Jan. 1 is approaching, and with it comes new requirements under the California Consumer Privacy Act (CPRA) and the Virginia Consumer Data Protection Act (VCDPA). What should you and your company be focusing on to ensure you are prepared for the looming compliance deadline? This Data Privacy Dish post offers end-of-year considerations for closing out
CPRA
What is aggregated data?
The California Consumer Privacy Act and the California Privacy Rights Act specifically state that they do not restrict a business’s ability to collect, use, retain, sell, share, or disclose “aggregated consumer information.”[1] Aggregate consumer information is defined as “information that relates to a group or category of consumers, from which individual consumer identities have…
California Privacy Rights Act Nudges State Closer to the GDPR
After Europe blazed the trail by passing the sweeping General Data Protection Regulation (“GDPR”) in 2016, California followed closely in the footsteps of European efforts by passing the most comprehensive data privacy law in the United States, the California Consumer Privacy Act (the “CCPA”). Effective January 1, 2020, the CCPA provided a number of obligations…
Oct. 6 WEBINAR | Website and Mobile App Compliance Under the CPRA and New State Privacy Laws Effective in 2023
GT Shareholders Gretchen A. Ramos and Darren Abernethy will lead a webinar hosted by the Association of Corporate Counsel titled “Website and Mobile App Compliance Under the CPRA and New State Privacy Laws Effective in 2023” Oct. 6 at 11 a.m. PDT.
Starting Jan. 1, 2023, the California Privacy Rights Act and the CPRA…
Understanding the differences in the state privacy laws: What factors must be considered by an organization when conducting a DPIA?
Some modern data privacy statutes require organizations to consider and document privacy-related risks regarding certain types of processing activities. These assessments are sometimes referred to as “data protection assessments” or “data protection impact assessments” (generically a DPIA). DPIAs are intended to make an organization identify and weigh the benefits that may flow from processing personal…
Understanding the differences in the state privacy laws: When is an organization required to conduct a DPIA?
Some modern data privacy statutes require organizations to consider and document privacy-related risks regarding certain types of processing activities. These assessments are sometimes referred to as “data protection assessments” or “data protection impact assessments” (generically a DPIA). For example, several state data privacy statutes mandate that a DPIA be conducted if an organization intends to…
California Proposed Privacy Regulations Would Impose Significant Compliance Costs on Business
On July 8, 2022, the California Privacy Protection Agency (“CPPA”) released proposed regulations to implement the California Privacy Rights Act (“CPRA”). The new proposals would dramatically change the existing regulations that apply to organizations that do business in California.
Click here to read the full article, published by the Washington Legal Foundation Aug. 19, 2022.
Businesses Beware: Proposed Amendments to the CCPA Regulations Will Increase Cost of Doing Business in California
On July 8, 2022, the California Privacy Protection Agency (CPPA) issued proposed amendments to the California Consumer Privacy Act (CCPA) regulations to harmonize them with the California Privacy Rights Act of 2020 (CPRA), which will go into effect on Jan. 1, 2023. Individuals or companies have until Aug. 23, 2022, at 5 p.m. to submit…
The Holy Grail for DPA Negotiating: A Side-by-Side Comparison of the Contractual Requirements Found in Modern Data Privacy Statutes
Modern state privacy laws mandate that agreements with service providers or processors contain specific contractual provisions to govern the parties’ relationship. Which provisions should be included in a vendor agreement, however, differ by state statute. In addition, some state privacy laws impose statutory obligations upon vendors that do not necessarily need to be memorialized in…
Gretchen Ramos Quoted in Bloomberg Law Article, ‘Bosses Brace for Worker Chaos If California Privacy Law Expands’
Gretchen A. Ramos, Global Co-Chair of the Data, Privacy & Cybersecurity Practice, is quoted in a Bloomberg Law article titled “Bosses Brace for Worker Chaos If California Privacy Law Expands.”