In this episode of The Consumer Finance Podcast, Chris Willis is joined by Troutman Pepper Locke Partners Stefanie Jackman and Brent Hoard to take a close look at the world of medical debt collection. The discussion covers how HIPAA applies
Key point: The final law is much narrower than when the bill was first introduced and applies only to food retailers and third-party food delivery services.
On April 28, 2026, Maryland Governor Wes Moore signed the Protection From Predatory Pricing
On April 13, 2026, Virginia Governor Abigail Spanberger signed SB338 into law, amending Virginia’s Consumer Data Protection Act (VCDPA) to prohibit controllers of personal data from selling consumers’ precise geolocation data. This ban, which takes effect on July 1, 2026,
Welcome to Part Two of our series that examines the ECPA as a private right of action for privacy policy inaccuracies. In Part One of this series, we examined how a wave of state-law wiretapping litigation — predominantly under California’s
Key point: In a court filing, the Colorado attorney general states it will only enforce the law after the office finishes rulemaking on the existing law or any law the Colorado legislature passes this year amending or replacing the law.
Key point: Bills advanced last week in Connecticut, Colorado, and California, while Florida lawmakers will return for a special session this week and consider an AI Bill of Rights.
Below is the 15th update on the status of proposed state
Key point: Connecticut’s Senate passed a bill to amend the state’s consumer data privacy law and create a new data broker registration law, while bills advanced in California, Colorado, Delaware, and Louisiana.
Below is the 15th update on the status
With the influx of new state AI laws making compliance more complicated, we have created a new state AI law tracker map.
The map focuses on laws that can directly or indirectly affect private-sector AI development and deployment. As
Key point: The amendment significantly expands the existing law’s applicability, redefines “covered design feature,” creates two new prohibitions, and adds a new deletion right.
On April 17, 2026, Nebraska Governor Jim Pillen signed LB 838 into law. The omnibus bill addresses
In Parts 1-3 of this series, we covered the mechanics of the CCPA’s new cybersecurity audit requirement: who is covered, when audits are required, what must be audited, who can perform the audit, how it fits with existing security frameworks,
