On August 9, 2023, India’s upper house (i.e., Rajya Sabha) passed the Digital Personal Data Protection Bill, two days after India’s lower house (i.e., Lok Sabha) passed the legislation. The DPDPB now heads to India President Droupadi Murmu for signature.
Continue Reading India Poised to Enact Digital Personal Data Protection Bill
Data Controller
European Data Protection Board Issues Information Note on Data Transfers under the Data Privacy Framework
Posted on
On July 19, 2023, the European Data Protection Board issued an Information Note regarding data transfers to the U.S. following the adoption of an adequacy decision on the EU-U.S. Data Privacy Framework on July 10, 2023.
Continue Reading European Data Protection Board Issues Information Note on Data Transfers under the Data Privacy Framework
Delaware Could Become the 13th State to Enact a Comprehensive State Privacy Law
Posted on
Posted in U.S. State Law
On June 30, 2023, the Delaware House of Representatives passed the Delaware Personal Data Privacy Act (H.B. 154), a day after the Delaware Senate passed the legislation. The DPDPA heads to Governor John Carney for a final signature. …
Continue Reading Delaware Could Become the 13th State to Enact a Comprehensive State Privacy Law
Oregon Consumer Privacy Act
Posted on
Posted in Enforcement, U.S. State Law
On June 22, 2023, the Oregon House of Representatives passed the Oregon Consumer Privacy Act (S.B. 619), which was previously passed by the Oregon Senate on June 20, 2023. The OCPA has been sent to the Oregon governor’s desk for signature. If signed, the OCPA would make Oregon the 12th state to have enacted comprehensive privacy legislation.
Continue Reading Oregon Consumer Privacy Act
New Washington State Geofencing Ban Set to Take Effect in July
Posted on
Posted in Health Privacy, U.S. State Law
On April 27, 2023, Washington adopted the My Health My Data Act. Most of the law’s provisions are not effective until March 31, 2024 (or June 30, 2024 for small businesses). The law’s geofencing prohibition, however, is set to take effect on July 23, 2023.
Continue Reading New Washington State Geofencing Ban Set to Take Effect in July
Texas Senate Passes Texas Data Privacy and Security Act
Posted on
Posted in Enforcement, U.S. State Law
On May 10, 2023, the Texas Senate passed H.B. 4, also known as the Texas Data Privacy and Security Act. …
Continue Reading Texas Senate Passes Texas Data Privacy and Security Act
Montana and Tennessee Could Become Eighth and Ninth States to Enact Comprehensive Consumer Privacy Bills
Posted on
Posted in Enforcement, U.S. State Law
On April 21, 2023, the Montana and Tennessee legislatures voted to enact comprehensive consumer privacy bills in their respective states. If signed by their governors, Montana’s Consumer Data Privacy Act (S.B. 384) and Tennessee’s Information Protection Act (H.B. 1181) could make these states the eighth and ninth U.S. states to enact comprehensive privacy legislation. …
Continue Reading Montana and Tennessee Could Become Eighth and Ninth States to Enact Comprehensive Consumer Privacy Bills
Washington Becomes the First State to Enact a Comprehensive Health Privacy Law
Posted on
Posted in Health Privacy, U.S. State Law
On April 17, 2023, the Washington State House concurred to the Washington State Senate’s amendments to Washington State House Bill 1155, the My Health My Data Act, clearing the bill’s way to Governor Jay Inslee for a final signature. …
Continue Reading Washington Becomes the First State to Enact a Comprehensive Health Privacy Law
Indiana Likely to Become Seventh State to Enact a Comprehensive State Privacy Law
Posted on
Posted in Enforcement, U.S. State Law
On April 13, 2023, the Indiana Senate concurred to the Indiana House’s amendments of Senate Bill 5 a day after the House returned the bill to the Senate with amendments, and a couple days after the Indiana House unanimously voted to approve SB 5. …
Continue Reading Indiana Likely to Become Seventh State to Enact a Comprehensive State Privacy Law
CIPL Responds to EDPB’s Calls for Public Comments on Recommendations for Controller Binding Corporate Rules
Posted on
On January 10, 2023, the Centre for Information Policy Leadership at Hunton Andrews Kurth responded to a call for public comments from the European Data Protection Board regarding their Recommendations 1/2022 on the Application for Approval and on the elements and principles to be found in Controller Binding Corporate Rules (Art. 47 GDPR). …
Continue Reading CIPL Responds to EDPB’s Calls for Public Comments on Recommendations for Controller Binding Corporate Rules