On July 20, 2026, Pennsylvania Governor Josh Shapiro signed into law Senate Bill 992 (“SB 992”), which significantly amends the Pennsylvania Telemarketer Registration Act (the “Act”), 73 P.S. §§ 2241 et seq. The legislation has important implications for companies that
When the first state consumer privacy law – California Consumer Privacy Act (CCPA) – passed, it applied to employees, but before it went into effect in 2020, 2019’s Assembly Bill 25 created a temporary exemption. By January 1, 2023, however,
In case you missed it, below are recent posts from Privacy World covering the latest developments on data privacy, security and innovation. Please reach out to the authors if you are interested in additional information.
Businesses with websites that employ cookies and other tracking technologies (collectively, “internet tracking technology”) can breathe a partial sigh of relief. The private right of action under the California Invasion of Privacy Act (“CIPA”), relating to violations of Section
State attorneys general are increasingly shaping the regulatory landscape for organizations that rely on technology, data and artificial intelligence. In the latest episode of Squire Patton Boggs’ Antitrust Amplified podcast, antitrust partner Lauren Briggerman sits down with representatives from the
As we flagged last month in our mid-year U.S. privacy roundup, the Delaware legislature recently passed House Bill 380 (“HB 380”), which amends the Delaware Personal Data Privacy Act (the “Act”) in ways that impose significant new, and in many
In this second of a three-part series on US data law updates, we cover state laws related to development and deployment of artificial intelligence (AI) systems.
In Part I, we focused on the trend of more restrictive state consumer
As AI becomes more powerful, the questions facing businesses become more complex. How do you govern AI responsibly? How do you manage emerging risks? And how do you seize the opportunities without losing control? In this video series, our lawyers
To harmonize cybersecurity requirements across the EU, the Cyber Resilience Act (CRA) applies to hardware and software products made available in the EU whose intended or reasonably foreseeable use involves a direct or indirect connection to a device or network.
Last week, a European Data Protection Authority imposed a substantial fine for a company’s use of an algorithmic system that automatically restricted individuals’ access to income-generating opportunities via an online platform and the failure to provide adequate transparency. Accounts were
