Noteworthy Two Weeks In Privacy

The last two weeks have brought several notable developments in quick succession in the world of privacy and data security. First, on March 15, 2022, President Biden signed into law the Cyber Incident Reporting for Critical Infrastructure Act (the "Cyber Reporting Act") as part of a much larger omnibus appropriations bill. Then, on March 21, 2022, two new transfer tools in the United Kingdom ("UK") came into force. Then, on March 24, 2022, in the United States, Governor Spencer Cox signed the Utah Consumer Privacy Act ("UCPA") into law. Finally, on March 25, 2022, the U.S. and EU Commission announced a preliminary agreement on a new data transfer framework to replace the EU-U.S. Privacy Shield (the "Framework"), which was invalidated by the Court of Justice of the European Union's ("CJEU") Schrems II decision in July 2020.