (CCPA) ,
California Privacy Rights Act (CPRA) ,
Compliance ,
Consumer Privacy Rights ,
Data Collection ,
Data Privacy ,
Employees ,
Employer Liability Issues ,
Employment Policies ,
Enforcement Actions ,
Hiring & Firing ,
Mobile Apps ,
New Regulations ,
Personal Information ,
Privacy Laws ,
Regulatory Agenda ,
State Privacy Laws
On January 27, 2023 California Attorney General Rob Bonta ("Cal AG") announced a new enforcement sweep, aimed at businesses with mobile apps that do not comply with the California Consumer Privacy Act ("CCPA"). The...more
California employers' reprieve from obligations to employees to disclose data privacy practices and provide access rights to employees appears to be coming to an end as the California Privacy Rights Act (CPRA) becomes...more
10/12/2022
/ California ,
California Consumer Privacy Act (CCPA) ,
California Privacy Rights Act (CPRA) ,
Compliance ,
Confidential Communications ,
Data Collection ,
Data Privacy ,
Disclosure Requirements ,
Notice Requirements ,
Opt-Outs ,
Personal Information ,
Policies and Procedures ,
Privacy Laws
In a long anticipated development, on August 24 California Attorney General Rob Bonta ("Cal AG") announced the state's first monetary penalty under the California Consumer Privacy Act ("CCPA"), in a settlement with the beauty...more
As state and federal legislatures across the United States continue to contemplate comprehensive data protection legislation, two pending laws—the California Privacy Rights Act (CPRA) and the Virginia Consumer Data Protection...more
Hot on the heels of the California Attorney General's rulemaking process for the California Consumer Privacy Act ("CCPA"), California voters have passed a ballot initiative to expand and create new privacy rights for...more
On August 14, 2020, California’s Office of Administrative Law (“OAL”) approved the final version of the implementing regulations for the California Consumer Privacy Act (“Final Regulations”). The approval of these final...more
8/18/2020
/ California Consumer Privacy Act (CCPA) ,
California Privacy Rights Act (CPRA) ,
Compliance ,
Consumer Requests ,
Corporate Counsel ,
Data Security ,
Enforcement Actions ,
New Regulations ,
Notice and Comment ,
Notice Requirements ,
Personal Information ,
Privacy Policy ,
Recordkeeping Requirements ,
State Attorneys General ,
Verification Requirements
Irrespective of your industry, the current COVID-19 pandemic poses a new and unique challenge to organizations, their employees, and their customers. The emergence of COVID-19 has prompted organizations to collect and process...more
4/15/2020
/ Business Associates ,
California Consumer Privacy Act (CCPA) ,
Centers for Disease Control and Prevention (CDC) ,
Compliance ,
COPPA ,
Coronavirus/COVID-19 ,
Cyber Threats ,
Cybersecurity ,
Cybersecurity Information Sharing Act (CISA) ,
Data Privacy ,
Data Protection ,
Department of Health and Human Services (HHS) ,
Employee Privacy Rights ,
Federal Trade Commission (FTC) ,
FERPA ,
Financial Industry Regulatory Authority (FINRA) ,
Hackers ,
Health Insurance Portability and Accountability Act (HIPAA) ,
HIPAA Privacy Rule ,
NYDFS ,
OCR ,
Patient Privacy Rights ,
Telehealth
The CCPA took effect on 1 January 2020, introducing significant compliance burdens for most businesses that collect personal information about California residents. The reach of the CCPA extends beyond California and the US;...more
2/1/2020
/ California Consumer Privacy Act (CCPA) ,
Compliance ,
Consumer Protection Laws ,
Consumer Rights Directive ,
Corporate Liability ,
Data Collection ,
Data Sellers ,
Data Subjects Rights ,
EU ,
Extraterritoriality Rules ,
General Data Protection Regulation (GDPR) ,
Multinationals ,
Personal Data ,
Personal Information ,
Risk Assessment ,
UK ,
UK Data Protection Act
Your business complies with the General Data Protection Regulation ("GDPR") and/or Turkish Personal Data Protection Law numbered 6698 and its secondary legislation ("PDPL"); but does it comply with the California Consumer...more
1/8/2020
/ California Consumer Privacy Act (CCPA) ,
Compliance ,
Consumer Protection Laws ,
Covered Entities ,
Cross-Border Transactions ,
Data Buyers ,
Data Collection ,
Data Processors ,
Data Sellers ,
Disclosure Requirements ,
E-Commerce ,
Electronic Payment Transactions ,
General Data Protection Regulation (GDPR) ,
Internet Streaming ,
Online Gaming ,
Opt-Outs ,
Personal Information ,
Portability ,
Privacy Laws ,
Right of Access ,
Right to Be Forgotten ,
Risk Assessment ,
Risk Mitigation ,
Transparency ,
Turkey ,
Turkish Personal Data Protection Law (PDPL)
White & Case Technology Newsflash With only 100 days left in 2019 as of the date of this publication, the California Consumer Privacy Act (CCPA) will be here before you know it. As we have described previously, the CCPA...more
9/24/2019
/ Amended Rules ,
California Consumer Privacy Act (CCPA) ,
Compliance ,
Consumer Protection Laws ,
Corporate Counsel ,
Data Collection ,
Data Sellers ,
Data-Sharing ,
Employee Training ,
Personal Information ,
Privacy Policy ,
Proposed Amendments ,
Transparency
While businesses have been focused on meeting the looming January 1, 2020 deadline of the California Consumer Privacy Act ("CCPA"), Nevada just ratchetted up the heat by imposing an earlier October 2, 2019 deadline for...more
6/10/2019
/ Amended Legislation ,
California Consumer Privacy Act (CCPA) ,
Consumer Privacy Rights ,
Consumer Rights Directive ,
Data Brokers ,
Data Collection ,
Data Privacy ,
GLBA Privacy ,
Governor Sisolak ,
Health Insurance Portability and Accountability Act (HIPAA) ,
Internet ,
Internet Retailers ,
Notice Requirements ,
Online Platforms ,
Personal Data ,
Personally Identifiable Information ,
Privacy Laws ,
State Legislatures