New Jersey recently amended its comprehensive state privacy law, adopting changes similar to other state privacyupdates. The revisions, which took effect upon the governor’s signature, adjust definitions and exemptions in the law.Notably, the updates expand the types…
Posts by Category: Data Protection & Privacy
New Year, New Privacy Requirements
The U.S. state privacy landscape expanded in 2026 with new comprehensive data privacy laws in Indiana, Kentucky,and Rhode Island that grant consumers rights over personal data and require opt-in consent for sensitive information.In California, updated CCPA regulations…
Governor Newsom Announces First-In-The-Nation Privacy Tool Allowing Californians to Block the Sale of Their Data
California Governor Gavin Newsom and the California Privacy Protection Agency launched the Delete Request andOpt-out Platform (DROP), a first-of-its-kind privacy tool that lets California residents send a single request to registereddata brokers to delete their…
Why Data Privacy Impact Assessments Must Be a Backbone of any Effective Privacy Program
Privacy impact assessments (PIAs in the U.S., DPIAs under the EU GDPR) are essential tools for effective privacyprograms. They help organizations identify, assess, and mitigate privacy risks before data processing begins andsupport regulatory compliance. Growing U.S….
Norton Rose Fulbright’s 21st Annual Litigation Trends Survey Reveals Increased Data Privacy Risk Amid an Evolving Regulatory Landscape
A new survey shows U.S. corporate counsel face growing litigation risks, especially in data privacy, with 38% oforganizations reporting increased exposure. Industry hotspots include technology, consumer markets and retail. Fortypercent of survey respondents…
AI Fuels Surge in Data Privacy Investments and Redefines Governance
Cisco’s 2026 Data and Privacy Benchmark Study finds that AI adoption is driving major increases in data privacyinvestment, with 90% of organizations expanding privacy programs and 93% planning further spending to supportresponsible AI. Robust privacy and governance…
New Consumer Privacy Requirements Under the Indiana Consumer Data Protection Act are Here
The Indiana Consumer Data Protection Act (CDPA) took effect on January 1, 2026, imposing new privacy rights andobligations for businesses handling Indiana residents’ personal information. Consumers can access, correct, delete,and obtain their data, and opt out of data…
Kentucky AG Files Lawsuit Against AI Chatbot, Including Claim it Violated New Data Privacy Law
Kentucky’s Attorney General filed a lawsuit on January 8, 2026, against an AI chatbot company, alleging violations ofthe Kentucky Consumer Data Protection Act, consumer protection law, and data breach law just days after the privacylaw took effect. The complaint…
CPPA Acts to Enforce Against Data Brokers’ Failure to Register
The California Privacy Protection Agency (CPPA) has stepped up enforcement against data brokers that fail to registerunder the state’s Delete Act. Since an investigative sweep began in October 2024, CalPrivacy has pursued multipleactions, including fines and orders…
New Consumer Privacy Requirements Under the Indiana Consumer Data Protection Act are Here
The Indiana Consumer Data Protection Act (CDPA) took effect on January 1, 2026, imposing new privacy rights andobligations for businesses handling Indiana residents’ personal information. Consumers can access, correct, delete,and obtain their data, and opt out of data…


