DOJ rules blocking large-scale transfers of Americans’ personal data to entities in hostile nations will apply to data used to “achieve business purposes,” the Cybersecurity and Infrastructure Security Agency said Monday. The security requirements were included in a notice for Wednesday's Federal Register.
Vermont and Washington state will soon introduce comprehensive privacy bills, while Connecticut will have a bill that would add data minimization rules and make other changes to its 2022 law, legislators told Privacy Daily ahead of sessions starting this month. Also, legislators in Oklahoma and South Carolina prefiled bills last month for the 2025 legislative sessions. Additional privacy bills are expected this year in several other states, said privacy lawyers and consumer advocates in other interviews.