Debevoise Data Blog

APRIL 29, 2022

In prior posts, we have written about the evolving state privacy law landscape, including how to prepare for state privacy laws coming into effect in 2023 here ; various aspects of the CCPA and CPRA, including here and here ; and the Virginia Consumer Data Protection Act (“VCDPA”) here.

Law 52

Law Law Data protection Attorney 52

Debevoise Data Blog

MAY 23, 2022

Like other state privacy laws, the CTPA contains a number of entity-based and data-based exemptions, including financial institutions covered by the Gramm-Leach-Bliley Act, national securities associations that are registered under the Securities Exchange Act of 1934, and data regulated by the Fair Credit Reporting Act, among other exemptions.

Law 40

Law Law Compliance Attorney 40

Debevoise Data Blog

OCTOBER 18, 2021

For purposes of these blog posts, we focus mainly on the former use case—matching a face to a specific person for identification purposes—rather than other use cases such as emotional evaluation and lie detection. The TDPA provides for a private right of action for violation of the prohibition to sell, lease, or disclose data.

Law 52

Law Law Court Time-tracking 52

Debevoise Data Blog

JULY 12, 2022

Even if not enacted, its provisions are likely to influence a future federal privacy law. And, in many ways, the ADPPA may set a new minimum standard that will shape any state laws passed to fill the void left by the lack of a federal privacy law. We’ve previously written about the development of U.S. ADPPA § 302(a).

State law 52

State law Federal law Compliance Data protection 52

Debevoise Data Blog

OCTOBER 26, 2021

Further, in a case that we have covered previously involving a supermarket using video surveillance with facial recognition capabilities, the Spanish data protection authority (the “AEDP”) fined grocer Mercadona for violating numerous provisions of the EU’s General Data Protection Regulation.

Compliance 52

Compliance Federal law Data protection Machine learning 52

Debevoise Data Blog

JULY 9, 2021

further in the direction of European-style privacy law. Colorado and Nevada join California and Virginia in adding to the growing patchwork of disparate state laws — making it that much harder for any business seeking to have a single privacy program that is compliant everywhere.

Data protection 40

Data protection Attorney Compliance State law 40

Debevoise Data Blog

JANUARY 14, 2022

The threat will be particularly severe for smaller companies that lack the legal expertise and capital to hire outside counsel to contest the FTC’s proposed settlements backed by the threat of potentially bankrupting fines regardless of whether they believe their activities are completely lawful. [34] 1, 2021). [13] 7, 2022). [14] 7, 2021).

Compliance 52

Compliance Court Litigator Litigation 52

Richmond Journal of Law and Technology

MARCH 7, 2025

Additionally, states and the federal government are already taking incremental steps toward protection in the digital age without a federal digital bill of rights. These state-level initiatives create a patchwork of digital privacy laws, complicating efforts to establish a national, uniform standard for digital rights protection.

Compliance 52

Compliance Data protection Federal law Court 52

Eric Goldman

MAY 26, 2025

Another lengthy blog post rounding up cases from the past few months involving CSAM or commercial sex and Section 230/FOSTA. May 6, 2025) Prior blog posts ( 1 , 2 ). Users can store iCloud files using “Advanced Data Protection,” which encrypts the files such that Apple can’t access them.

Defendant 57

Defendant Failure-to-appear Court Judge 57