Key point: Last week, Connecticut’s legislature passed a bill to amend the state’s consumer data privacy law and establish a data broker registration law, Iowa’s governor signed a chatbot bill into law, Colorado’s legislature passed a pricing bill and is
Key Point: With the June 3, 2026, compliance deadline fast approaching, small firms subject to amended Regulation S‑P under the Gramm-Leach-Bliley Act (GLBA) should be in the final stages of updating their privacy and safeguards programs. In January 2026, the
On April 22, the U.S. House of Representatives Financial Services Committee and the Energy and Commerce Committee jointly unveiled a paired privacy package that, taken together, would substantially recast the federal obligations for the treatment of consumer data. The “Guidelines
Key point: Connecticut’s AI bill passed the legislature, Maryland’s pricing bill was signed into law, Colorado’s AI Act replacement bill was introduced, and chatbot bills advanced in several states.
Below is the 16th update on the status of proposed state
Key point: Colorado’s legislature passed an age attestation bill while Michigan’s Senate passed a Kids Code Act.
Below is the 16th update on the status of proposed state privacy legislation in 2026. This post covers updates on proposed bills dealing
In this episode of The Consumer Finance Podcast, Chris Willis is joined by Troutman Pepper Locke Partners Stefanie Jackman and Brent Hoard to take a close look at the world of medical debt collection. The discussion covers how HIPAA applies
Key point: The final law is much narrower than when the bill was first introduced and applies only to food retailers and third-party food delivery services.
On April 28, 2026, Maryland Governor Wes Moore signed the Protection From Predatory Pricing
On April 13, 2026, Virginia Governor Abigail Spanberger signed SB338 into law, amending Virginia’s Consumer Data Protection Act (VCDPA) to prohibit controllers of personal data from selling consumers’ precise geolocation data. This ban, which takes effect on July 1, 2026,
Welcome to Part Two of our series that examines the ECPA as a private right of action for privacy policy inaccuracies. In Part One of this series, we examined how a wave of state-law wiretapping litigation — predominantly under California’s
