Statute
CPRA
290 published works
Data Protection Report
Happy Cyber Awareness Month
By Chris Cwalina (US), Will Daugherty (US), Ji Won Kim (US), Gerar Mazarakis (US), Eva Yang (US)
Happy October and Cyber Awareness Month! Ghosts and ghouls of Halloween are not the only danger lurking around the corner. Beware of increasingly sophisticated cyber threats. It is time to…
Lathrop GPM
Cybersecurity Audits and Privacy Risk Assessments Under the CCPA: A Compliance Roadmap
By Lathrop GPM
The California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act, continues to reshape compliance obligations for businesses operating in California. Among the most significant new requirements…
MeanPug Digital
Your Cookie Banner May Be Too Late
What law firms should know about California CIPA website tracking claims Your cookie banner is not a force field. California CIPA website tracking claims are raising new questions about whether…
California Public Safety Labor Blog
California Supreme Court Clarifies Declaratory Relief Under the CPRA and Rejects an Implied Three-Year Retention Duty Under the CPRA
By Mastagni Law
On January 15, 2026, the California Supreme Court issued its decision in City of Gilroy v. Superior Court, 19 Cal. 5th 38 (2026). Writing for a unanimous Court, Chief Justice…
Taft Privacy & Data Security Insights
The State of AI Policy, Privacy, and Compliance in the United States
By Zachary Heck
Last week, I had the pleasure of taking the main stage at CincyAI Week in Cincinnati, Ohio to talk with entrepreneurs, business leaders, academics, and artificial intelligence enthusiasts about the…
IT Law Blog
CCPA (California Consumer Protection Act): What Are the Requirements and Conditions for Compliance?
By Publisher
The California Consumer Protection Act (CCPA) and the California Consumer Rights Act (CPRA) are personal data protection laws of the state of California in the USA. The CPRA expanded and…
California Public Agency Labor & Employment Blog
Public Records Act Meets AI: What Recent Records Requests Reveal About ChatGPT Use in Government
By Abigail Choi
As California public agencies increasingly experiment with generative artificial intelligence (“AI”) tools like ChatGPT, a critical question is no longer theoretical: are AI prompts and outputs subject to disclosure under…
Data Privacy + Cybersecurity Insider
CCPA Enforcement Goes Cross Device: What Disney’s Settlement Signals for Compliance
The Office of California Attorney General Rob Bonta announced the largest settlement for violations of the California Consumer Privacy Act (CCPA) to date, imposing a $2.75 million civil penalty and…
Data Protection Report
Partial compliance is noncompliance: Lessons from California’s $2.75 million settlement with Disney
By Ji Won Kim (US), Helen Christakos (US), Herwin Jorsling (US), Shushan Gabrielyan (US), Leslie Ozuna (US)
On February 11, 2026, California Attorney General Rob Bonta announced a $2.75 million settlement with The Walt Disney Company (“Disney”), the largest civil penalty to date under the California Consumer…
California Public Safety Labor Blog
Appellate Ruling Severely Limits Public Employees’ Legal Recourse for Improperly Disclosed Personnel Records
By Mastagni Law
In the ever-evolving landscape of public safety labor law, protecting the confidentiality of peace officer personnel records remains a critical issue. A recent California Court of Appeal decision, Santa Ana…