Category: Blog

  • Could India’s 6-Month Implementation Timeline Come True?

    Could India’s 6-Month Implementation Timeline Come True?

    India is moving full-steam ahead in the hopes of having the quickest privacy law implementations to date. Minister of State for Electronics and Information Technology Rajeev Chandrasekhar sat with students at Delhi University and reiterated his hope for a swift timeline saying, “We may give a certain amount of time for platforms to migrate, to…

  • CPPA Sets New Risk Assessment Standard with Release of Draft Rules

    CPPA Sets New Risk Assessment Standard with Release of Draft Rules

    The CPPA is continuing to provide operating rule guidance, getting more serious about the need for organizational risk assessment & full understanding of your organization’s data and usage/retention of Personal Information. While these are just draft rules, with the potential for change, we don’t anticipate they will diverge drastically. The Risk Assessment Regulation draft covers…

  • Colorado Attorney General Phil Weiser Sends Letters to Companies – What’s Next?

    Colorado Attorney General Phil Weiser Sends Letters to Companies – What’s Next?

    Colorado Attorney General Phil Weiser is following in California Attorney General Rob Bonta’s footsteps by sending letters to organizations in scope of their respective privacy laws. While AG Weiser’s notices didn’t serve as a warning of non-compliance, it made clear his intentions to bring enforcement in the future. To summarize the letters that went out,…

  • India’s Privacy Law Stuns with Announcement of Rapid Implementation in Under a Year

    India’s Privacy Law Stuns with Announcement of Rapid Implementation in Under a Year

    Update: On August 11, 2023 President Droupadi Murmu signed the Digital Personal Data Protection Bill after it was passed by both the house of the parliament. Several nations praised India’s Digital Personal Data Protection Act once it was passed, according to The Economic Times of India. A representative from Norway’s Datatilsynet, which oversees data protection,…

  • AG Bonta Foreshadows Enforcement with Latest Sweep of Connected Car Inquiry Letters

    AG Bonta Foreshadows Enforcement with Latest Sweep of Connected Car Inquiry Letters

    The list of industries being targeted for privacy enforcement is continuing to grow. California Attorney General Rob Bonta has announced that his next wave of privacy reviews is aimed at connected vehicle manufacturers and related technologies. Vehicles are connected to their operators in a way they never have been before, underlining privacy issues with “location…

  • Self-Evaluation Is Attorney General Bonta’s Latest Enforcement Strategy

    Self-Evaluation Is Attorney General Bonta’s Latest Enforcement Strategy

    Large California employers are on Attorney General Rob Bonta’s radar and the latest to see a wave of communications from the AG. When CPRA was introduced as an update to the CCPA it was apparent that employment data was going to be an important part of compliance. However, with rulemaking hitting speed bumps and enforcement…

  • Artificial Intelligence: The Latest Topic to Make Privacy Professionals Sweat

    Artificial Intelligence: The Latest Topic to Make Privacy Professionals Sweat

    Omar N. Bradley said, “If we continue to develop our technology without wisdom or prudence, our servant may prove to be our executioner.” When he said that, he couldn’t foresee artificial intelligence one day writing pages of code in mere seconds and making our wildest imaginations come true through AI-designed art. All jokes aside, in…

  • Colorado AG Comes Out Swinging, Plans to Send Enforcement Letters

    Colorado AG Comes Out Swinging, Plans to Send Enforcement Letters

    July 1st isn’t even 2 weeks behind us and Colorado Attorney General Phil Weiser has announced that enforcement letters are on their way. Weiser stated, “As I’ve said publicly throughout the process, this Department’s enforcement of the Colorado Privacy Act is a critical tool to protect consumers’ data and privacy. Our enforcement of this important…

  • What Do Privacy Laws and Donuts Have in Common? They Come in Dozens

    What Do Privacy Laws and Donuts Have in Common? They Come in Dozens

    Delaware became the 12th state overall to pass privacy legislation and the 7th just this year. Joining Indiana, Iowa, Montana, Oregon, Tennessee, and Texas on the growing list of states with new legislation in 2023, this law mirrors the Connecticut Data Privacy Act with some unique requirements. The Delaware Personal Data Privacy Act will go…

  • Monsoon Session Brings India’s Privacy Bill to the Table

    Monsoon Session Brings India’s Privacy Bill to the Table

    India’s Digital Personal Protection Bill is moving full steam ahead as the Union Cabinet has approved the measure. The Bill will be presented during the upcoming monsoon session of India’s Parliament after being in limbo for more than 4 years, first being drafted in 2018 by a special committee headed by Justice B.N. Srikrishna. Privacy…

  • Surprise! Oregon Becomes 11th State with Comprehensive Privacy Legislation

    Surprise! Oregon Becomes 11th State with Comprehensive Privacy Legislation

    If there’s one thing you can count on in privacy, that’s change. In a surprising turn of events, Oregon crossed the legislative finish line with a remarkably rigorous privacy law set to go into effect on July 1, 2024. SB 619 has been signed by the Oregon House and Senate and is on its way…

  • Florida Adds to the Fray –Why is it Different?

    Florida Adds to the Fray –Why is it Different?

    Another day, another law! Florida is the latest state to pass (more narrow) privacy legislation with approval by Governor Ron DeSantis on June 6th. So how does it compare? Florida has strayed from the pack by not following the prototype of a typical comprehensive privacy law, lacking in some of the more stringent obligations set…

  • As Predicted, Texas is the Next State with a Comprehensive Privacy Law

    As Predicted, Texas is the Next State with a Comprehensive Privacy Law

    Both the Texas House and Senate have approved the latest comprehensive privacy law. This is significant for organizations as it’s one of the first states in the middle of the country to pass a law with widespread applicability – almost 30 million consumers will be covered by this legislation. Texas is the 5th state to…

  • Truyo Prediction: 10 States Will Have Privacy Laws by June 1st and Texas is Next

    Truyo Prediction: 10 States Will Have Privacy Laws by June 1st and Texas is Next

      The ink is still drying on the last round of state privacy bills that enacted comprehensive privacy legislation through governor signature and now it looks like Texas, with bipartisan approval of H.B.4, is next in line. Modeled after Virginia’s privacy law, the proposed Texas Data Privacy and Security Act imposes obligations on businesses regarding…

  • US Privacy Patchwork Update

    US Privacy Patchwork Update

    Another week, another critical stretch for the patchwork that is US privacy. Let’s run through the roster news over the last few weeks. Upcoming State Laws Governor Eric Holcomb of Indiana signed SB 5 into law on May 1st, making Indiana the eighth state to adopt comprehensive consumer data privacy legislation with an effective date…

  • Indiana Privacy Law Passes, Should I Really Care? Yes, and Here’s Why

    Indiana Privacy Law Passes, Should I Really Care? Yes, and Here’s Why

    Governor Eric Holcomb’s signature is inked, and Indiana is officially the seventh state to join the burgeoning list of states with comprehensive privacy legislation. The Indiana privacy law (Senate Bill 337) will take effect on July 1, 2026, applicable to any business that collects personal information of Indiana residents, regardless of whether the business is…

  • Montana and Tennessee Grow the Privacy Patchwork

    Montana and Tennessee Grow the Privacy Patchwork

    Follow Truyo on LinkedIn to get breaking privacy updates Update May 11, 2023: Both Governor Bill Lee and Governor Greg Gianforte signed their respective privacy acts making Tennessee and Montana the latest states to enact comprehensive privacy legislation. Governor Lee made clear where he stands on consumer privacy rights as he signs only 4% of…

  • Is the Privacy Law Patchwork Upon Us?

    Is the Privacy Law Patchwork Upon Us?

    The last 30 days in privacy have been critical with many states making movement, clarity on laws that have passed, and a new health law that could affect your business. In the last few weeks, we have seen rulemaking released by the CPPA and for the Colorado Privacy Act, Iowa passed a law, Washington passed…

  • Reporting from the 2023 IAPP Global Privacy Summit

    Reporting from the 2023 IAPP Global Privacy Summit

    Privacy professionals from across the world gathered at the IAPP Global Privacy Summit in Washington DC this week, providing a forum to share ideas and learn about the latest developments in the field. Attendance was excellent, boasting a diverse group of experts gathered to learn about hot topics, the necessity for automation, and state-of-the-art privacy…

  • Final Operating Rules for Colorado: What You Need to Know

    Final Operating Rules for Colorado: What You Need to Know

    As new privacy laws pass, legislators and enforcement entities are faced with operationalizing those laws in a way that makes it possible for organizations to comply through clear and concise rules. Colorado Attorney General Phil Weiser released the final operating rules for the Colorado Privacy Act (CPA). These guidelines are intended to provide explicit standards…