There has been a whirlwind of activity over the past year as states enact and implement comprehensive consumer privacy laws. Starting with the passage of the California Consumer Privacy Act (CCPA) in 2018, which became effective in 2020, the US state privacy legal landscape has continued to develop rapidly. New comprehensive privacy frameworks are set
CCPA (CA Consumer Privacy Act)
CA Attorney General Says ‘The Kid Gloves Are Coming Off’; Announces $1.2M Settlement with Retail Co. for CCPA Sales Violation
Online businesses that sell to California residents should take note of a recent enforcement action by the state’s attorney general (AG) signaling that adequate notice of sale must be provided in a business’s privacy policy, California residents’ opt-out requests must be honored, and, from the AG’s perspective, the use of third-party cookies for targeted advertising…
Connecticut Passes Comprehensive Privacy Law: Comparing to Other State Privacy Laws
Connecticut has become the fifth state to pass comprehensive consumer data privacy legislation. Connecticut Governor Ned Lamont signed the bill into law on May 10, 2022, and the Connecticut Data Privacy Act” (CTDPA) will take effect on July 1, 2023. This Legal Update discusses the CTDPA’s scope; compares it with the other state privacy laws…
Utah Passes Comprehensive Privacy Law: How the UCPA Compares to Other State Privacy Laws
Following in the footsteps of California, Virginia and Colorado, Utah has become the fourth state to pass comprehensive consumer data privacy legislation. Utah Governor Spencer Cox signed Utah Consumer Privacy Act (“UCPA”) into law on March 24, 2022—the first major state law domino to fall in 2022 and the first comprehensive data privacy legislation since…
State Privacy Law Roundup: Developments in California, Virginia and Colorado
New comprehensive privacy frameworks in California, Virginia and Colorado are set to come into effect in 2023, and in recent days attention has turned to Utah, where a privacy bill closely resembling Virginia’s is on the governor’s desk for signature. The rulemaking processes for the enacted laws are in their early stages. To the chagrin…
Data Privacy and Cybersecurity Issues in M&A Transactions
Mayer Brown partners Christian Fabian, Stephen Lilley and Lei Shen, located in the United States, focus on data privacy and cybersecurity issues in M&A transactions.
Virginia’s New Data Privacy Law: Comparing to California and Preparing for Next Steps
Virginia has become the second state to enact a comprehensive consumer data privacy statute in the United States. Signed into law by Virginia Governor Ralph Northam on March 2, 2021, the Consumer Data Protection Act (“CDPA”) will take effect on January 1, 2023. While the CDPA shares some key components with the California Consumer Privacy…
What Comes Next After “Yes” on 24? From the CCPA to the CPRA and Beyond
On November 3, 2020, a majority of Californians cast “yes” votes for Proposition 24, the ballot initiative enacting the California Privacy Rights Act of 2020 (CPRA). Although the election results have not yet been certified by the California Secretary of State and may not be before December 11, 2020 (the latest date), the CPRA had
…
Global Privacy Developments: Europe, Asia and the Americas
Privacy developments have been evolving rapidly over the past year globally. Our panelists will focus on recent major privacy developments in jurisdictions worldwide, including the impact of Schrems II and Brexit on data transfers, the Lei Geral de Proteção de Dados Pessoais (LGPD) coming into effect in Brazil, developments concerning the California Consumer Privacy Act…
A Legal Soap Opera: As the CCPA and CPRA Turn
The long-awaited enforcement date of July 1, 2020, for the California Consumer Privacy Act (“CCPA”) has finally arrived. The Office of the California Attorney General began enforcing the CCPA that very day, even before its implementing regulations (the “Regulations”) were finalized or approved. The Regulations finally became effective on August 14, 2020, but not before…