This article was originally published in Bloomberg Law on July 9, 2018.

On June 22, 2018, the United States Supreme Court appeared to establish a new standard for privacy rights when its decision in Carpenter v. United States, 2018 BL 222220 (2018), held that the government’s acquisition

On May 28, 2018, the Vermont legislature enacted the most stringent automatic renewal statute in the country. While similar to some state laws that govern auto-renewal contracts by requiring sellers to clearly and conspicuously disclose the material terms of the offer, obtain express consumer consent, provide an easy way to

On February 21, 2018, the Securities and Exchange Commission (SEC) “voted unanimously to approve a statement and interpretive guidance to assist public companies in preparing disclosures about cybersecurity risks and incidents.”[1] The SEC did not wait long for the public to absorb this guidance. On April 24, 2018, the

On June 25, 2018, the New York Department of Financial Services (“NYDFS”) issued a final regulation (the “Regulation”) requiring consumer reporting agencies with “significant operations” in New York to (1) register with NYDFS for the first time and (2) comply with the NYDFS’s cybersecurity regulation. Under the Regulation, consumer reporting

California enacted the nation’s most extensive consumer privacy law on Thursday after only a week of legislative debate. The California Consumer Privacy Act of 2018 (“CCPA”) was passed quickly to prevent a privacy ballot initiative and creates extensive notice, opt-out/opt-in, access, and erasure rights for consumers vis-à-vis businesses that collect