Legal Impacts Of CCPA/CPRA And How To Leverage Next-Gen Tech Within Your Privacy Program

California Governor Newsom has signed Senate Bill 574 into law, establishing the nation's first statutory framework governing how attorneys and arbitrators use generative AI in their professional practice. The legislation creates specific obligations around confidentiality protection, accuracy verification, and disclosure requirements that take effect January 1, 2027.

Although being challenged by an injunction filed on August 20, 2026, by a coalition of 17 states, California’s SB 54 Plastic Pollution Prevention and Packaging Producer Responsibility Act is now in effect, and companies that sell, distribute, import, or ship packaged products into California should be evaluating whether they have compliance obligations.

Connecticut’s Governor has signed into law Public Act No. 26-64, “An Act Concerning Consumer Privacy and Protection,” which introduces substantial new compliance obligations for businesses that operate as data brokers...

California Governor Gavin Newsom has signed several significant privacy bills that will reshape how businesses handle consumer data, including expanded deletion rights under the CCPA, shortened data broker response cycles, and sweeping new insurance sector privacy requirements. While one landmark bill banning the sale of sensitive personal information was vetoed, the approved legislation requires companies to update their deletion workflows...

Scott L. Vernick was quoted in The Legal Intelligencer article, "Did UPMC Data Breach Ruling Lock Plaintiffs Out of State Court?" on January 23, 2017.

California's 2026 legislative session concluded with Governor Newsom signing several landmark privacy and AI bills into law, including comprehensive child safety measures, AI auditor oversight frameworks, and expanded data protection requirements. How will these new regulations reshape digital advertising, workplace AI deployment, and online platform obligations for businesses operating in California?

Legal risk intensifies for companies offering online interactive features to minors across Georgia, Florida, and Alabama as the Eleventh Circuit vacates preliminary injunctions against state social media laws. With Florida's HB 3 and Georgia's SB 351 now enforceable and Alabama's HB 161 set to take effect January 1, 2027, businesses face divergent compliance requirements including age verification, parental consent mechanisms, and account deletion protocols.

In the last few months, California and New Jersey enacted legislation to protect children online: California’s 13-bill package targets risks to children arising from emerging technologies, while New Jersey’s 3-bill package includes an age-appropriate design code. Despite their differences, these laws share a common focus on protecting children as technology evolves.

Four states have adopted laws regulating data brokers, but only one – California – has established a universal deletion mechanism whereby consumers are able to request that all data brokers...

California is poised to enact a one-stop global deletion request option that all "data brokers" operating in the State would be required to follow.

The Federal Communications Commission has unanimously approved sweeping changes to its Telephone Consumer Protection Act consent revocation rules, fundamentally altering how businesses must handle consumer opt-out requests for calls and texts. These new regulations replace the controversial 2024 "revoke all" rule with more flexible options that allow companies to designate exclusive opt-out methods while distinguishing between marketing and informational messages.

The U.S. House of Representatives has passed H.R. 5334, the Lindsey O. Graham Sanctioning Russia and Iran Act of 2026, which directs the President to impose tariffs of up to 500 percent on Russian imports and up to 100 percent on imports from countries that are significant purchasers of Russian energy. The bill includes provisions for Presidential waiver authority and a five-year sunset clause...

California's 2026 legislative session concluded with Governor Newsom signing several landmark privacy and AI bills into law, including comprehensive child safety measures, AI auditor oversight frameworks, and expanded data protection requirements. How will these new regulations reshape digital advertising, workplace AI deployment, and online platform obligations for businesses operating in California?

In July, the Eighth Circuit vacated the FTC's ​"Click to Cancel Rule." At the time, we noted that although the FTC was unlikely to try to resurrect the Rule...

If you’re a dealer, an ad agency handling automotive accounts, or in-house counsel advising automotive clients, the Commission’s latest guidance on auto pricing transparency deserves a careful read. The guidance echoes familiar principles we’ve heard in other areas from federal and state regulators related to the expectation for all-in pricing, with important nuances unique to the auto industry.

The Advisory Council on Historic Preservation has advanced a Notice of Proposed Rulemaking that would fundamentally restructure Section 106 of the National Historic Preservation Act, marking the most significant regulatory overhaul in over 20 years. The proposed changes would shift the consultation process from a multi-step framework to an agency-prepared report system, narrow the scope of protected properties, and grant federal agencies greater unilateral authority in resolving adverse effects.

On November 21, 2023, the Treasury Department, through the Financial Crimes Enforcement Network (FinCEN) and Office of Foreign Assets Control (OFAC)...

On September 26, 2025, the California Privacy Protection Agency (CPPA) announced a $1.35 million fine against Tractor Supply Company, resolving allegations that the company violated the California...

On November 4, 2025, President Trump issued two Executive Orders to carry out U.S. commitments pursuant to a trade arrangement reached October 30 with the People's Republic of China (PRC).

On September 11, 2023, the Financial Crimes Enforcement Network (FinCEN) issued a Financial Trend Analysis detailing trends in suspected evasion of export controls on Russia.