On January 22, the NY State legislature passed what is arguably the most onerous and restrictive U.S. state privacy law to date – the NY Health Information Privacy Act (“NYHIPA”). If signed by the Governor in its current...
The California Superior Court in Sacramento has ruled that the regulations promulgated by the California Privacy Protection Agency (“CPPA”) under the amended California Consumer Privacy Act (“CCPA”—the amended act the “CPRA”) will not be enforceable...
Enacted on April 27, 2023, Washington’s “My Health, My Data” Act (the “Act”) creates significant compliance obligations for companies processing data in its scope. The expansive reach of the Act, coupled with a private right of action...
On February 1, 2023, the FTC announced an enforcement action against GoodRx for unlawfully disclosing users’ health information through the use of third-party tracking technologies, sending a strong warning to the online health industry against tracking health-related...
On Friday, September 30, the Colorado Attorney General (“CO AG”) published draft regulations pursuant to the Colorado Privacy Act (“CPA”). Though only 38 pages long, the draft includes detailed, sometimes prescriptive requirements on topics such...
California enacted the Age-Appropriate Design Code Act (AADC) last Thursday, September 15th– which will impose significant new child and teen safety requirements on a large variety of online services. The AADC goes into effect on...