Our insights

Privacy World

Oklahoma’s New Privacy Law Sweeps In

On March 20, 2026, Oklahoma Governor Stitt signed the first new comprehensive state privacy law of 2026. The “Act relating to data privacy” is in force on January 1, 2027. In this post, we compare the new Oklahoma privacy law to the other 20 state consumer privacy laws already in force below. HOW THE OKLAHOMA...

March 2026 | Blog

Privacy World

Colorado Legislature Passes a Five-Month Delay for Colorado’s AI Act

Late yesterday day afternoon, Colorado’s House of Representatives passed, in a 48-14 vote, a bill that delays the in-force date for Colorado’s landmark 2024 AI law (CO Rev Stat §§ 6-1-1701 — 6-1-1707 (COAIA)) until June 30, 2026.  After first voting in favor of an amendment delaying the in-force date until October 1, 2026, the...

August 2025 | Blog

Privacy World

Countdown to October 6th: Fewer than 60 days until the DOJ’s Bulk Sensitive Data and Government Related Data Rule is fully in force

On October 6, 2025, the “Preventing Access to U.S. Sensitive Personal Data and Government Related Data by Countries or Concern or Covered Persons” Rule released by the U.S. Department of Justice (DOJ) (DOJ Rule) will be fully in force. Is your organization ready? During the first half of 2025, numerous clients reached out to find...

August 2025 | Blog

Publication

The Second Half of the Year Brings New State Privacy Obligations – Are You Ready?

July 2025 | Americas

Privacy World

The Second Half of the Year Brings New State Privacy Obligations – Are You Ready?

Many organizations have been working diligently to comply with the 13 state consumer privacy laws (CPLs) in effect in the first half of 2025 (14 if you count Florida). Some have chosen to comply on a state-by-state basis and others have followed the high-watermark approach of applying the strictest standard from among the CPLs to...

July 2025 | Blog

Privacy World

States Shifting Focus on AI and Automated Decision-Making

(Updated May 12, 2025) Since January, the federal government has moved away from comprehensive legislation on artificial intelligence (AI) and adopted a more muted approach to federal privacy legislation (as compared to 2024’s tabled federal legislation). Meanwhile, state legislatures forge ahead – albeit more cautiously than in preceding years. As we previously reported, the Colorado...

May 2025 | Blog

Publication

Light at the End of the Tunnel – Are You Ready for the New California Privacy and Cybersecurity Rules?

March 2025 | Americas

Privacy World

Light at the End of the Tunnel – Are You Ready for the New California Privacy and Cybersecurity Rules?

After what seems like forever, the most recent (and last?) public comment period for the draft California Consumer Privacy Act (CCPA) regulations finally closed on February 19, 2025. (Read Privacy World coverage here and here.)  Following an initial public comment period on an earlier draft, the formal comment period for the current version of the... Continue Reading

February 2025 | Blog

Privacy World

A New Era: Trump 2.0 Highlights for Privacy and AI

Since the Trump 2.0 administration commenced, the U.S. federal government has experienced some major policy shifts. Several Biden-Harris administration era regulations are now eliminated or on a 60-day hold while under review. States and other organizations have filed lawsuits to stay implementation of certain Trump 2.0 initiatives (i.e., the funding freezes, deferred resignation offer, birthright... Continue Reading

February 2025 | Blog

Privacy World

Key Insights on President Trump’s New AI Executive Order and Policy & Regulatory Implications

On January 23, 2025, President Trump issued a new Executive Order (EO) titled “Removing Barriers to American Leadership in Artificial Intelligence” (Trump EO). This EO replaces President Biden’s Executive Order 14110 of October 30, 2023, titled “Safe, Secure, and Trustworthy Development and Use of Artificial Intelligence” (Biden EO), which was rescinded on January 20, 2025,... Continue Reading

February 2025 | Blog

Triage Health Law

HHS Publishes Notice of Proposed Rulemaking to Amend HIPAA Security Rule Requirements—Comments Due March 7, 2025

Summary On December 27, 2024, the U.S. Department of Health and Human Services, Office for Civil Rights (“HHS”) published its Notice of Proposed Rulemaking (“NPRM”) titled HIPAA Security Rule to Strengthen the Cybersecurity of Electronic Protected Health Information. HHS seeks comments on proposed modifications to the Security Standards for the Protection of Electronic Protected Health...… Continue Reading

February 2025 | Blog

Privacy World

HHS Publishes Notice of Proposed Rulemaking to Amend HIPAA Security Rule Requirements – Comments Due March 7, 2025

Summary On December 27, 2024, the U.S. Department of Health and Human Services, Office for Civil Rights (“HHS”) published its Notice of Proposed Rulemaking (“NPRM”) titled HIPAA Security Rule to Strengthen the Cybersecurity of Electronic Protected Health Information. HHS seeks comments on proposed modifications to the Security Standards for the Protection of Electronic Protected Health... Continue Reading

February 2025 | Blog