Last month, the Connecticut legislature passed two bills that amend and expand the Connecticut Data Privacy Act (CTDPA): Senate Bill 4 (SB 4) and House Bill 5222 (HB 5222). SB 4 (which was signed into law on May 27, 2026) and HB 5222 (which amends parts of SB 4 and was signed into law on June 2, 2026) contain new requirements for businesses and data brokers operating in the Constitution State.
Continue Reading Connecticut Updates Its Data Privacy Act, Imposing Significant New Privacy RequirementsTracy Shapiro
Colorado Legislature Repeals and Replaces Colorado AI Act: What SB 189 Means for Your Business
Posted in Regulatory
South Carolina Becomes Fifth State to Enact Age-Appropriate Design Code Law
By Maneesha Mithal, Tracy Shapiro & Doo Lee on
Posted in Privacy
On February 5, 2026, South Carolina Governor Henry McMaster signed H. 3431, Age-Appropriate Code Design (SC AACD) into law, becoming the fifth state to enact an age-appropriate design code law after California, Maryland, Nebraska, and Vermont.1 The law, which went into immediate effect upon the governor’s signature, adds to the steadily increasing patchwork of teens’ and children’s online safety legislation in the U.S. Notably, covered online services are liable for treble damages incurred as result of a violation of the statute. Further, officers and employees may be held personally liable for “wil[l]ful and wanton” violations of the SC AACD. The law is already facing a legal challenge by a trade association.
Continue Reading South Carolina Becomes Fifth State to Enact Age-Appropriate Design Code LawCalifornia Enacts Nearly a Dozen Key Privacy and AI Bills into Law
By Edward Holman, Tracy Shapiro & Doo Lee on
Posted in Privacy
On October 13, 2025, California concluded a busy legislative term by enacting a slew of key privacy and AI-related bills, aimed at enhancing consumer protection and regulating emerging AI technology applications. These measures address a range of critical issues, including consumer opt-out signals, data broker transparency requirements, age assurance, minors’ safety, companion chatbots, and AI development. We summarize some of the most significant of these privacy and AI bills that were signed into law by California Governor Gavin Newsom, below.
Continue Reading California Enacts Nearly a Dozen Key Privacy and AI Bills into LawLegal Framework for AI in Mental Healthcare
By Andrea Linna, Tracy Shapiro, Maneesha Mithal, Eva Yin, Lauren Gallo White, Jodi Daniel, Hale Melnick, Nawa Lodin & Seamus Taylor on
Posted in Privacy
Introduction
Artificial intelligence (AI) is increasingly being used in mental healthcare for functions such as clinical decision support, notetaking and transcription, symptom screening and triage, administrative and operational improvements, augmenting the provider-patient relationship, post-visit remote monitoring, and companionship.
Continue Reading Legal Framework for AI in Mental HealthcareState AGs Unveil Investigation Sweep Targeting Businesses Ignoring Consumer Opt-Out Signals
By Tracy Shapiro, Edward Holman & Doo Lee on
Posted in Privacy
On September 9, 2025, the attorneys general of California, Colorado, and Connecticut and the California Privacy Protection Agency (CPPA) announced a joint investigative sweep of potential failures by businesses to honor consumers’ rights to opt…
Continue Reading State AGs Unveil Investigation Sweep Targeting Businesses Ignoring Consumer Opt-Out SignalsU.S. Federal Court Allows CIPA Class Action Against AI Customer Service Provider to Proceed
By Edward Holman, Tracy Shapiro & Doo Lee on
Posted in Privacy
On August 11, 2025, the U.S. District Court for the Northern District of California denied a motion to dismiss a California Invasion of Privacy Act (CIPA) class action lawsuit filed against ConverseNow Technologies, Inc. ConverseNow…
Continue Reading U.S. Federal Court Allows CIPA Class Action Against AI Customer Service Provider to Proceed