Share on LinkedInShare on LinkedIn

ARTICLE · 05 JANUARY 2023

2023 Top Privacy Issues: New Laws & Expanded Enforcement

Davis+Gilbert LLP
Davis+Gilbert LLP
Contributor
Davis+Gilbert LLP

Davis+Gilbert LLP

Legal mastery is critical but not enough. Even the best legal strategies must work in tandem with...

View firm profile
Explore more from Davis+Gilbert LLP

As new state privacy laws go into effect in 2023, companies need to ensure compliance with an ever growing list of obligations.

United StatesPrivacy
Gary Kibel
Gary Kibel
Richard Eisert
Richard Eisert
Zachary Klein
Zachary Klein
Jeremy Merkel
Jeremy Merkel
Emily Catron
Emily Catron
Author LinkedIn connections

The Bottom Line

  • As new state privacy laws go into effect in 2023, companies need to ensure compliance with an ever growing list of obligations.
  • Expect regulators to keep cracking down on dark patterns and privacy violations, including noncompliance with these new privacy laws.

Privacy laws and enforcement will see some big changes in 2023. Last year brought more state laws and regulations, as well as FTC and GDPR developments — and that focus on privacy is expected to continue throughout the new year... and even expand.

Top Five Privacy Issues for 2023:

1. CCPA/CPRA Enforcement Begins

The California Consumer Privacy Act (CCPA) was ground-breaking as the nation's first comprehensive consumer privacy law. Although the law took effect on January 1, 2020, the first public CCPA enforcement action was just announced in August 2022. While the $1.2 million fine levied against Sephora was the first, it most certainly won't be the last. The California

We operate a free-to-view policy, asking only that you register in order to read all of our content. Please login or register to view the rest of this article.

Register for freeORLog in

The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.

View source

Related Articles

Legal Intelligence Newsletters: sign up for the latest legal and regulatory news on your chosen topics

Read more about

Related Comparative Guides

See more popular content from

Article

California’s 2026 Legislative Session Wraps: A Wave Of Privacy And AI Bills Reaches The Governor, With Key Child Safety And AI Measures Signed Into Law

California's 2026 legislative session concluded with Governor Newsom signing several landmark privacy and AI bills into law, including comprehensive child safety measures, AI auditor oversight frameworks, and expanded data protection requirements. How will these new regulations reshape digital advertising, workplace AI deployment, and online platform obligations for businesses operating in California?
United StatesPrivacy
Kelley Drye & Warren LLP
Kelley Drye & Warren LLP
Article

SB 54 Is In Effect: What California’s New Packaging Law Means For Your Business

Although being challenged by an injunction filed on August 20, 2026, by a coalition of 17 states, California’s SB 54 Plastic Pollution Prevention and Packaging Producer Responsibility Act is now in effect, and companies that sell, distribute, import, or ship packaged products into California should be evaluating whether they have compliance obligations.
United StatesPrivacy
Wilson Elser Moskowitz Edelman & Dicker LLP
Wilson Elser Moskowitz Edelman & Dicker LLP
Article

The Data Breach Brief: Week Of September 30th, 2026

Multiple organizations have recently disclosed significant data breaches affecting thousands of individuals, with compromised information ranging from basic contact details to highly sensitive medical records and financial data. The incidents span various sectors including healthcare, insurance, and professional services, raising questions about the scope of exposure and potential remedies for affected individuals.
United StatesPrivacy
Morgan & Morgan
Morgan & Morgan
Article

California Legislation: End-Of-Session Check-In

California's legislature has sent a comprehensive package of privacy, AI, and advertising bills to Governor Newsom's desk, with decisions due by September 30, 2026. The legislation addresses sensitive personal information protections, data broker obligations, AI-powered chatbot regulations, and digital replica rights, potentially reshaping how businesses handle consumer data and automated decision-making systems. Will these bills become law and set new national standards for technology regulation?
United StatesPrivacy
Frankfurt Kurnit Klein & Selz PC
Frankfurt Kurnit Klein & Selz PC
Article

Emerging Enforcement Trends In Digital Health Data Privacy: Lessons From Washington’s My Health My Data, FTC vs. Hims & Hers And UCHealth Enforcement Actions

Federal and state regulators are intensifying scrutiny of healthcare and digital health companies over tracking technologies that share sensitive patient data with advertising platforms. Recent enforcement actions against major telehealth providers and healthcare systems reveal how common marketing practices can trigger significant legal liability under privacy laws, even for organizations not covered by HIPAA.
United StatesPrivacy
Benesch, Friedlander, Coplan & Aronoff LLP
Benesch, Friedlander, Coplan & Aronoff LLP
Article

California Signs Landmark Online Child Safety Package

California has enacted the nation's most comprehensive online child safety legislation, banning addictive social media features for minors under 16, establishing strict companion chatbot regulations, and imposing enhanced civil penalties for platforms that harm children. Companies operating social media platforms or chatbots accessible to California children must now assess their products, audit features, and prepare compliance programs ahead of the laws' effective dates.
United StatesMedia, Telecoms, IT, Entertainment
Davis+Gilbert LLP
Davis+Gilbert LLP
Article

EU AI Act Guidance Expands AI Disclosure Rules For Advertisers And PR Teams

The European Union's AI Act introduces sweeping transparency requirements for AI-generated content, fundamentally redefining what constitutes a "deep fake" and imposing disclosure obligations that extend far beyond traditional understanding. With enforcement beginning August 2, 2026, companies using AI to create advertising, marketing materials, or public communications must navigate complex compliance requirements that may apply even to organizations with no physical presence in Europe.
European UnionMedia, Telecoms, IT, Entertainment
Davis+Gilbert LLP
Davis+Gilbert LLP
Article

NYC’s “Click To Cancel” Rule Is Now In Effect: What Subscription Businesses Need To Know

New York City has become the first U.S. municipality to enforce its own subscription cancellation requirements, creating a new compliance layer for businesses with NYC subscribers. The rule prohibits unreasonable barriers to cancellation and requires companies that enroll consumers in person to offer online cancellation options. With complaint-driven enforcement, per-violation fines up to $3,500, and restitution measured from the first cancellation attempt, businesses must now navigate city-level regulation
United StatesConsumer Protection
Davis+Gilbert LLP
Davis+Gilbert LLP
Article

FTC Continues Crackdown On Subscription Businesses

The Federal Trade Commission has filed a sweeping complaint against Genesis Tech and related entities, alleging systematic deception in subscription funnels that lure consumers with free or low-cost offers while obscuring auto-renewal terms. The enforcement action signals heightened scrutiny of end-to-end consumer journeys, challenging not just missing disclosures but the overall impression created by quizzes, personalization claims, and pricing language that suggests one-time purchases. What compliance ris
United StatesConsumer Protection
Davis+Gilbert LLP
Davis+Gilbert LLP
Article

California Becomes Second State To Require Disclosure Of Synthetic Performers In Advertising

California joins New York in mandating disclosure when AI-generated synthetic performers appear prominently in advertisements, establishing specific language requirements and broad enforcement mechanisms. The law creates new compliance obligations for advertisers, agencies, and media platforms while introducing nuanced differences from New York's framework. With the January 2027 effective date approaching, businesses must implement tracking systems and disclosure procedures to navigate this expanding regula
United StatesMedia, Telecoms, IT, Entertainment
Davis+Gilbert LLP
Davis+Gilbert LLP
Article

California Poised To Narrow The Reach Of The California Invasion Of Privacy Act

California's Senate Bill 690 represents a pivotal legislative response to the explosion of website-tracking lawsuits under the California Invasion of Privacy Act, specifically targeting claims brought under the pen-register provision that have generated thousands of cases since 2022. While the bill would eliminate private plaintiffs' ability to pursue these particular claims involving digital tracking technologies, it leaves other CIPA provisions intact and raises questions about how the litigation landscap
United StatesPrivacy
Davis+Gilbert LLP
Davis+Gilbert LLP