In the prior Part 4 of this series, we explained how CCPA cybersecurity audits are likely to surface in CalPrivacy and California Attorney General enforcement actions, and how that regime impacts governance and executive responsibility.
On June 16, 2026, Vermont Governor Phil Scott (R) signed the Vermont Data Privacy and Online Surveillance Act into law, making Vermont the 23rd state to enact a comprehensive consumer data privacy law and the fourth state law to be
We have now had a bit of time to work with clients on the new Colorado Automated Decision-Making Technology in Consequential Decisions Bill (SB 26-189) (ADMT law” — replacing the CO AI Act). The sausage making and behind-the-scenes political
Key point: Three takeaways from May decisions: (1) cookie banners cut both ways for plaintiffs and defendants; (2) generic wiretapping “contents” allegations lose while transaction-specific ones survive; and (3) courts are splitting on whether a profit motive satisfies the crime-tort
Key point: Two courts in 2026 have allowed CCPA claims to proceed based on adtech use without addressing whether adtech discloses “personal information” under the CCPA
According to plaintiffs’ interpretation of a May 2026 decision from the Northern District of
Key point: Regulations proposed in June 2025 to implement the New Jersey Data Privacy Law expired on June 2, 2026, when the regulations were not adopted within a year of the proposal. The path forward for future rulemaking to implement
Key point: Louisiana becomes the 22nd state — and third this year — to enact a consumer data privacy law, adopting a law similar to Texas’ law.
On May 29, 2026, Louisiana Governor Jeff Landry signed the Louisiana Data Privacy
Tracking technology litigation continues to evolve and expand, driven by increasingly sophisticated data collection techniques, broader use of session replay, identity resolution, AI-driven profiling, and growing scrutiny from plaintiffs, regulators, and courts over whether companies are adequately disclosing, governing, and
Key point: Vermont’s legislature passed a consumer data privacy bill, Illinois’ legislature passed an AI frontier model bill, and eight bills crossed chambers in California.
Below is the 20th update on the status of proposed state privacy and AI legislation
On May 26, 2026, a bipartisan coalition of 44 attorneys general (AGs) issued a letter opposing the federal Kids Internet and Digital Safety Act (KIDS Act), H.R. 7757. The AGs assert that the KIDS Act would preempt their ability
