Exterro's Legal GRC Breakdown

Get your daily dose of news, best practices, and technology from Exterro's e-discovery, privacy, and digital forensics experts here.

Florida Consumer Privacy Bill Introduced

Created on June 22, 2020


Demand Generation Manager, Exterro

Why This Privacy Law is Important: The state of Florida introduced new privacy bills in both the Senate (SB 1620) and House of Representatives (HB 963). Who it Applies To: This bill applies to those who own or operate a website or online service for commercial purposes, collects and maintains covered information from consumers who reside in Florida and use or visit the website or online service, and purposefully directs activities toward Florida or a Florida resident. What is Covered: This proposed bill allows consumers to review and correct their personal information,creates... Read More

Proposed Maine Privacy Law

Created on June 22, 2020


Demand Generation Manager, Exterro

Why This Privacy Law is Important: Maine will become one more state that is regulating online data with the passing of “An Act to Protect the Privacy of Online Customer Information.” More narrow in its focus than CCPA, this bill focuses entirely on user data collected by internet service providers. Overview/Status of Bill: The proposed bill states that internet service providers “may not use, disclose, sell, or permit access to customer personal information,” without receiving affirmative consent from the customer. This new legislation also gives consumers the right to revoke consent for... Read More

New York Proposed Privacy Law

Created on June 22, 2020


Demand Generation Manager, Exterro

Why This Privacy Law is Important: With many of the same requirements as the California Consumer Privacy Act, the New York Privacy Act would give consumers additional rights to sue companies directly over violations. Overview/Status of Bill: The New York Privacy Act (Senate Bill S5642) was introduced in May 2019 and is currently in Senate Committee. If passed and signed into law, the enacted NY Privacy Act will require companies to disclose their methods of de-identifying personal information, to place special safeguards around data sharing and to allow consumers to obtain the... Read More

Privacy Law Update: New Mexico's Proposed Privacy Law

Created on June 9, 2020


Demand Generation Manager, Exterro

Why This Privacy Law is Important: Similar to the CCPA, this proposed privacy law would grant citizens of New Mexico the right of access to delete information and the right to opt of out of the sales of personal information. Overview/Status of Bill: The proposed bill has died, however, there still remains an appetite to pass legislation in the near future. Need to Know Information: Who it Applies To: (1) Organizations who operate a website or has an online commercial service and (2) collect consumer personal data who are located in New... Read More

Washington State Proposed Privacy Law

Created on June 5, 2020


Demand Generation Manager, Exterro

Why This Privacy Law is Important: If passed, the Washington Privacy Act would enact a comprehensive data protection framework for Washington residents that includes individual rights that mirror and go beyond the rights in the California Consumer Privacy Act (CCPA), as well as a range of other obligations on businesses that do not yet exist in any U.S. privacy law.” Included in the law is a regulation of facial-recognition technology. The WPA would require affirmative, opt in consent as the default requirement for facial recognition. Overview/Status of Bill: It is an updated... Read More

Arizona Proposed Privacy Law

Created on June 5, 2020


Demand Generation Manager, Exterro

Why This Privacy Law is Important: Although more narrow than the CCPA, HB 2729 shows that Arizona, like many other states, has an interest in passing privacy legislation. Overview/Status of Bill: Similar to CCPA, HB 2729 would give Arizona residents additional rights and control over how their personal data is being collected and used. Under HB 2729 Arizona residents would be able to request what personal data has been collected and receive a copy of that data. Residents may also ask that companies correct or delete their personal data. Need to Know... Read More

Preparing for a New Era of Third-Party Data Management

Created on May 28, 2020


Demand Generation Manager, Exterro

As legal professionals at all levels—in-house corporate attorneys and outside counsel alike—assist their organizations and clients in complying with substantial, global changes to the way personal data is regulated, there is one area that is sometimes overlooked: third-party data ownership. By some estimates, organizations are more at risk of an indirect data breach than a direct one. A Ponemon Institute study found that 61 percent of companies surveyed found that they had experienced a data breach due to lax third-party cybersecurity. What’s worse: 66 percent of the companies that were breached didn’t... Read More