Privacy Law and Privacy Regulations

Federal authorities have begun enforcing the TAKE IT DOWN Act's notice-and-takedown obligations for nonconsensual intimate imagery, but significant compliance questions remain unanswered for platforms. Companies hosting user-generated content face uncertainty about which services qualify as covered platforms, what review standards apply before removing content, and how to navigate the statute's 48-hour deadline while evaluating complex factual disputes involving consent, AI-generated imagery, and protected

Senate Bill 690 proposes significant amendments to California's Invasion of Privacy Act (CIPA), specifically targeting the law's application to website tracking technologies and pen register/trap and trace devices. The legislation aims to curtail what sponsors describe as abusive litigation by exempting commercial website tracking tools from CIPA's reach and eliminating private rights of action for certain violations. With a two-year retroactive provision, the bill represents a major shift in how California

New Jersey has enacted groundbreaking legislation that prohibits the sale of sensitive consumer data and establishes a comprehensive public registry for data brokers and data collectors. The law introduces strict civil penalties of $50,000 per record for violations and creates a novel "data collector" category that extends regulatory reach to companies with direct consumer relationships who share data with brokers. With tiered annual registration fees reaching up to $1.5 million and immediate enforcement pr