California
-

New California Law Enhances Data Broker Disclosure Obligations
Under existing law, California Data Brokers must register with the California Privacy Protection Agency (“Agency”) and pay a registration fee in an amount determined by the Agency. Data Brokers are also required to provide specific information, including the name of the data broker and its primary physical, email, and internet website addresses. Data Brokers must…
-

Effective Privacy Governance: How to “Bucket” State Obligations
As of the date of this post, there are at least nineteen comprehensive state privacy laws that have been passed and signed into law. Seven of those laws are currently in effect with active enforcement by state regulators. By this time next year (July 2025) an additional eight states will be in effect. Below is…
-

California Privacy Protection Agency Provides Summary of Pending California Privacy Legislation
In advance of the upcoming May 10th meeting, the California Privacy Protection Agency released meeting materials to provide context to several agenda items. In particular, the California Privacy Protection Agency Board voted unanimously to: In addition, the materials provide a snapshot of the California legislative calendar, along with a list of eight pending bills that…
-

California’s Privacy agency signals Priority: Data Minimization
The California Privacy Protection Agency (CPPA) issued its first advisory last week reminding businesses that data minimization is a foundational principle under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act . The advisory made clear that businesses should analyze and consider what data is necessary to achieve the purpose…