Press "Enter" to skip to content

Posts published in “Data Privacy and Security”

In No Time At All, Virginia Consumer Data Protection Act Becomes Law

On March 2, Virginia Gov. Ralph Northam signed into law the Virginia Consumer Data Protection Act.  House Bill 2307 was introduced Jan. 20, 2021, and a substitute was passed in the House just nine days later.  Its companion, Senate Bill 1392, followed a similar trajectory and on Feb. 19, each chamber concurred in the other’s substitute.  The Act will become effective Jan. 1, 2023. 

Consumer Data Rulemaking Underway at CFPB: Here Are Four Things Your Company Should Know Plus a Webinar

The Consumer Financial Protection Bureau released its Advance Notice of Proposed Rulemaking (ANPR) on Oct. 22, seeking comment on 46 questions in nine categories surrounding consumer access to financial information under section 1033 of the 2010 Dodd-Frank Act (12 U.S.C. § 5533).

California Enacts HIPAA-Conforming Amendments to CCPA; Extends B2B and Employment Exemptions  

Assembly Bill 713 was approved by California Gov. Gavin Newsom on Sept. 25, 2020, at which time its provisions went into effect.  The legislation amends the California Consumer Privacy Act (CCPA) in part by addressing certain issues related to de-identified patient information.

11th Cir. Holds Obtaining Consumer Report for Verification and Eligibility Is a Permissible Purpose

In a case of first impression for the U.S. Court of Appeals for the Eleventh Circuit, the Court joined the Sixth Circuit in holding that obtaining a consumer report to verify a consumer’s identity and eligibility for a service is a “legitimate business need” and therefore a “permissible purpose” under the Fair Credit Reporting Act (FCRA).

Calif. App. Court (4th Dist) Rejects Jurisdictional Challenge in Website Accessibility Case

In an action challenging the accessibility of a website to blind and visually impaired people, the Court of Appeals of the State of California, Fourth Appellate District, recently held that a California court may exercise specific jurisdiction over a Georgia LLC where the LLC purposefully availed itself of the privilege of conducting business in California by sending catalogs and selling over $300,000 worth of goods to California residents.