The Bottom Line Two new Utah laws will require social media companies to get parental consent for all users under 18, re-verify the age of existing users, prohibit advertising to such minors, and more.These onerous requirements may lead social media companies to avoid Utah altogether. Both Continue Reading
The FTC Enforces its First Fine Under the Health Breach Notification Rule
The Bottom Line The FTC is showing that it intends to be more active regarding the misuse and exploitation of sensitive personal information. Companies that use health information should take precautions to protect consumer data and provide proper disclosures when sharing health information with Continue Reading
Revised Colorado Privacy Act Rules
The Bottom Line While companies are working to update their privacy notices and internal practices in light of the new California and Virginia laws that went into effect on January 1, 2023, they should consider additional issues covered by Colorado’s law.Colorado’s rules are not yet final, so we Continue Reading
2023 Top Privacy Issues: New Laws & Expanded Enforcement
The Bottom Line As new state privacy laws go into effect in 2023, companies need to ensure compliance with an ever growing list of obligations.Expect regulators to keep cracking down on dark patterns and privacy violations, including noncompliance with these new privacy laws. Privacy laws Continue Reading
California Issues Second Draft of CPRA Regulations
The Bottom Line California has released a second version of draft regulations for the CPRA, a mere 10 weeks before the law is to take effect.This latest draft has changes that are both beneficial to businesses and increase the complexities of compliance.Given the fact that the regulations have Continue Reading
Colorado Privacy Act Draft Rules Issued
Update The Colorado Attorney General's Office released revised rules on December 21, 2022. Please refer to our alert covering the significant changes to the proposed rules. The Bottom Line The Colorado Attorney General’s Office has publicly committed to try to harmonize its consumer Continue Reading
California Governor Signs Age-Appropriate Design Code into Law
The Bottom Line For the first time, a state has enacted a bipartisan law that imposes monetary fines on companies that violate children’s privacy or jeopardize the online safety of minors under age 18. The Act requires businesses to reevaluate their privacy practices related to children and Continue Reading
First CCPA Enforcement Action’s $1.2 Million Fine to Sephora is a Wakeup Call for the Ad Tech Industry
The Bottom Line The first substantial CCPA enforcement action should be a wakeup call for the advertising industry. California is aggressively policing the industry and looking closely at the third-party tracking mechanisms used on sites. With the CPRA just around the corner, more Continue Reading
Draft CPRA Regulations Issued by the California Privacy Protection Agency
The Bottom Line The proposed Regulations include many changes and clarifications to aspects of the CPRA, including, but not limited to: the selling or sharing of consumer personal information to third parties; consumer notice and privacy policy requirements; recognition of opt-out preference Continue Reading
Utah Consumer Privacy Act Joins the Growing List of Comprehensive State Privacy Laws
The Bottom Line In the absence of a new comprehensive consumer privacy law on the federal level, states continue to propose their own laws.Utah has become the fourth state in the United States to enact such a law.There are similarities, but some differences, with the new laws in California, Continue Reading