Given a new wave of state-level data privacy laws, companies that collect customer information should consider whether updates are required. California was the first state to pass a comprehensive data privacy act, and its statutes are the most unique relative to the data privacy laws of other states. California Specials: Data Collection, Retention, and Use Limitations & a Data Protection AuthorityCalifornia was the first state to pass a comprehensive consumer data privacy law and its consumer data privacy laws now go further, and are more onerous, than the laws of other states. With the passage of the California Privacy Rights Act (CPRA), which amends the California Consumer Privacy Act (CCPA) and goes into effect Jan. 1, 2023, California authorized the creation of the California Privacy Protection Agency. As a consequence of this wave of state data privacy laws, companies now face an additional layer of exposure to data privacy lawsuits.

Source: New York Times November 06, 2023 19:55 UTC