Vermont recently passed a major update to its data broker law (HB 211), joining California and Texas as one of the few states with privacy laws targeting businesses that collect and sell consumer data. Here’s what businesses that collect consumer
CyberAdviser, published by Ballard Spahr LLP, focuses on legal developments and compliance issues related to cybersecurity, data privacy, and emerging technologies. The blog covers topics such as regulatory enforcement actions under laws like the California Consumer Privacy Act (CCPA), privacy rights of consumers and employees, cybersecurity audits, risk assessments, and automated decision-making technologies. It also addresses litigation risks arising from privacy violations, guidance on artificial intelligence in regulated industries like medical devices, and evolving online safety and data privacy concerns, especially for minors. The content is aimed at helping businesses understand and navigate complex legal requirements in data protection and technology use.
A bipartisan coalition of 44 state attorneys general has formally objected to the House version of the Kids Internet and Digital Safety Act (H.R. 7757), urging congressional leaders to reject the legislation in favor of its Senate counterpart.…
Instagram now allows creators to tag products directly in Reels (short-form, vertical videos) using affiliate links and earn commissions on resulting purchases, marking parent company Meta’s most significant push into native social commerce to date. While this native affiliate tool…
After attempting to amend its first-in-the-nation AI law for two years and three legislative sessions, on May 9, 2026, the Colorado legislature passed SB 26-189. It now awaits the governor’s signature and is expected to be signed into law,…
On April 22, 2026, the House Energy & Commerce Committee released the “Securing and Establishing Consumer Uniform Rights and Enforcement over Data Act” (the “SECURE Data Act”). The SECURE Data Act seeks to establish a comprehensive federal framework for consumer…
A recent decision from the Northern District of California reminds corporate defendants in Internet tracking cases that strategies to defeat class certification based on individualized issues can be just as critical as merit-based defenses.
In In re Meta Pixel Tax…
On April 7, 2026, the Alabama legislature unanimously passed House Bill 351, the Alabama Personal Data Protection Act, sending it to Governor Kay Ivey for approval. The bill cleared the Alabama House 104-0 and the Alabama Senate 34-0, and if…
When the CCPA was first enacted, it was seemingly clear that its right to private action would be limited to traditional data breaches. Over the past two years, however, some courts have called this interpretation into question by expanding the…
On March 20, 2026, the White House released its National Policy Framework for Artificial Intelligence. This Framework contains a sweeping set of legislative recommendations intended to establish a coherent, nationally unified approach to AI governance. While the Framework does…
On March 20, 2026, Oklahoma’s governor signed S.B. 546 making Oklahoma the latest state to enact a comprehensive state privacy law. The law, effective January 1, 2027, applies to organizations doing business in Oklahoma or targeting residents in Oklahoma that…