Blog: US Privacy Laws
Page 10
Compliantly Using Biometric Data in Arizona
Note: None of the laws mentioned in this article have passed. All have been shelved. Over the past few years, there's been a rise in both litigation and legislation regarding the collection and use of biometric information. There are many types of bio-data, or biometric identifiers. These include such things as face...
Oregon Consumer Privacy Act (OCPA)
Senate Bill 619, or the Oregon Consumer Privacy Act (OCPA), was passed on August 1, 2023. The law goes into effect January 1, 2024. This article will cover everything you need to know about the Oregon Consumer Privacy Act (OCPA) including who it applies to, how to comply with the law,...
The Virginia Consumer Data Protection Act (VCDPA)
The Virginia Consumer Data Protection Act (HB 2307 / SB 1392) or (VCDPA) passed the Virginia House of Delegates and the state Senate on February 5, 2021. The law passed with significant bipartisan support. It will become enforceable on January 1, 2023. This article will look at what the law requires...
Updating your CCPA Privacy Policy for the CPRA
The California Consumer Privacy Act (CCPA) is already the most demanding U.S. state privacy law. By voting "Yes" on Proposition 23 and enacting the California Privacy Rights Act (CPRA), which expands and amends the CCPA, Californians extended their state's privacy law obligations even further. In addition to affecting the CCPA's scope,...
Data Minimization Under the CPRA and GDPR
The California Privacy Rights Act (CPRA) amendment to the CCPA contains the first "data minimization" requirement of any U.S. privacy law. And the General Data Protection Regulation (GDPR) has set global standards in minimizing data collection and use. The CPRA's requirements center around notice and choice. But the law also contains...
Nonprofits and the CCPA (CPRA)
You may think of the California Consumer Privacy Act (CCPA), as amended by the CPRA, as a law that applies to big businesses and social media companies. But have you noticed that the CCPA/CPRA actually contains two definitions of "business?" The CCPA/CPRA's main target is indeed large, profit-making businesses: for example,...