Blog: US Privacy Laws
Page 11
Virginia VCDPA vs California CPRA
Virginia's Consumer Data Protection Act (VCDPA) and California's Consumer Privacy Rights Act (CPRA) are among the most powerful privacy laws in the United States. Both laws provide extensive definitions of "personal information," grant consumers rights over their personal information, and require covered businesses to provide transparent notice about their practices. But although...
Compliantly Using Biometric Data in Arizona
Note: None of the laws mentioned in this article have passed. All have been shelved. Over the past few years, there's been a rise in both litigation and legislation regarding the collection and use of biometric information. There are many types of bio-data, or biometric identifiers. These include such things as face...
Oregon Consumer Privacy Act (OCPA)
Senate Bill 619, or the Oregon Consumer Privacy Act (OCPA), was passed on August 1, 2023. The law goes into effect January 1, 2024. This article will cover everything you need to know about the Oregon Consumer Privacy Act (OCPA) including who it applies to, how to comply with the law,...
The Virginia Consumer Data Protection Act (VCDPA)
The Virginia Consumer Data Protection Act (HB 2307 / SB 1392) or (VCDPA) passed the Virginia House of Delegates and the state Senate on February 5, 2021. The law passed with significant bipartisan support. It will become enforceable on January 1, 2023. This article will look at what the law requires...
Updating your CCPA Privacy Policy for the CPRA
The California Consumer Privacy Act (CCPA) is already the most demanding U.S. state privacy law. By voting "Yes" on Proposition 23 and enacting the California Privacy Rights Act (CPRA), which expands and amends the CCPA, Californians extended their state's privacy law obligations even further. In addition to affecting the CCPA's scope,...
Data Minimization Under the CPRA and GDPR
The California Privacy Rights Act (CPRA) amendment to the CCPA contains the first "data minimization" requirement of any U.S. privacy law. And the General Data Protection Regulation (GDPR) has set global standards in minimizing data collection and use. The CPRA's requirements center around notice and choice. But the law also contains...