In the absence of meaningful progress from the U.S. Congress on passing a federal comprehensive privacy law, state legislatures have been busy this year passing their own solutions and adding to the complexity of U.S.
Continue Reading U.S. State Privacy Law Update: New Comprehensive Laws Coming in Indiana, Montana, Tennessee, and Florida
On April 12, 2023, the Biden administration announced a notice of proposed rulemaking (NPRM) from the Department of Health and Human Services (HHS) Office for Civil Rights (OCR), the agency responsible for enforcing the Health
Continue Reading HHS Proposes Purpose Limitation on Disclosures of PHI Related to Reproductive Health
On May 3, 2023, the Federal Trade Commission (FTC) announced that it issued an order to show cause (the “show cause order”) to Meta Platforms, Inc. (formerly Facebook, Inc., “Meta”). The show cause order proposes
Continue Reading Round Three: FTC Proposes Further Restrictions on Meta’s Privacy Practices and a Complete Prohibition on Meta Monetizing Youth Data
On April 27, 2023, Washington State Governor Jay Inslee signed a far-reaching health privacy law entitled the “My Health My Data Act” (the Act), which extends protections to consumer health data collected by
Continue Reading Washington State Governor Signs Sweeping Health Privacy Act (My Health My Data Act) into Law
On March 28, 2023, Iowa Governor Kim Reynolds signed “An Act Relating to Consumer Data Protection” (SF 262) (ICDPA),1 making Iowa the sixth U.S. state to enact a comprehensive consumer privacy law
Continue Reading The Sixth State: Iowa Enacts Comprehensive Privacy Law
In March 2023, the UK government published the Data Protection and Digital Information (No. 2) Bill (the bill). If enacted, the bill will introduce significant changes to the UK’s data protection laws, with the aim
Continue Reading UK Brings Forward Legislation to Streamline the GDPR