The actual cost to a company from a privacy enforcement action could be many times higher than the regulator's fine, Clarip CEO Andy Sambandam said in an interview. Privacy has become a quickly rising concern for companies amid a growing number of privacy laws and state enforcement actions, he told Privacy Daily.
State privacy investigators are in constant contact about potential enforcement action that goes beyond the recently launched bipartisan consortium (see 2504160037), privacy officials from California, Colorado and Texas said.
A bipartisan group of senators in Michigan introduced a comprehensive privacy bill on Thursday in an effort toward establishing privacy rights for the state's consumers. If enacted, the state will join the 20 others who have comprehensive privacy laws, though six won’t take effect until later in 2025 or in 2026 (see 2501060066).
As the California Privacy Protection Agency ramps up enforcement, it will “telegraph” how it plans to enforce the state’s privacy law and will act in ways that aren’t far from what other states would do, CPPA Executive Director Tom Kemp said in a wide-ranging interview Wednesday with Privacy Daily. In addition, Kemp panned Congress’ proposed 10-year moratorium on state AI regulation while saying the agency is being careful about what aspects of AI may come under its jurisdiction.
While a change in opinion from notice-and-choice data minimization requirements is highlighted by several recent laws, whether there is a true paradigm shift cannot be understood until they go into effect and become enforceable, said the Future of Privacy Forum (FPF) in a report Thursday.
The California Senate passed a bill that requires insurance licensees and their third-party service providers to adhere to a comprehensive privacy framework. The vote was 28-10 on Wednesday.
Oregon will add location and child data restrictions to its comprehensive privacy law. Gov. Tina Kotek (D) signed HB-2008 on Tuesday, days after signing another amendment that added automotive rules to the Oregon Consumer Privacy Act.
Privacy Daily is providing readers with the top stories from last week, in case you missed them. All articles can be found by searching the title or clicking on the hyperlinked reference number.
Oklahoma legislators wrapped their regular session Friday without agreeing on a comprehensive privacy bill (SB-546). The Senate unanimously passed the bill on March 26, and it cleared a House committee on April 9, but got no further (see 2504250058). Sponsor Sen. Brent Howard (R) and co-sponsor Rep. Josh West (R) didn’t comment Monday. No state has passed a comprehensive privacy law in 2025, though such bills remain pending in multiple states, including Maine, Massachusetts and Pennsylvania.
New Jersey draft rules for implementing the state’s comprehensive privacy law appeared Monday in the New Jersey Register, as expected (see 2505280058). Comments are due Aug. 1, said the New Jersey Division of Consumer Affairs document (57 N.J.R. 1101(a)).