Overview
We help clients navigate the varied landscape of state-level privacy regulations in the United States, offering expert counsel on interpreting and applying state privacy laws, such as the California Consumer Privacy Act (CCPA) and the Virginia Consumer Data Protection Act (VCDPA), and guide developing tailored compliance strategies. Our team delivers strategic advice on operational adjustments, policy updates, and consumer rights management to ensure adherence to state-specific requirements.
With a deep understanding of organizations’ challenges when collecting and processing personal information, we help clients maintain compliance, reducing the risk of enforcement actions and fostering trust between our clients and their customers. Absent a comprehensive federal privacy law, states have adopted their own with different and conflicting standards.
Full Spectrum Services
- Analysis and interpretation of state privacy laws, such as CCPA, VCDPA, and other emerging state regulations;
- Development of tailored compliance strategies and operational adjustments to meet state-specific requirements;
- Preparing privacy notices and other privacy-related disclosures;
- Guidance on consumer rights management, including data access, deletion, and portability requests;
- Support for data mapping and inventory exercises to identify state-specific obligations;
- Advice on cross-border data transfers and applicability of state privacy laws to international businesses;
- Monitoring and analysis of emerging state privacy legislation and regulatory changes.
- In Case You Missed It by Susan Duarte
ICYMI: Issue #2: September 2025
Prefer to listen instead? We’ve made an audio version of this newsletter so you can catch the highlights on the go: Letter from the...
- Firm News and Events
Webinar: FCC Form 499 & the De Minimis Exception: What Every Service Provider Needs to Know
REGISTER NOW Most de minimis-eligible service providers don’t think they have a compliance problem — which is exactly the problem. They assume their underlying carrier...
- Client Advisory
California Privacy Protection Agency Imposes a $1.35 Million Fine on Tractor Supply Company for CCPA Violations
Prefer to listen while you’re on the go? We’ve created an audio version of this Client Advisory that you can play anytime, anywhere. ...
- Client Advisory
Multi-State Privacy Enforcement Sweep Targets Global Privacy Control Noncompliance: California, Colorado, and Connecticut Launch Joint Investigation
Prefer to listen while you’re on the go? We’ve created an audio version of this Client Advisory that you can play anytime, anywhere. ...
- Client Advisory
Minnesota Enacts Landmark Consumer Data Privacy Act: New Compliance Duties for Businesses Began July 31, 2025
On May 24, 2024, Minnesota Governor Tim Walz signed the Minnesota Consumer Data Privacy Act (MCDPA) into law, establishing Minnesota as the 18th U.S. state...
- Client Advisory
California DOJ Announces $1.55 Million CCPA Settlement with Healthline Over Unauthorized Sharing of Health Data
On July 1, 2025, California Attorney General Rob Bonta announced the largest California Consumer Privacy Act (CCPA) settlement to date: a $1.55 million civil penalty...
- Client Advisory
State Data Privacy Update: Oregon Bans Sale of Geolocation and Children’s Data; Arkansas Extends COPPA-Like Protections to Teens
Oregon Bans Sale of Geolocation and Children’s Data On June 2, 2025, Oregon Governor Tina Kotek signed House Bill 2008 (HB 2008), amending the Oregon...
- Client Advisory
Texas Secures Historic $1.375 Billion Data Privacy Settlement with Google
Texas Attorney General Ken Paxton has reached a landmark $1.375 billion settlement with Google to resolve allegations that the tech giant unlawfully tracked and collected...
- Client Advisory
DOJ Data Security Program Rule Restricting Transfers of Bulk U.S. Sensitive Personal Data: 60 Days Remain to the DOJ’s Compliance Deadline
The U.S. Department of Justice (DOJ) issued a final rule implementing Executive Order 14117 (“Data Security Program” or “DSP”). As detailed in our previous advisory,...
- Client Advisory
California and Texas Double Down on Data Privacy Law Enforcement
The privacy enforcement landscape continues to evolve rapidly, with recent actions by California and Texas authorities highlighting the increasing enforcement of state privacy laws. These...
- Client Advisory
State Privacy Law Advisory: Enforcement Priorities and Best Practices
Representatives from the California, Oregon, and Colorado Attorney General (AG) offices participated on a panel last week at the IAPP’s Global Privacy Law conference in...
- Client Advisory
California Privacy Protection Agency Fines Honda for Demanding Verification Information from Consumers Opting Out of Data Sale or Sharing
In an increasingly digital world, consumer privacy has become a paramount concern, leading to the establishment of laws like the California Consumer Privacy Act (CCPA)....
- Client Advisory
CPNI Annual Certification Due March 1, 2025 – Ensure Compliance to Avoid FCC Penalties
The Federal Communications Commission (FCC) requires all telecommunications carriers and interconnected VoIP providers to file their Annual Customer Proprietary Network Information (CPNI) Certifications no later...
- Client Advisory
Texas Attorney General Sues Allstate Corporation in First Privacy Enforcement Lawsuit Alleging Texas Data Privacy Security Act, Texas Broker Law, Texas Insurance Code Violations
The Texas Attorney General (AG), Ken Paxton, filed a complaint in the District Court of Montgomery County against Allstate Corporation (Allstate), alleging that the company...
- Client Advisory
Regulatory Crackdown on Sensitive Data Sharing: CFPB Proposes Rule to Regulate Data Brokers; FTC Sues Data Analytics Co’s for Allegedly Selling Location Data Tracking Consumers to Sensitive Sites
Yesterday, we saw two regulators take action to enhance consumer privacy, reflecting a growing government focus on protecting personal data and consumer rights. CFPB Proposes...