The California Privacy Protection Agency (“CPPA” or “Agency”) staff has released a package of proposed amendments to the California Consumer Privacy Act (“CCPA”) regulations governing opt-out preference signals (“OOPS”). The proposal would expressly identify the Global Privacy Control (“GPC”) as an example of a signal that businesses selling or sharing
Continue Reading CPPA Proposes Amendments to Opt-Out Preference Signal RegulationsState Privacy
Algorithmic Pricing Laws: A Growing State Patchwork and What Businesses Should Know
Posted in Consumer Protection, State Privacy
Lawmakers and regulators at both the state and federal levels are increasingly focusing on consumer protection considerations relating to algorithmic pricing. On September 25, the Federal Trade Commission (“FTC”) closed the comment period on a proposed enforcement policy statement on personalized pricing. The proposed statement is the FTC’s preliminary view…
Continue Reading Algorithmic Pricing Laws: A Growing State Patchwork and What Businesses Should KnowCalifornia Enacts New Privacy Legislation Affecting Consumer Rights, Data Brokers, and Website Tracking Litigation
By Jayne Ponder, Lindsey Tonsager & Bryan Ramirez on
Posted in State Privacy
In the final days of California’s 2026 legislative session, California Governor Gavin Newsom signed a series of privacy legislation spanning consumer privacy rights, data broker activities, digital platform design, and civil remedies for website privacy litigation. Governor Newsom also vetoed a privacy measure that would have imposed broad restrictions on…
Continue Reading California Enacts New Privacy Legislation Affecting Consumer Rights, Data Brokers, and Website Tracking LitigationCalifornia Governor Signs SB 690, Eliminating Private Website-Based CIPA Pen Register Claims and Calling for Broader CIPA Reform
Posted in State Privacy
On September 30, Governor Gavin Newsom signed SB 690, a significant new law aimed at curbing the wave of lawsuits and demand letters asserting “pen register” claims under the California Invasion of Privacy Act (“CIPA”). The legislation eliminates the private right of action for pen register and trap-and-trace claims arising…
Continue Reading California Governor Signs SB 690, Eliminating Private Website-Based CIPA Pen Register Claims and Calling for Broader CIPA ReformNew California AI Employment Laws: Key Requirements for Employers
Posted in State Privacy
On September 30, California Governor Gavin Newsom signed three laws that will regulate the use of AI in the employment context, starting in the new year. Below, we briefly summarize these developments, which we discuss in greater detail in our prior blog post. These laws join an existing body…
Continue Reading New California AI Employment Laws: Key Requirements for EmployersCalifornia Enacts Several Minors’ Privacy and Safety Laws
By Lindsey Tonsager, Jenna Zhang & Irene Kim on
Posted in Children's Privacy, State Privacy
Recently, California Governor Gavin Newsom signed a sweeping set of laws related to minors’ privacy and safety, including new laws that restrict covered platforms from providing certain features to users under 16, impose a duty of care on social media platforms, revise the state’s Age-Appropriate Design Code, modify the state’s age-assurance requirements governing age signals, and impose safety requirements on AI chatbots. This blog summarizes the key takeaways from these new laws.
Continue Reading California Enacts Several Minors’ Privacy and Safety LawsCalifornia Legislature Advances AI Employment Bills
By Lindsey Tonsager, Carolyn Rashby & Bryan Ramirez on
Posted in State Privacy
At the end of August, the California legislature passed three bills that would regulate the use of AI in the employment context. These bills are now on Governor Newsom’s desk, and he has until September 30 to sign or veto. Below is a summary of the three bills.
Continue Reading California Legislature Advances AI Employment BillsCalifornia Legislature Passes CIPA Pen Register Reform Bill and Sends It to Governor
Posted in State Privacy
On August 28, 2026, the California Legislature passed SB 690, a significant bill aimed at curbing the flood of demand letters and lawsuits asserting “pen register” claims under the California Invasion of Privacy Act (“CIPA”). If enacted, the bill would eliminate the private right of action for website-based pen register claims and could affect many pending lawsuits filed since January 1, 2025.
Continue Reading California Legislature Passes CIPA Pen Register Reform Bill and Sends It to GovernorADMT Law Round-Up: What Employers Need to Know About Recent ADMT Laws
Posted in State Privacy
Employers increasingly rely on automated tools to help make decisions concerning hiring, promotion, discipline, and termination. In response, state legislatures and agencies have begun to regulate uses of these technologies, often referred to as automated decision-making technology (“ADMT”). These laws generally require entities that deploy ADMT in the employment context…
Continue Reading ADMT Law Round-Up: What Employers Need to Know About Recent ADMT LawsNew Jersey Enacts Ban on Surveillance Pricing
By Lindsey Tonsager, Laura Kim, Jayne Ponder & Rosie Moss on
Posted in State Privacy
On July 23, 2026, New Jersey Governor Mikie Sherrill signed A4085 (the Fair Price Protection Act) into law, which prohibits companies from charging consumers different prices for groceries based on their personal data. New Jersey will join New York, Connecticut, and Maryland in imposing prohibitions and requirements on the use…
Continue Reading New Jersey Enacts Ban on Surveillance Pricing