Worldwide: Data Protection

Connecticut continues to tinker with its comprehensive privacy law—the Connecticut Data Privacy Act (CDPA).

The proliferation of AI technologies is driving transformative change across industries, unlocking new commercial possibilities while presenting complex legal challenges.

On July 24, 2025, the California Privacy Protection Agency (CPPA) approved a sweeping set of amendments to the California Consumer Privacy Act (CCPA) regulations.

Last August, Brazil's Data Protection Agency—Autoridade Nacional de Proteção de Dados (ANPD)—issued the International Transfer Regulations, including the Standard Contractual Clauses (SCCs) template.

On July 18, 2025, the U.S. Federal Trade Commission ("FTC") indicated in a press release that it is seeking public comment on a request from Scott Zuckerman, the CEO of a company that marketed "stalkerware" apps, to vacate or modify the FTC's order banning monitoring products and services and requiring implementation of an information-security program.

With back-to-school quickly approaching, New York state Gov. Kathy Hochul's smartphone ban, included in her "distraction-free school" policy approved as part of the New York State...

During a Board Meeting on July 24, 2025, the California Privacy Protection Agency (CPPA) unanimously approved the long-awaited final text of its second rulemaking package, implementing a broad swath of new requirements...

In June 2025, California Attorney General Rob Bonta filed a proposed settlement with Healthline, a health information website, for its handling of personal information under the California Consumer Privacy Act (CCPA).

On June 23, significant amendments (Amendments) to the Children's Online Privacy Protection Act (COPPA) Rule (COPPA Rule) became effective, which increase obligations on many operators of websites and online services.