Privacy Law and Privacy Regulations

Louisiana becomes the 22nd state to enact comprehensive privacy legislation with the Louisiana Data Privacy Act, introducing unique applicability thresholds and enforcement mechanisms.

California's Privacy Protection Agency has introduced mandatory risk assessment and cybersecurity audit requirements that demand immediate attention from qualifying businesses. With the first submission deadlines approaching in 2028 but covering activities beginning in 2026, companies face a compressed timeline to inventory sensitive data processing, remediate compliance gaps, and prepare regulator-facing certifications that could invite scrutiny if poorly framed.

A California federal court recently dismissed wiretapping claims against AutoNation, ruling that the defendant lacked sufficient connection to California to establish personal jurisdiction.