From 5 to 11: Keeping up with new state data privacy laws
By 
Adrianne Appel2023-09-06T15:00:00
If multi-state businesses thought at the start of 2023 complying with a patchwork of U.S. state privacy laws was going to be a lot of work, now they must be overwhelmed.
In a few short months, the number of states sporting comprehensive privacy laws went from five to 11, plus one more in Delaware awaiting the governor’s signature.
Those states include California, Colorado, Connecticut, Indiana, Iowa, Montana, Oregon, Tennessee, Texas, Utah, and Virginia, as tracked by the International Association of Privacy Professionals. There are also states, like Florida, with more lenient privacy laws on the books.
There is such variation among the laws, including when they take effect, that coming into compliance requires significant footwork, said Roy Wyman, a member at law firm Bass, Berry & Sims focusing on security and data privacy.
Related articles
-
PodcastDigital Transformation of Compliance podcast: Ryder CCO Pilar Caballero
In this episode of the Digital Transformation of Compliance podcast series, Pilar Caballero, chief compliance officer and chief privacy officer at Ryder, discusses her company’s process for vetting privacy concerns regarding use of new technologies.
-
News BriefCPPA sets sights on connected vehicles in first review
The California Privacy Protection Agency is probing the data privacy practices of connected vehicle manufacturers and their technologies as part of its first enforcement review.
-
PremiumCalifornia privacy reg delay offers little more than short reprieve
Many businesses are breathing a sigh of relief following a court ruling that delayed enforcement of certain provisions of the California Privacy Rights Act, but companies should not rest on their laurels, according to experts.
More from Regulatory Policy
-
PremiumU.K. FCA establishes framework for unlisted companies to trade shares on a ‘buyer-beware’ basis
Private companies that are keen to trade their shares but do not wish to become listed have gained another way to trade their shares. The U.K. government completed its initial review and published rules for the system in June.
-
ArticleDOJ is ramping up, not ramping down, health care fraud enforcement
While the Trump administration may have shifted away from pursuing small, white-collar, financial crimes, its focus on health care fraud cases is as hot as ever.
-
ArticleU.K. enforcement appetite over off-channel comms grows as U.S. wanes
The U.K’.s financial regulator has given a strong indication that financial firms’ use of unauthorized devices and apps is under scrutiny and that policies around off-channel communications need to be tightened up.