On July 1, 2025, the California Attorney General, Rob Bonta, announced that the California Privacy Protection Agency (CPPA) entered into a settlement with Healthline Media LLC (Healthline), which included a fine of $1,550,000, the largest fine by the CPPA to
Latest from Taft Privacy & Data Security Insights - Page 6
Ohio Budget Bill Requires Counties, Townships, and Cities to Enact Cybersecurity Program by September 29
Special thanks to Taft Summer Associate Richard Roediger for his significant contributions to this post.
On May 20, 2025 Ohio Rep. Adam Mathews (District 56) and Ohio Rep. Haraz N. Ghanbari (District 75) introduced Ohio House Bill 283 (the Act),
HIPAA’s Reproductive Health Shake-Up: What the Purl Ruling Means for Health Plans and Covered Entities
A recent decision from the Northern District of Texas has upended the Department of Health and Human Services’ 2024 amendments to the HIPAA Privacy Rule (the 2024 Rule), which were intended to bolster privacy protections for reproductive health care information.
HIPAA’s Reproductive Health Shake-Up: What the Purl Ruling Means for Health Plans and Covered Entities
A recent decision from the Northern District of Texas has upended the Department of Health and Human Services’ 2024 amendments to the HIPAA Privacy Rule (the 2024 Rule), which were intended to bolster privacy protections for reproductive health care information.
US States Can (And Will) Continue To Regulate Artificial Intelligence … for Now
Early on July 1, the U.S. Senate voted to halt an effort to impose a 10-year moratorium on state regulation of artificial intelligence. The vote, 99-1, removed the AI provision from President Trump’s “Big, Beautiful Bill” that had evolved from
Cybersecurity in the Era of Generative and Agentic AI: Six Observations
Last week, I had the privilege to attend one of the Midwest’s largest artificial intelligence conferences dedicated to AI developers, users, and enthusiasts: Cincy AI Week. During the three-day event, which brought together over 950 local professionals, I spoke on
One Month to Go: What You Need to Know about the U.S. Department of Justice’s Data Security Program
Last year, we wrote about updates from the Department of Justice (DOJ) and the DOJ’s proposed enforcement efforts and regulations implementing Executive Order 14117 “Preventing Access to Americans’ Bulk Sensitive Personal Data and United States Data by Countries of Concern”
Children’s Online Privacy Protection Act Amendments Effective June 23, 2025
As we reported early last year, the Federal Trade Commission (FTC) issued a notice of proposed rulemaking to the Children’s Online Privacy Protection Act rule (COPPA). On April 22, 2025, over a year after the notice of proposed rulemaking
Children’s Online Privacy Protection Act Amendments Effective June 23, 2025
As we reported early last year, the Federal Trade Commission (FTC) issued a notice of proposed rulemaking to the Children’s Online Privacy Protection Act rule (COPPA). On April 22, 2025, over a year after the notice of proposed rulemaking
North Dakota Governor Signs Cybersecurity Governance Law for Financial Institutions
On April 11, 2025, North Dakota Governor Kelly Armstrong signed HB 1127 (the Act) into law.
The Act, which takes effect on August 1, 2025, establishes new data security requirements for certain financial institutions and nonbanking financial service providers. In