The California Privacy Protection Agency (CPPA) has stepped up enforcement against data brokers that fail to registerunder the state’s Delete Act. Since an investigative sweep began in October 2024, CalPrivacy has pursued multipleactions, including fines and orders…
Posts by Category: Data Protection & Privacy
New Consumer Privacy Requirements Under the Indiana Consumer Data Protection Act are Here
The Indiana Consumer Data Protection Act (CDPA) took effect on January 1, 2026, imposing new privacy rights andobligations for businesses handling Indiana residents’ personal information. Consumers can access, correct, delete,and obtain their data, and opt out of data…
California 2025 Legislative Wrap-Up: More Privacy and First-Of-Its Kind AI Laws Adopted
In 2025, California passed several new privacy and AI laws, reinforcing its leadership in data protection and technologyregulation. Lawmakers enacted privacy measures such as universal browser opt-out signals, expanded children’s andlocation data protections, and…
New Year, New Rules: US State Privacy Requirements Coming Online as 2026 Begins
U.S. state privacy enforcement is increasing as several laws took effect on January 1, 2026. New California regulationsunder the CCPA expand requirements for automated decision-making tech, risk assessments, and cybersecurityaudits, and launch the DROP data broker…
Indiana & Kentucky Privacy Laws Go Live in the New Year
Indiana and Kentucky’s comprehensive data privacy laws take effect January 1, 2026, granting residents rights to access, correct, delete, or port their personal data and opt out of targeted advertising, sales, or profiling. Businesses meeting certain thresholds must…
Skyhigh Security Launches Data Visibility and Compliance Dashboard to Simplify Global Data Protection
Skyhigh Security launched a new data visibility and compliance dashboard within its DSPM Data Explorer, offering real-time, risk-focused insights across cloud and hybrid environments. The tool helps organizations identify, classify, and monitor sensitive data, assess…
State Privacy Action Grows: Consortium Expands, California Launches Data Broker Strike Force
The Consortium of Privacy Regulators is expanding, now including Minnesota and New Hampshire alongside eight other states to coordinate enforcement of comprehensive privacy laws. California’s CalPrivacy also launched a Data Broker Enforcement Strike Force to ensure…
Time for HR Professionals and In-House Employment Counsel to Add HR Data Privacy Risk Assessments to Their Repertoire
Effective January 1, 2026, California employers with over $25 million in revenue must conduct privacy risk assessments before processing HR Data that presents significant privacy risks. Triggers include handling sensitive information, using automated decision-making…
Why Small Businesses Can No Longer Ignore Data Privacy Laws
State-level data privacy laws are rapidly spreading across the U.S., creating a complex patchwork that even small businesses must navigate. Compliance involves understanding which laws apply, updating privacy policies, managing consumer data requests, and securing…
With SB 53, California Puts AI Disclosure Requirements on the Map
California’s SB 53 requires large AI developers (≥$500M revenue) to publicly disclose safety frameworks, report critical risks, and protect whistleblowers. The law establishes a reporting system for safety incidents, penalties up to $1 million, and a government…



