The Indiana Consumer Data Protection Act (CDPA) took effect on January 1, 2026, imposing new privacy rights andobligations for businesses handling Indiana residents’ personal information. Consumers can access, correct, delete,and obtain their data, and opt out of data…
Posts by Category: Data Protection & Privacy
Kentucky AG Files Lawsuit Against AI Chatbot, Including Claim it Violated New Data Privacy Law
Kentucky’s Attorney General filed a lawsuit on January 8, 2026, against an AI chatbot company, alleging violations ofthe Kentucky Consumer Data Protection Act, consumer protection law, and data breach law just days after the privacylaw took effect. The complaint…
CPPA Acts to Enforce Against Data Brokers’ Failure to Register
The California Privacy Protection Agency (CPPA) has stepped up enforcement against data brokers that fail to registerunder the state’s Delete Act. Since an investigative sweep began in October 2024, CalPrivacy has pursued multipleactions, including fines and orders…
New Consumer Privacy Requirements Under the Indiana Consumer Data Protection Act are Here
The Indiana Consumer Data Protection Act (CDPA) took effect on January 1, 2026, imposing new privacy rights andobligations for businesses handling Indiana residents’ personal information. Consumers can access, correct, delete,and obtain their data, and opt out of data…
California 2025 Legislative Wrap-Up: More Privacy and First-Of-Its Kind AI Laws Adopted
In 2025, California passed several new privacy and AI laws, reinforcing its leadership in data protection and technologyregulation. Lawmakers enacted privacy measures such as universal browser opt-out signals, expanded children’s andlocation data protections, and…
New Year, New Rules: US State Privacy Requirements Coming Online as 2026 Begins
U.S. state privacy enforcement is increasing as several laws took effect on January 1, 2026. New California regulationsunder the CCPA expand requirements for automated decision-making tech, risk assessments, and cybersecurityaudits, and launch the DROP data broker…
Indiana & Kentucky Privacy Laws Go Live in the New Year
Indiana and Kentucky’s comprehensive data privacy laws take effect January 1, 2026, granting residents rights to access, correct, delete, or port their personal data and opt out of targeted advertising, sales, or profiling. Businesses meeting certain thresholds must…
Skyhigh Security Launches Data Visibility and Compliance Dashboard to Simplify Global Data Protection
Skyhigh Security launched a new data visibility and compliance dashboard within its DSPM Data Explorer, offering real-time, risk-focused insights across cloud and hybrid environments. The tool helps organizations identify, classify, and monitor sensitive data, assess…
State Privacy Action Grows: Consortium Expands, California Launches Data Broker Strike Force
The Consortium of Privacy Regulators is expanding, now including Minnesota and New Hampshire alongside eight other states to coordinate enforcement of comprehensive privacy laws. California’s CalPrivacy also launched a Data Broker Enforcement Strike Force to ensure…
Time for HR Professionals and In-House Employment Counsel to Add HR Data Privacy Risk Assessments to Their Repertoire
Effective January 1, 2026, California employers with over $25 million in revenue must conduct privacy risk assessments before processing HR Data that presents significant privacy risks. Triggers include handling sensitive information, using automated decision-making…


