On September 2, 2026, Governor Matt Meyer signed HB 380, which makes significant changes to the Delaware Personal Data Privacy Act (“DPDPA”). The law expands the DPDPA’s coverage and imposes new requirements concerning third-party disclosures...
As our clients prepare for automated decision-making (ADM) requirements beginning in 2027 in California, Colorado, and Connecticut, we’d like to clear up a few myths about ADM. For this article, we use “ADM” as shorthand...
On June 30, 2026, New Jersey quietly enacted one of the most onerous and sweeping data broker regimes in the nation. The law, A5328 (P.L.2026, c.25), requires entities that qualify as “data brokers”—or entities that sell...
For years, TCPA compliance has largely meant following the statute as interpreted by FCC rules and regulations. That is no longer enough. Since the Supreme Court scrapped Chevron deference in Loper Bright and then held in McLaughlin that district courts...
The California AG recently announced its fourth CCPA settlement and enforcement action against Healthline Media, LLC. The complaint and proposed judgment offer insights into the AG’s strict interpretation of certain CCPA compliance obligations and continued pursuit of certain enforcement...
On January 22, the NY State legislature passed what is arguably the most onerous and restrictive U.S. state privacy law to date – the NY Health Information Privacy Act (“NYHIPA”). If signed by the Governor in its current...