On June 25th, Rhode Island Governor Daniel McKee transmitted without signature (effectively a pocket veto) the Rhode Island Data Transparency and Privacy Protection Act (SB 2500 / HB 7787). The act is based on the Washington Privacy Act model but diverges from the prevalent forms of that model in two ways. First, the act contains a unique […]
Read moreThe New York legislature passed two bills on June 7, 2024 directed at children’s use of online technologies – the Stop Addictive Feeds Exploitation (SAFE) for Kids Act (S7694) that restricts access to addictive algorithmic feeds and the New York Child Data Protection Act (S7695) that bans sites from collecting, using, sharing or selling personal […]
Read moreOn May 24, Governor Tim Walz signed into law Minnesota’s new comprehensive data privacy law, the Minnesota Consumer Data Privacy Act (HF 4757 referenced as the MCDPA). The MCDPA goes into effect on July 31, 2025, with some exceptions for colleges and universities (who have until 2029). The MCDPA is similar to other state privacy laws, […]
Read moreThe proposed American Privacy Rights Act (APRA) has taken its first step U.S. House legislative process with several issue disagreements becoming more evident. On May 23, the U.S. House Committee on Energy and Commerce Subcommittee on Data, Innovation and Commerce approved the updated APRA, advancing the bill to full committee consideration. Just prior to the […]
Read moreIf signed by Governor Jared Polis, Colorado SB 24-041 would enhance its privacy act protections when an under 13 year-old child’s data is processed and there is a heightened risk of harm applying to any entity that controls consumer personal data (controller) and that conducts business in Colorado or delivers products or services that are […]
Read moreThe Nebraska unicameral legislature passed the Nebraska Data Privacy Act (LB 1074) on April 11th which now heads to Nebraska Governor Jim Pillen for signature. Assuming the bill becomes law, Nebraska will become the 17th state to enact consumer data privacy legislation. The Nebraska bill largely tracks the Texas Data Privacy and Security Act with […]
Read moreOn April 4, Governor Andy Beshear signed into law HB 15 becoming the 15th state to enact comprehensive consumer data privacy legislation. The new Kentucky Consumer Data Protection Act (KCDPA) largely tracks the Virginia’s law but without this year’s amendments relating to children’s data. For agencies already complying with other non-California privacy laws, the Kentucky […]
Read moreCHC & 4A’s Member-Exclusive Guidance Crafted jointly by the CHC and 4A’s, this first-of-its-kind industry guidance – Navigating the Health Data Privacy Landscape: A Guide for Agencies – is designed to help partner healthcare agencies and communications companies better understand health data privacy compliance given the new wave of laws and regulations cropping up around […]
Read moreThe HHS Office for Civil Rights (OCR) and the National Institute of Standards and Technology (NIST) published the final version of Special Publication (SP) 800-66 Revision 2, aimed at helping covered entities and business associates better understand and comply with the HIPAA Security Rule. The final version serves as a resource guide and maps the […]
Read more