On June 23, Congressman Patrick McHenry released a discussion draft of new legislation to modernize federal financial data privacy law. The draft legislation would amend and build on the Gramm-Leach-Bliley Act (“GLBA”). The draft includes notable provisions on consumer rights, data minimization, and disclosures. It also updates the definition of
Continue Reading Congressman McHenry Releases Discussion Draft of Financial Data Privacy Bill
California Privacy Protection Agency Votes To Initiate Formal Rulemaking Process
During its June 8, 2022 board meeting, the California Privacy Protection Agency (CPPA) voted to initiate the formal California Privacy Rights Act (CPRA) rulemaking process. The draft rules are expected to be very similar to those previously published in advance of the Board meeting, although Deputy Attorney General Lisa Kim noted during the meeting that minor errors may be updated prior to the formal submission of the draft rules. The current draft rules and Initial Statement of Reasons (ISOR) continue to be accessible on the CPPA website.Continue Reading California Privacy Protection Agency Votes To Initiate Formal Rulemaking Process
California Privacy Protection Agency Staff Posts Draft Rules Implementing the CPRA
In advance of the June 8, 2022 board meeting, the California Privacy Protection Agency (CPPA) staff has posted draft rules implementing the California Privacy Rights Act (CPRA). The draft regulations keep much of the pre-existing California Consumer Privacy Act (CCPA) regulations intact, but modify certain provisions and propose new regulations.
Continue Reading California Privacy Protection Agency Staff Posts Draft Rules Implementing the CPRACalifornia Privacy Protection Agency Holds Informational Hearings
The California Privacy Protection Agency (“CPPA”) held two informational hearings on March 29, 2022 and March 30, 2022, in anticipation of its upcoming rulemaking later this year. While the CPPA Board was present throughout the hearings, its members did not present any views as part of the program. The speakers covered the following topics of note:
Continue Reading California Privacy Protection Agency Holds Informational Hearings
Financial Institution Reaches Settlement in Call Recording Class Action
A financial institution and its vendor recently reached a $50 million settlement in a class action lawsuit for violating the call recording provision of the California Invasion of Privacy Act (“CIPA”). The settlement is nearly three times the size of the largest previous settlement under CIPA, which provides for damages of $5,000 per violation.
Continue Reading Financial Institution Reaches Settlement in Call Recording Class Action
California Privacy Protection Agency Clarifies Timing of Forthcoming CPRA Regulations
Last week the California Privacy Protection Agency (“CPPA”) held its sixth Board meeting and first meeting of 2022. The meeting notably included a discussion of the expected timing for issuing final regulations implementing the California Privacy Rights Act.
Continue Reading California Privacy Protection Agency Clarifies Timing of Forthcoming CPRA Regulations