On February 12, 2024, California bill AB-1949 was referred to the Assembly Committee on Privacy and Consumer Protection. The bill would amend the California Consumer Privacy Act (as amended by the California Privacy Rights Act) to significantly expand businesses’ obligations
Privacy & Information Security Law Blog
Global Privacy and Cybersecurity Law Updates and Analysis
The Privacy & Information Security Law Blog, published by Hunton Andrews Kurth LLP, focuses on legal developments and regulatory updates in privacy and information security. It covers state and federal privacy laws, including comprehensive data privacy acts, consumer data protection rights, and obligations of data controllers. The blog also addresses emerging issues such as the regulation of biological and neural data, online safety, and the intersection of data protection with other regulatory frameworks. Additionally, it discusses enforcement actions, compliance strategies, and sector-specific privacy concerns, including healthcare privacy under HIPAA and protections related to reproductive health information.
Latest from Privacy & Information Security Law Blog - Page 6
Second CCPA Enforcement Action Settlement Announced by California AG
On February 21, 2024, the California Attorney General announced that it had reached a settlement resolving an enforcement action under the California Consumer Privacy Act (“CCPA”) and the California Online Privacy Protection Act (“CalOPPA”) brought against online food delivery company…
An Update on the SEC’s Cybersecurity Reporting Rules
As we pass the two-month anniversary of the effectiveness of the U.S. Securities and Exchange Commission’s Form 8-K cybersecurity reporting rules under new Item 1.05, this blog post provides a high-level summary of the filings made to date.…
European Commission to Establish AI Office
The European Commission recently announced it had published the Commission Decision establishing the European AI Office.…
HHS Office for Civil Rights Publishes Cybersecurity Resource for HIPAA Implementation
On February 16, 2024, the U.S. Department of Health and Human Services’ Office for Civil Rights (“OCR”) and the National Institute of Standards and Technology (“NIST”) published a final version of Special Publication 800-66 Revision 2, “Implementing the Health Insurance…
Senators Markey and Cassidy Announce Additional “COPPA 2.0” Sponsors and Update Bill Text
On February 15, 2024, Senators Edward J. Markey (D-Mass.) and Bill Cassidy (R-La.) announced the addition of co-sponsors Senators Ted Cruz (R-Texas) , and Maria Cantwell (D-Wash.) to an updated version of the proposed Children and Teens’ Online Privacy Protection…
ICO Publishes Guidance on Content Moderation
On February 16, 2024, the UK Information Commissioner’s Office published its first piece of guidance on content moderation.…
Ohio Court Grants Motion for Preliminary Injunction on Parental Notification by Social Media Operators Act
On February 12, 2024, a federal court in the Southern District of Ohio issued an order granting a Motion for a Preliminary Injunction, prohibiting the Ohio Attorney General from implementing and enforcing the Parental Notification by Social Media Operators Act,…
China Plans to Accelerate Cross-Border Data Transfers by Implementing Trial Rules in Shanghai Pilot Free Trade Zone
Recent developments in the Shanghai Pilot Free Trade Zone to facilitate cross-border data transfers are expected to provide greater flexibility in exporting data from China, which has been stymied by the Cyberspace Administration of China’s strict cross-border data transfer regulations…
EDPB Adopts Opinion on the Notion of Main Establishment
On February 13, 2024, the European Data Protection Board (“EDPB”) adopted Opinion 04/2024 on the notion of the main establishment of a controller in the Union under Article 4(16)(a) of the EU General Data Protection Regulation (“GDPR”) (the “Opinion”).…