Data Protection Laws
-
Chambers USA–Ranked Nationally for Privacy & Data Security: Cybersecurity
I am excited to announce that I have ranked nationally in Chambers USA for Privacy and Data Security: Cybersecurity for 2025. This is a reflection of the meaningful work, incredible clients, and top-notch team I get to work with every day. I am looking forward to providing more content and additional resources here on Focused…
-
New California Law Enhances Data Broker Disclosure Obligations
Under existing law, California Data Brokers must register with the California Privacy Protection Agency (“Agency”) and pay a registration fee in an amount determined by the Agency. Data Brokers are also required to provide specific information, including the name of the data broker and its primary physical, email, and internet website addresses. Data Brokers must…
-
Effective Privacy Governance: How to “Bucket” State Obligations
As of the date of this post, there are at least nineteen comprehensive state privacy laws that have been passed and signed into law. Seven of those laws are currently in effect with active enforcement by state regulators. By this time next year (July 2025) an additional eight states will be in effect. Below is…
-
California Usurps Federal Privacy Action (Again)
Most Americans expect the federal government to be involved in international agreements on individual rights affecting U.S. citizens. California has partnered with France on data privacy protections, following the cancellation of a federal privacy rights act discussion. This collaboration signals a shift towards more cohesive global privacy regulations and may influence California’s privacy legislation approach.
-
Happy Birthday: The EU General Data Protection Regulation Turns 6
A friend of mine and I decided to take our moms on a tour of Spain and France for the last few weeks of May. So, it was merely a (fun) coincidence that we were able to toast the anniversary of the EU’s General Data Protection Regulation (GDPR) with a glass of cava in Barcelona…
-
California Privacy Protection Agency Provides Summary of Pending California Privacy Legislation
In advance of the upcoming May 10th meeting, the California Privacy Protection Agency released meeting materials to provide context to several agenda items. In particular, the California Privacy Protection Agency Board voted unanimously to: In addition, the materials provide a snapshot of the California legislative calendar, along with a list of eight pending bills that…
-
FTC Warns that Notice and Choice May Not Be Enough to Protect Privacy
During a recent lecture at Fordham Law School, Samuel Levine, the Director of the Federal Trade Commission Bureau of Consumer Protection warned that when it comes to privacy “notice and choice is a fantasy world.” Mr. Levine did not mince words, further calling notice and choice a regime that “became a way for companies to…
-
Small but Mighty: The Vermont Data Privacy Act and It’s Private Right of Action
According to the 2020 census, Vermont’s population of just under 650,000 residents makes it the second to last in population in the nation and the sixth smallest state by area. Yet, Vermont has introduced a privacy bill that rivals California in scope. This broad scope is also punctuated by two key provisions. First, Vermont’s applicability…
-
Practical Privacy: Where do I start?
I often hear from clients that they are concerned about privacy issues, but that they don’t know where to start. This common conundrum is partially a result of the myriad of different sector specific privacy laws, overlapping state and federal privacy obligations, and constantly changing case law. One of the best places to start is…
-
California’s Privacy agency signals Priority: Data Minimization
The California Privacy Protection Agency (CPPA) issued its first advisory last week reminding businesses that data minimization is a foundational principle under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act . The advisory made clear that businesses should analyze and consider what data is necessary to achieve the purpose…
Focused On Privacy 