Book a consultation

Fey LLC

Insights

Briefings on privacy, cybersecurity, AI governance, and cross-border data transfers.

State Privacy Laws

Winter is Coming: 10 Steps Organizations Should be Taking Now to Meet Their Obligations Under Expansive, New Privacy Laws

By: Laura Clark Fey,* Privacy Law Specialist (IAPP), Fey LLC, and Maddie Level,** Fey LLC. Five state comprehensive privacy laws will become fully effective in 2023. The first two, the California Privacy Rights Act, which significantly updates the current California Consumer Privacy Act, and the Virginia Consumer Data Protection Act, will become fully effective on…

Read insight — Winter is Coming: 10 Steps Organizations Should be Taking Now to Meet Their Obligations Under Expansive, New Privacy Laws
CCPA

California Attorney General Settles with Sephora for Alleged CCPA Violations

Overview of Enforcement Initiatives On August 24, 2022, the California Attorney General (“AG”) announced the first California Consumer Privacy Act (“CCPA”) public enforcement action: a settlement with multinational beauty retailer Sephora, Inc. (“Sephora”) for alleged CCPA violations. The same day, the AG also released a new batch of enforcement case examples and used striking…

Read insight — California Attorney General Settles with Sephora for Alleged CCPA Violations
Data Privacy

New Jersey Requires Employers to Provide Notice of Fleet Vehicle Tracking

A new notice obligation for New Jersey employers takes effect next week. As of April 18, 2022, New Jersey employers will be required to give written notice to all employees before using tracking devices in vehicles operated by employees. More than a dozen states have enacted regulations concerning employer use of tracking devices in employee vehicles. However,…

Read insight — New Jersey Requires Employers to Provide Notice of Fleet Vehicle Tracking
Cross-Border Data Transfers

European Data Protection Board Guidelines Clarify when Processing is an International Transfer under the GDPR

The European Data Protection Board (“EDPB”) has started a public consultation for new Guidelines. Although the Guidelines will not be legally binding, they do provide needed guidance regarding the interaction between GDPR art. 3 (addressing territorial scope of the GDPR) and chapter 5 (addressing transfers of personal data to third countries or international organizations). The version of the Guidelines that is…

Read insight — European Data Protection Board Guidelines Clarify when Processing is an International Transfer under the GDPR