Connect with us
Client Portals
There are legal and practical considerations for U.S. employers collecting demographic data from employees and jobapplicants amid evolving federal and state policies. While collecting such information remains lawful and, in somecases, required for compliance,…
Connecticut has expanded its Data Privacy Act through new legislation that broadens the law’s scope, strengthensconsumer rights, and increases obligations for businesses. The amendments cover more organizations by loweringapplicability thresholds, expanding the…
A federal judge dismissed a proposed class-action lawsuit against New Jersey background-check company TABB Inc.after finding the plaintiff could not demonstrate a concrete injury from a 2024 data exposure. The database reportedlycontained sensitive information,…
Organizations subject to the U.S. Department of Justice’s Bulk Data Transfer Rule should begin preparing now for the first annual audit and certification deadline, which is due by October 6, 2026. The rule requires covered entities to assess compliance with…
Alabama’s comprehensive data privacy law establishes new consumer rights and compliance obligations for businesses that collect or process residents’ personal data. Consumers gain rights to access, correct, delete, and obtain copies of their personal information, as…
New Jersey’s Data Privacy Act establishes comprehensive consumer privacy protections and imposes new compliance obligations on businesses that collect or process personal data. The law grants consumers rights to access, correct, delete, and obtain copies of their…
On June 16, 2026, Governor Phil Scott signed the Vermont Data Privacy and Online Surveillance Act (S.71) into law. The law takes effect January 1, 2028, giving businesses roughly 18 months to establish compliance programs. With its signing, Vermont becomes the 21st…
Connecticut has significantly expanded and toughened its consumer privacy law that includes new obligations on data controllers. Under Senate Bill 1295 (Public Act 25-113), sweeping amendments to the Connecticut Data Privacy Act (CTDPA) took effect on July 1, 2026,…
The Indiana Consumer Data Protection Act (INCDPA) establishes a comprehensive privacy framework granting Indiana residents rights over their personal data, including access, correction, deletion, and opt-out rights for targeted advertising, data sales, and profiling….
Louisiana has enacted the Louisiana Data Privacy Act (LDPA), becoming the 22nd U.S. state to adopt a comprehensive consumer data privacy law. Signed in May 2026 and effective January 1, 2027, the law grants consumers rights to access, correct, delete, and opt out of…