While most companies are squarely focused on the California Consumer Privacy Act (CCPA), 2019 has seen other major developments on data privacy and security. Several states have reacted to the CCPA by passing or pursuing their own security and privacy legislation, and others will likely follow. Namely, Nevada, New York, Maine and North Dakota have passed new data privacy and security legislation this year, while the Massachusetts, New Jersey and Pennsylvania state legislatures may still pass pending bills. As a reminder, the CCPA, which takes effect January 1, 2020, grants California consumers considerable control over the sale of their personal information by companies, as well as the right to access personal information collected by companies and to request that it be deleted. For more on the CCPA, please see previously published firm materials about the act’s requirements, compliance tips for covered companies and a detailed webinar.