Connect with us
Client Portals
Washington’s first statewide data privacy report highlights growing concerns about how companies collect, use, andprotect personal information. The Attorney General’s Office identified four major issues: excessive data collection andreuse, weak consent practices and…
California’s privacy regulator fined data broker LocateSmarter $116,490 for making it difficult for consumers to opt outof the sale of their personal information. The enforcement action is notable because it is the agency’s first against adata broker under both the…
There are key Oregon privacy compliance considerations for 2026 under the Oregon Consumer Privacy Act (OCPA).Businesses subject to the law must address consumer rights, data-processing obligations, sensitive-data protections,and universal opt-out mechanisms such as…
California’s privacy regulator, CalPrivacy, has advanced new rules governing audits of data brokers’ compliance withthe Delete Request and Opt-out Platform (DROP). The proposed rules would require independent audits every threeyears, examining deletion processes,…
Vermont’s new Data Privacy and Online Surveillance Act establishes comprehensive consumer privacy protectionsand new compliance obligations for businesses handling personal data. The law grants consumers greater control overtheir information through rights to access,…
There are legal and practical considerations for U.S. employers collecting demographic data from employees and jobapplicants amid evolving federal and state policies. While collecting such information remains lawful and, in somecases, required for compliance,…
Connecticut has expanded its Data Privacy Act through new legislation that broadens the law’s scope, strengthensconsumer rights, and increases obligations for businesses. The amendments cover more organizations by loweringapplicability thresholds, expanding the…
A federal judge dismissed a proposed class-action lawsuit against New Jersey background-check company TABB Inc.after finding the plaintiff could not demonstrate a concrete injury from a 2024 data exposure. The database reportedlycontained sensitive information,…
Organizations subject to the U.S. Department of Justice’s Bulk Data Transfer Rule should begin preparing now for the first annual audit and certification deadline, which is due by October 6, 2026. The rule requires covered entities to assess compliance with…
Alabama’s comprehensive data privacy law establishes new consumer rights and compliance obligations for businesses that collect or process residents’ personal data. Consumers gain rights to access, correct, delete, and obtain copies of their personal information, as…