Husch Blackwell Privacy Team

The Colorado Attorney General’s Office announced that it filed final Colorado Privacy Act (CPA) rules with the Colorado Secretary of State’s Office. The rules will go into effect July 1, 2023, the same date the CPA goes into effect. The rules contain a complex and lengthy set of requirements that controllers will need to carefully

The Board of the California Privacy Protection Agency approved final California Privacy Rights Act (CPRA) regulations on February 3, 2023. The regulations will go into effect upon approval by the Office of Administrative Law.

On March 2, 2023, members of Husch Blackwell’s data privacy team will host a webinar to analyze the final regulations and

The Colorado Attorney General’s Office published draft Colorado Privacy Act (CPA) rules on September 30, 2022. As discussed in our prior blog post, the draft rules are a complex and lengthy set of regulations that, if adopted without substantial modification, will significantly expand the CPA’s requirements and require controllers to carefully consider their compliance

On April 28, 2022, the Connecticut legislature passed Senate Bill 6 – what we are calling the Connecticut Data Privacy Act (CTDPA). Once signed by the Governor, Connecticut will become the fifth state—after California, Virginia, Colorado and Utah—to enact broad consumer data privacy legislation. The CTDPA is a strong consumer-oriented data privacy bill that is

On August 14, 2020, Attorney General Becerra announced that the California Office of Administrative Law (OAL) approved the final regulations related to the California Consumer Privacy Act (CCPA) an filed them with the Secretary of State. The regulations go into effect immediately.

The Attorney General’s office submitted the final proposed regulations to the OAL on June 1, 2020. As part of the final regulations package, the Attorney General requested an expedited review of 30 business days and that the regulations become effective upon filing with the Secretary of State. Although not satisfying the 30-day request, the OAL did complete its review in short order, particularly in light of two executive orders by California’s governor extending the OAL’s review period by an additional 120 days.

During a webinar last week hosted by the International Association of Privacy Professionals, a representative from the California Attorney General’s office confirmed that on July 1, the first date of the AG’s statutory enforcement authority, the office sent its first set of CCPA enforcement letters. Per the statute, businesses have 30 days to cure the violations before the AG’s office may commence a confidential investigation or initiate a lawsuit.