Should Utah's Privacy Law Be on Your Radar?

When it comes to privacy compliance, businesses will have a lot on their plate in 2023. Major changes to the California Consumer Privacy Act (CCPA) are going into effect (including the expiration of employee data exemption), as well as four new state privacy laws. Among these is the Utah Consumer Privacy Act (UCPA).

Connecticut’s Privacy Law: Does It Apply to Your Business?

As 2023 approaches and a new round of data privacy laws are slated to take effect, business leaders are scrambling to determine which laws apply to their companies and how to juggle multi-state compliance. The Connecticut Data Privacy Act (CDPA) is one of those laws, going into effect on July 1, 2023.

Global Privacy Control: A New Requirement for Compliance

A simple browser signal may have the power to reshape online privacy.

A Cookie Banner Isn't Enough for CCPA Compliance

There are a lot of misconceptions surrounding cookie banners and data privacy laws like the California Consumer Privacy Act (CCPA) and the General Data Protection Regulation (GDPR). The proliferation of cookie pop-ups and consent banners has led many to believe they are required, even when they are not (they are required in Europe, but more on that below). More dangerously, some believe that adding a cookie banner to their website is all that is required for privacy compliance, which is...

Why CCPA Compliance Matters to HR

Since it was passed in 2018, the California Consumer Privacy Act (CCPA) has been seen as mainly an issue for marketing and eCommerce teams—i.e., people who deal with customers and website visitors. Even though they handle large volumes of personal information, human resources departments have been spared many of the privacy law’s requirements because they deal exclusively with internal data from job applicants, employees, and contractors.

When Do the New State Privacy Laws Go into Effect?

New California Privacy Law Expands Protections for Children

Article Highlights: California Age-Appropriate Design Code Act extends beyond existing COPPA protections All minors under 18 years old are protected Major restrictions where online services are likely to be accessed by children

CCPA Exemptions for Employee & B2B Data Will Expire in 2023

Article Highlights: Exemption set to expire on January 1, 2023 Employee and B2B data will be treated like any other personal information Businesses should revisit several areas of their CCPA compliance

Takeaways from the Latest CCPA Enforcement Summary

Article Highlights: CCPA enforcement remains robust Case examples emphasize ease of user experience for consumers Exchange of personal information for services is considered a "sale"

Sephora Fined $1.2 Million Over CCPA Violations

Article Highlights: First major fine for violation of the CCPA Sephora website had no method to opt-out of sale of personal information & no implementation of the Global Privacy Control standard Fines likely to be more common as the mandatory 30-day cure period expires California Attorney General Rob Bonta announced that his office has recently settled a case with makeup retailer Sephora over a number of violations of the California Consumer Privacy Act (CCPA). The settlement requires Sephora...

An Introduction to the Colorado Privacy Act

The latest in an emerging patchwork of state privacy legislation in the United States, Colorado recently passed and signed into law the Colorado Privacy Act (CPA). It is mostly an iteration of Virginia’s Consumer Data Protection Act (CDPA), also passed this year, but it has a few of its own unique features. It also takes a number of cues from the California Consumer Privacy Act (CCPA), America’s first comprehensive data privacy law.

CCPA Enforcement in Its First Year

The California Consumer Privacy Act (CCPA) officially became enforceable on July 1, 2020, and according to the California Attorney General, actual enforcement began on that very same day. Just over a year later, the Office of the Attorney General (OAG) has recently released a list of examples of the enforcement actions it has taken against businesses and how they were resolved.