Photo of David Stauss [Former Attorney]

David Stauss [Former Attorney]

 

Formerly with Husch Blackwell, David routinely counseled clients on complying with privacy laws such as the EU's General Data Protection Regulation, the California Consumer Privacy Act, the Colorado Privacy Act, and other state privacy laws.

Keypoint: This week the Colorado Senate passed the Colorado Privacy Act, the Nevada legislature passed a bill to broaden the state’s pre-existing right to opt out of sales, and the New York Privacy Act advanced to a third reading in the Senate.

Below is our fourteenth weekly update on the status of proposed CCPA-like privacy legislation. Before we get to our update, we wanted to provide two reminders.

First, we have been regularly updating our 2021 State Privacy Law Tracker to keep pace with the latest developments. We encourage you to bookmark the page for easy reference.

Second, the contents provided below are time-sensitive and subject to change. If you are not already subscribed to our blog, consider doing so to stay updated.

Keypoint: The Colorado Senate unanimously passed the Colorado Privacy Act after amending the bill to add back many of the privacy protections previously removed.

On May 26, 2021, the Colorado Senate unanimously passed the Colorado Privacy Act. The bill now moves to the State Assembly. The Colorado legislature is scheduled to close on June 12 so we will know in just a matter of weeks (if not sooner) if Colorado will become the third state to enact broad consumer privacy legislation.

Two House sponsors were added to the bill – Republican Terri Carver and Democrat majority co-whip Monica Dunn. The addition of bipartisan House sponsors perhaps signals that the bill has momentum to pass the House.

Notably, the Senate significantly amended the bill from the version previously passed by the Senate Business, Labor & Technology Committee. As discussed in our May 12 post, the Senate committee had revised many of the bill’s pro-consumer provisions to pro-business provisions. The bill that ultimately passed the Senate (see here) reverted many of those changes. Below is a summary of some of the notable revisions.

Keypoint: If signed by the Governor, entities doing business in Nevada will need to examine their data transfers to determine whether they constitute “sales” under the broader definition.

On May 25, 2021, the Nevada legislature passed SB260. The bill will now be sent to the Governor for approval or veto. Assuming the Governor signs the bill, it will amend Nevada’s online privacy notice statutes, NRS 603A.300-360, to provide Nevada residents with a broader right to opt out of sales.

Keypoint: This week the Connecticut Senate Appropriations Committee and New York Consumer Protection Committee passed their bills, and the Nevada Assembly passed its bill, which would broaden Nevada’s pre-existing right to opt out of sales.

Below is our thirteenth weekly update on the status of proposed CCPA-like privacy legislation. Before we get to our update, we wanted to provide two reminders.

First, we have been regularly updating our 2021 State Privacy Law Tracker to keep pace with the latest developments. We encourage you to bookmark the page for easy reference.

Second, the contents provided below are time-sensitive and subject to change. If you are not already subscribed to our blog, consider doing so to stay updated.

Keypoint: This week the Colorado Privacy Act passed out of the Senate Appropriations Committee, Alaska’s House Labor and Commerce Committee held another hearing on its bill, Connecticut’s bill was sent to the Senate Appropriations Committee, Nevada’s Assembly Committee on Commerce and Labor passed its bill, and the New York Privacy Act was reintroduced.

Below is our twelfth weekly update on the status of proposed CCPA-like privacy legislation. Before we get to our update, we wanted to provide two reminders.

First, we have been regularly updating our 2021 State Privacy Law Tracker to keep pace with the latest developments. We encourage you to bookmark the page for easy reference.

Second, the contents provided below are time-sensitive and subject to change. If you are not already subscribed to our blog, consider doing so to stay updated.

Keypoint: The Colorado Privacy Act passed unanimously out of committee last week but not before lawmakers revised many of its pro-consumer provisions to pro-business.

On May 5, 2021, the Colorado Senate Business, Labor & Technology Committee unanimously passed the Colorado Privacy Act. The bill was sent to the Senate Appropriations Committee where it is scheduled for a May 14 hearing.

Before passing the bill, the Senate Committee accepted a number of amendments that changed many of the bill’s pro-consumer privacy provisions in favor of pro-business provisions. As it stands, the bill appears to be an even more business-friendly version of the Virginia Consumer Data Protection Act (VCDPA). For reference, the VCDPA and Colorado bill are both based on this year’s version of the Washington Privacy Act, which failed to pass the Washington legislature in April.

Below is an analysis of some of the more notable amendments.

For reference, the current version of the bill is available here and the original version of the bill is available here. Our analysis of the original bill is available here.

Keypoint: This week an amended version of the Colorado Privacy Act unanimously passed out of committee, Alaska’s House held another hearing on its bill (and scheduled another hearing for May 12), Connecticut’s bill was tabled for the Senate calendar, and Nevada’s Assembly Committee on Commerce and Labor scheduled a May 10 hearing on its bill.

Below is our eleventh weekly update on the status of proposed CCPA-like privacy legislation. Before we get to our update, we wanted to provide two reminders.

First, we have been regularly updating our 2021 State Privacy Law Tracker to keep pace with the latest developments. We encourage you to bookmark the page for easy reference.

Second, the contents provided below are time-sensitive and subject to change. If you are not already subscribed to our blog, consider doing so to stay updated.

Keypoint: This week Florida came close to passing a bill before it died on the final day of the legislative session; committees in Colorado and Alaska scheduled hearings on their bills for May 5; and the Connecticut bill was referred to the Senate Committee on Judiciary.

Below is our tenth weekly update on the status of proposed CCPA-like privacy legislation. Before we get to our update, we wanted to provide two reminders.

First, we have been regularly updating our 2021 State Privacy Law Tracker to keep pace with the latest developments. We encourage you to bookmark the page for easy reference.

Second, the contents provided below are time-sensitive and subject to change. If you are not already subscribed to our blog, consider doing so to stay updated.

Keypoint: The bill now moves back to the House, which will need to act quickly as the legislature closes on Friday, April 30.

On April 29, the Florida Senate passed CCPA-like privacy legislation by a vote of 29-11. The Florida House previously passed privacy legislation by a vote of 118-1. However, because the Senate version differs from the House version, further action will be necessary for the bill to pass the legislature before it closes on April 30.

Keypoint: If passed, the bill would, among other changes, broaden Nevada’s existing right to opt out of sales of covered information.

In late March, we first reported that the Nevada legislature is considering a bill that would amend Nevada’s online privacy notice statutes, NRS 603A.300-360, to provide for a broader right to opt out of sales. On April 20, the Nevada Senate unanimously passed an amended version of SB260. The bill is now with the Assembly Committee on Commerce and Labor.