Menu
Our practice focus
Our industry focus
Other industries
Legal Insights that help shape strategy and drive compliance.
Privacy World
Our team members will be participating in several speaking engagements over the coming months, sharing perspectives on emerging trends, regulatory developments, and practical challenges across the global data privacy, AI, and cybersecurity landscape. Stay Ahead on Consumer Privacy News Not a subscriber yet? Subscribe here to be among the first to receive timely updates on the fast-moving world...
April 2026 | Blog
Over the years, we have followed unsuccessful attempts by Congress to develop a national consumer privacy law. Each time, two key issues have frustrated passage, (1) the degree to which, if at all, a federal law should preempt state consumer privacy laws (CPLs); and (2) if there should be a private right of action. The now...
On April 16, 2026, Governor Kay Ivey signed into law the Alabama Personal Data Protection Act (“APDPA”) after a unanimous vote in favor from both chambers of the Alabama legislature. The APDPA is the 22nd state consumer privacy law overall (counting Florida) and the second one enacted in 2026, following enactment of Oklahoma’s privacy law...
The Maryland Online Data Privacy Act (MODPA) is, as of April 1 of this year, now enforceable (subject to a potential cure opportunity until April 1, 2027). MODPA is amongst the strictest state consumer privacy laws (CPLs), and outright bans the sale of sensitive personal data, including precise geolocation data, as well as targeted advertising...
Connecticut Attorney General William Tong recently issued an advisory memorandum (“Advisory”) to all “State Officials, Agencies and Concerned Parties” about how existing Connecticut laws apply to artificial intelligence (“AI”). In the Advisory, Attorney General Tong hints at enforcement priorities and offers businesses a roadmap for compliance in describing how Connecticut’s civil rights, privacy and data...
On March 20, 2026, Oklahoma Governor Stitt signed the first new comprehensive state privacy law of 2026. The “Act relating to data privacy” is in force on January 1, 2027. In this post, we compare the new Oklahoma privacy law to the other 20 state consumer privacy laws already in force below. HOW THE OKLAHOMA...
March 2026 | Blog
Following unanimous votes by the California legislature and signature by the Governor, California enacted an Age-Appropriate Design Code Act (CAADCA) in September 2022 (codified at CA Civil Code Section 1798.99.28-32), as a measure purportedly “aimed at protecting the wellbeing, data, and privacy of children [under 18] using online platforms.” Industry group NetChoice soon turned to...
Privacy compliance has entered a new phase—one defined not only by high-profile enforcement actions but by the growing expectation that organizations implement and maintain mature information governance programs capable of validating true, system-level technical compliance rather than merely projecting the appearance of it. A spate of recent California enforcement actions makes clear that companies must...
Publication
December 2025 | Americas
The 2025 legislative cycle marked a pivotal year in US privacy law, defined not only by continued nationwide expansion into Artificial Intelligence (AI) governance, children’s and teen privacy and online safety, as well as emerging data categories, but by a major restructuring of California’s privacy enforcement infrastructure. California’s introduction of the Delete Request and Opt-out Platform...
December 2025 | Blog
We have previously covered the recent changes to the California Consumer Privacy Act (CCPA) regulations, and summarized the changes companies need to make to be 2026-ready under them and other state consumer privacy laws that have recently or will soon become effective. In a recent guidance document, CalPrivacy highlights “seven things businesses should know and prepare for,”...
November 2025 | Blog
The California Consumer Privacy Act (CCPA) requires that privacy notices be updated annually, and that the detailed disclosures it proscribes be in those notices reflect the 12-month period prior to the effective (posting) date. Interestingly, failure to make annual updates was one of several alleged CCPA violations that resulted in a recent $1.35 Million administrative...
October 2025 | Blog
Query:{"PerPage":12,"Page":1,"Keyword":null,"FilterGroups":[{"FilterType":2,"FilterValues":["077c4c91c4fa4651b2cdec14f5e6d0f8"],"HideFilter":false}],"DocumentTypes":["insightsItemText","blogPost"],"SortField":{"FieldName":"itemDateSortDesc","SortType":5},"SortDescending":true,"FutureItems":null,"Exclude":null,"Fields":["nodeName","titleOverride","excerpt","pageDescription","searchKeywords","nameSynonyms","lastNameNormalized"],"ParentPageId":null,"ParentPageIds":null,"OverrideHideFromSearch":false};
{ Category: content, LuceneQuery: +(__NodeTypeAlias:insightsitemtext __NodeTypeAlias:blogpost) -(+hideFromSearch:"1") +(relatedPeople:077c4c91c4fa4651b2cdec14f5e6d0f8) }
Insights at the Intersection of Law and AI.
Comprehensive regulatory framework for investment security and national interests.
Helping organizations align purpose with performance through practical ESG insights and solutions.
Explore our sector-specific legal blogs, where we regularly share insights and updates on the latest legal developments.
Subscribe to our legal insights directly to your inbox.
