Statute
CCPA
1,681 published works
Taft Privacy & Data Security Insights
A Survey of Compliance Requirements for Data Brokers
Since Vermont became the first state to regulate data brokers comprehensively, numerous states have followed suit. Substantial, dedicated regulation now exists in California, New Jersey, Oregon, Texas, and Vermont. Enforcement…
The Global Privacy Watch
California Just Expanded Regulation of Workplace AI Beyond CCPA ADMT
California has enacted three new laws governing employer use of artificial intelligence and automated tools in layoffs, workplace monitoring, discipline, and termination. These laws are separate from the California Consumer…
Privacy World
US Employers Face Evolving State Obligations for Human Resources AI / ADMT Use
When the first state consumer privacy law – California Consumer Privacy Act (CCPA) – passed, it applied to employees, but before it went into effect in 2020, 2019’s Assembly Bill…
Data Privacy + Cybersecurity Insider
The Problem With AI-Generated Privacy Policy Advice
Clients are increasingly turning to AI before they speak with outside counsel, and sometimes after, by pasting legal advice, contract language, or other work product into a public AI model…
CyberAdviser
Revised Draft Rules for the Colorado ADMT Act and Conversational AI Act Released
By Megan H. Bryan, Gregory P. Szewczyk, Mudasar Khan, Kelsey Fayer, Madison Etherington
On October 6, 2026, the Colorado Department of Law released the newest draft of its Automated Decision-Making Technology (ADMT) and Conversational AI Service Rules (the "Revised Draft Rules"). This revised…
Data Protection Report
Happy Cyber Awareness Month
By Chris Cwalina (US), Will Daugherty (US), Ji Won Kim (US), Gerar Mazarakis (US), Eva Yang (US)
Happy October and Cyber Awareness Month! Ghosts and ghouls of Halloween are not the only danger lurking around the corner. Beware of increasingly sophisticated cyber threats. It is time to…
Red Clover Advisors Blog
How to Handle Consumer Privacy Rights Requests Under CCPA
By Jodi Daniels
On any given day, 361.1 million mailpieces are processed and delivered by the US Postal Service. The whole endeavor is an exercise in coordination, each item making its way from…
Privacy Compliance & Data Security
New California AI Law Requires Healthcare Providers to Keep Clinical Decision-Making Human
By Odia Kagan
California has enacted a new law requiring healthcare providers using artificial intelligence to keep clinical decision-making human. AB 1979, signed by Governor Gavin Newsom on September 30, 2026, requires a…
Privacy + Cyber + AI
California Enacts Sweeping New Insurance Privacy Law: What Insurers Need to Know About CIIPPA (SB 354)
By Ted Augustinos, Kim Phan, Roshni Patel, Alex Cox, Alanna O'Reilly*
Key Points California's Senate Bill 354 enacted the California Insurance Information and Privacy Protection Act (CIIPPA), replacing the original Insurance Information and Privacy Protection Act and becoming operative July 1,…
Workplace Privacy, Data Management & Security Report
When the Productivity Monitor Becomes the Boss: California’s No Robo Bosses Act and Employee Monitoring Platforms
By Joseph J. Lazzarotti, Damon W. Silver
California has enacted SB 947, the No Robo Bosses Act. It adds new Labor Code requirements for employers that use automated decision systems (ADS) to make disciplinary and termination decisions,…