California Governor Gavin Newsom and the California Privacy Protection Agency launched the Delete Request andOpt-out Platform (DROP), a first-of-its-kind privacy tool that lets California residents send a single request to registereddata brokers to delete their…
Posts by Category: Data Protection & Privacy
Why Data Privacy Impact Assessments Must Be a Backbone of any Effective Privacy Program
Privacy impact assessments (PIAs in the U.S., DPIAs under the EU GDPR) are essential tools for effective privacyprograms. They help organizations identify, assess, and mitigate privacy risks before data processing begins andsupport regulatory compliance. Growing U.S….
Norton Rose Fulbright’s 21st Annual Litigation Trends Survey Reveals Increased Data Privacy Risk Amid an Evolving Regulatory Landscape
A new survey shows U.S. corporate counsel face growing litigation risks, especially in data privacy, with 38% oforganizations reporting increased exposure. Industry hotspots include technology, consumer markets and retail. Fortypercent of survey respondents…
AI Fuels Surge in Data Privacy Investments and Redefines Governance
Cisco’s 2026 Data and Privacy Benchmark Study finds that AI adoption is driving major increases in data privacyinvestment, with 90% of organizations expanding privacy programs and 93% planning further spending to supportresponsible AI. Robust privacy and governance…
New Consumer Privacy Requirements Under the Indiana Consumer Data Protection Act are Here
The Indiana Consumer Data Protection Act (CDPA) took effect on January 1, 2026, imposing new privacy rights andobligations for businesses handling Indiana residents’ personal information. Consumers can access, correct, delete,and obtain their data, and opt out of data…
Kentucky AG Files Lawsuit Against AI Chatbot, Including Claim it Violated New Data Privacy Law
Kentucky’s Attorney General filed a lawsuit on January 8, 2026, against an AI chatbot company, alleging violations ofthe Kentucky Consumer Data Protection Act, consumer protection law, and data breach law just days after the privacylaw took effect. The complaint…
CPPA Acts to Enforce Against Data Brokers’ Failure to Register
The California Privacy Protection Agency (CPPA) has stepped up enforcement against data brokers that fail to registerunder the state’s Delete Act. Since an investigative sweep began in October 2024, CalPrivacy has pursued multipleactions, including fines and orders…
New Consumer Privacy Requirements Under the Indiana Consumer Data Protection Act are Here
The Indiana Consumer Data Protection Act (CDPA) took effect on January 1, 2026, imposing new privacy rights andobligations for businesses handling Indiana residents’ personal information. Consumers can access, correct, delete,and obtain their data, and opt out of data…
California 2025 Legislative Wrap-Up: More Privacy and First-Of-Its Kind AI Laws Adopted
In 2025, California passed several new privacy and AI laws, reinforcing its leadership in data protection and technologyregulation. Lawmakers enacted privacy measures such as universal browser opt-out signals, expanded children’s andlocation data protections, and…
New Year, New Rules: US State Privacy Requirements Coming Online as 2026 Begins
U.S. state privacy enforcement is increasing as several laws took effect on January 1, 2026. New California regulationsunder the CCPA expand requirements for automated decision-making tech, risk assessments, and cybersecurityaudits, and launch the DROP data broker…


