-
It’s Official: Iowa Has a Comprehensive Privacy Law

On March 29th, Iowa joined California, Colorado, Connecticut, Utah, and Virginia in enacting a comprehensive privacy law. Over the last 3 years, legislators have struggled to get meaningful movement on their proposed bills, but this year resulted in success with a law that goes into effect on January 1, 2025. Key elements of Iowa’s privacy…
-
ChatGPT: What You Need to Know About the Disruptive AI App

In November of last year, OpenAI released ChatGPT, an artificial intelligence application that uses a method of transfer learning by utilizing both supervised and reinforcement strategies. The app skyrocketed in popularity due to its thorough responses to users in a variety of subject areas. As AI advances and expands into new industries, the question of…
-
Iowa is Set to Become Sixth State to Pass Consumer Privacy Law

Both chambers of the Iowa Legislature unanimously approved Senate File 262 on March 15. With a structure in the realm of Utah and Virginia, Iowa will become the sixth state to pass an omnibus consumer data privacy law that’s business-friendly and omnibus, barring any last-minute procedural obstacles. A privacy contact told Truyo that Iowa Governor…
-
Expert Privacy Predictions for the Remainder of 2023

As the first quarter of 2023 is winding down, the year is unfolding eventfully, but generally as expected. Those in the privacy world, like you, know this is a rapidly changing landscape with new developments monthly, if not weekly. So far, this year has not disappointed! The states continue to work to fill the gap…
-
House Committee on Energy and Commerce Meeting Results in Promising Discussions

On March 1st Representative Cathy McMorris Rodgers, who chairs the House committee in charge of internet regulations, held a committee meeting where she asked her colleagues to support a bill that would restrict how tech companies may collect and use consumers’ personal data. “Americans have no say over whether and where their personal data is…
-
California Attorney General Bonta Resists Federal Preemption

On Tuesday, February 28th CA Attorney General Bonta made his stance on federal preemption crystal clear. The American Data Privacy and Protection Act has introduced questions about preemption, especially in California where the privacy law is the strictest to exist so far. While the ADPPA is still in limbo, it has renewed interest and the…
-
Will Indiana Take First Place in the Race to Pass Privacy Legislation?

Legislators in the United States are going full steam ahead in 2023 with newly proposed privacy laws and vital legislative sessions that will determine the fate of privacy while a federal law hangs in the balance. Indiana is on the list of states that have made significant headway with a privacy bill that could successfully…
-
US Privacy: Update on States Proposing Legislation

2023 is off to an explosive start with more states proposing privacy legislation as they seek to fill gaps the federal government has left while still considering the American Data Privacy and Protection Act. New consumer privacy bills have been filed in New York, Rhode Island, Tennessee, Texas, and Washington last week, and new children’s…
-
Is a Federally-Mandated Privacy Law Coming to the Financial Services Market First?

A draft of a bill on financial data privacy from U.S. Rep. Patrick McHenry, Chairman of the Financial Services Committee, was addressed by the House Financial Services Committee Subcommittee on Financial Institutions and Monetary Policy during the “Revamping and Revitalizing Banking in the 21st Century,” on February 8th. The bill “modernizes Gramm-Leach-Bliley Act Using a…
-
Why Should I Care About the CPPA Rulemaking in Context of a Video Rental Law from the 1980s?

We’re still potentially 2 months out from getting finalized rulemaking from the CPPA, but there has been some important information trickling out in the meantime. Recently, the CPPA has touched on notices, contracts, and opt-out mechanisms like GPC. As the Video Privacy Protection Act (VPPA) is causing a stir amongst large companies, this will tie…
-
From the Desk of Dan Clarke: AG Bonta Discusses Authorized Agents

This year’s Data Privacy Day on January 28th must have inspired Attorney General Rob Bonta as he made an announcement emphasizing his expectation for organizations to step up their privacy compliance. AG Bonta’s statement included notice of a widespread investigation into mobile apps that are not meeting the requirements of the California Consumer Privacy Act.…
-
January 2023 Privacy Legislation: The States to Watch

States are ramping up in the new year with more proposed legislation in the absence of movement on federal law. In the coming months, the Colorado Privacy Act and Connecticut Personal Data Privacy and Online Monitoring Act will go into effect on July 1st, the Utah Consumer Privacy Act hits on December 31st, and other…
-
CPPA Prioritizing Assessments Beyond Privacy

As the CPPA continues to meet on CPRA regulations and define requirements & enforcement initiatives, there has been a heavy emphasis on assessments. With new laws going into effect that require privacy risk assessments, US companies have to make completion a top priority this year. The value of assessments cannot be overstated, especially as privacy…
-
Biden Gives Congress, Tech Industry a Piece of His Mind

President Joe Biden didn’t pull any punches when in a recent Wall Street Journal op-ed, that prominently highlighted privacy, he targeted Republican and Democratic members of Congress saying, “We need bipartisan action from Congress to hold Big Tech accountable.” The division in Congress has left many important issues at an impasse, and more specifically, has…
-
Will New York Pass a Privacy Law This Year?

New York has been in the mix for one of the next states to pass a privacy law since the Consumer Protection Committee reintroduced the New York Privacy Act into the senate in May 2021. The NYPA is a comprehensive consumer privacy law that seeks to safeguard the privacy of New Yorkers by giving people…
-
CPPA Timeline Update & Compliance Considerations

On January 1, 2023 CCPA gave way to the amended and expanded CPRA to regulate data privacy for US companies that buy, sell, or share the personal information of 100,000+ California consumers or households or meet other criteria. However, uncertainty remains as rulemaking by the California Privacy Protection Agency is still up in the air,…
-
California Privacy Protection Agency Timeline Update

Although there was some doubt that finalization might happen in February, the California Privacy Protection Agency stated that they are expecting to confirm the initial operating rules for the California Privacy Rights Act by the end of January. If rules are released in January, this suggests a start date of late March or, more likely,…
-
Newly Proposed Digital Personal Data Protection Bill of India Introduces Upated Privacy Requirements for the Region

After the government dropped its Personal Data Protection Bill earlier this year, India’s parliament published the Digital Personal Data Protection Bill in late November as a second attempt at a comprehensive data privacy law for the region. Despite having many of the same elements as the other bill, the present draft is more succinct, focused…
-
Recap of the Upcoming Virginia Consumer Data Privacy Act

There’s been much ado about preparation for privacy in 2023 with a heavy emphasis on CPRA as it transitions from the previously established CCPA, but organizations are up against the effective date for the Virginia Consumer Data Privacy Act, as well. Although both laws provide detailed definitions of “personal information,” grant customers control over their…
