Delaware’s Consumer Privacy Law is Right Around the Corner

by Michael B. Katz, Cynthia J. Larose of Mintz - The National Law Review

Any chancery you might be impacted by the Delaware Personal Data Privacy Act (DPDPA)? (See what we did there?) Impacted companies need to gear up and prepare for compliance as the DPDPA becomes effective on January 1, 2025. The article that follows explains who is covered by the law and provides details about the requirements those businesses need to be aware of.

Read more: https://natlawreview.com/article/delawares-consumer-privacy-law-right-around-corner#google_vignette

Nebraska’s Consumer Privacy Law Takes Effect Soon and Targets Businesses Selling Personal Data

by Michael B. Katz, Cynthia J. Larose of Mintz - The National Law Review

We are moving westward this week from Iowa to Nebraska in our series of articles providing in-depth summaries of state consumer privacy laws taking effect across the nation.

Nebraska Governor Jim Pillen (R) signed the Nebraska Data Privacy Act (or NEDPA) into law in April. NEDPA becomes effective on January 1, 2025 – the same day as similar laws going live in Delaware, Iowa, and New Hampshire. This relatively short period between signature and effective date left little time for impacted companies to prepare; however, Nebraska’s approach to applicability criteria has cast a specifically tailored net focused on businesses selling personal data of Nebraska residents.

Read more: https://natlawreview.com/article/nebraskas-consumer-privacy-law-takes-effect-soon-and-targets-businesses-selling

California Privacy Regulations To Be Enforced Immediately!

by David Klein, Kleing Moynihan Turco LLP - JDSupra

On February 9, 2024, the Third Appellate District of California vacated a trial court decision, holding that the California Privacy Protection Agency (“CPPA”) could immediately begin enforcing the current version of the California Consumer Privacy Act (“CCPA”). As our readers are aware, the CCPA went into effect on January 1, 2022, with the aim of protecting the privacy of California consumers, in large part, by giving them “more control” over the collection, use, and sharing of their personal information.

Read more: https://www.jdsupra.com/legalnews/california-privacy-regulations-to-be-3687218/

New Jersey Legislature Passes Consumer Privacy Bill

by Kyle Dull, Alan Friel - Privacy World

On January 8, New Jersey’s General Assembly and Senate passed a consumer privacy bill, S332, which would grant New Jersey residents several rights, and obligate controllers and processors of New Jersey residents to take action. The law is similar to consumer privacy laws passed last year in other states, with some distinctions.

Read more: https://www.privacyworld.blog/2024/01/new-jersey-legislature-passes-consumer-privacy-bill/#page=1

Virginia Governor Signs Consumer Privacy Law

by Lisa Nagele-Piazza - SHRM

Gov. Ralph Northam recently signed the Virginia Consumer Data Protection Act (CDPA), which will give consumers certain rights to control how their personal data is used beginning Jan. 1, 2023.  

Virginia is the second state to pass a comprehensive data privacy law, following California. Notably, however, Virginia's legislation has a carve-out for information collected in the employment context, whereas California's law applies to some employment data.

Read more: https://www.shrm.org/resourcesandtools/legal-and-compliance/state-and-local-updates/pages/virginia-governor-signs-consumer-privacy-law.aspx

Consent Standards under the Proposed Consumer Privacy Protection Act

by Dana Siddle, Daniel G.C. Glover, Colton Dennis - McCarthy Tetrault

As part of our blog series on the proposed changes to Canada’s private sector privacy laws, this post examines the proposed consent rules under the new regime for processing personal information.

As noted previously, Canada’s private sector privacy laws will change with the introduction of Bill C-11. Named the Digital Charter Implementation Act, 2020, Bill C-11 seeks to modernize Canadian privacy legislation through the introduction of two acts: the Consumer Privacy Protection Act (“CPPA”) and the Personal Information and Data Protection Tribunal Act, which would create a new enforcement tribunal.

Read more: https://www.mccarthy.ca/en/insights/blogs/techlex/consent-standards-under-proposed-consumer-privacy-protection-act