The Washington Attorney General (“WA AG”) recently updated its My Health, My Data Act (“MHMDA”) FAQs to clarify that consumer health data (“CHD”) does not include the purchase of non-prescription medication, but does include inferences about a consumer’s health based on that purchase....
On March 31, 2024, most of Washington’s My Health, My Data Act (“MHMDA”) will go into effect for all in-scope business other than small businesses. As we’ve previously blogged, the geofencing provision went into effect last July. Notably,...
Beginning on January 1, 2024, data brokers must annually register with the Oregon Department of Consumer and Business Services (the “Department”) before collecting, selling, or licensing brokered personal data. Oregon’s data broker registration law, HB 2052,...
On September 11, 2023, Delaware’s governor signed the Delaware Personal Data Privacy Act (“DPDPA”), the thirteenth U.S. state comprehensive privacy law. The law takes effect January 1, 2025 and mirrors other existing state privacy laws...
Today, Utah joins the ranks as the fourth state to pass comprehensive privacy legislation, taking the most business-friendly approach to date. The Utah Consumer Privacy Act (“UCPA”) easily passed both Republican-held chambers and became law...
Two Illinois District Courts denied defendants’ motions to dismiss and permitted plaintiffs to proceed with their Illinois Right of Publicity Act (“IRPA”) claims alleging defendants used their identities for commercial purposes without first obtaining written...