Feb 152022

CPRA Law + Tech Series

Sheri Porath Rockwell
, , , , ,

WEBINAR

Sidley Senior Managing Associate Sheri Porath Rockwell (Chair, California Lawyers Association Privacy Law Section) and Stacey Gray, Director of Legislative Research & Analysis at the Future of Privacy Forum, will be leading a multi-session webinar series, CPRA Law + Tech, that focuses on the technologies and data practices at the heart of emerging state privacy legislation, including the California Privacy Rights Act (CPRA). Sheri and Stacey will moderate each session and each will feature subject-matter experts who will provide lawyer-friendly explanations about technologies that lawyers and business people will need to understand in order to comply with new and emerging data privacy laws. The series is co-hosted by the California Lawyers Association’s Privacy Law Section and the Future of Privacy Forum.

The series begins Friday, February 18th at noon PT / 3 pm ET and repeats every Friday at the same time. In the initial kick-off session, Sheri will interview California Privacy Protection Agency Board Chair, Jennifer Urban about the status of CPRA rulemaking and her thoughts on the intersection of law and technology in data privacy legislation. The initial session will also feature an overview of CPRA and other state data privacy laws, with a focus on where technologies appear in these laws and areas in which compliance will necessitate an understanding of those technologies. Sessions that follow the February 18th kickoff will include discussions with subject matter experts focusing on specific technologies including the following:

  • Sensitive Data: Health Conditions, Demographics and Inferences (February 25)
  • Basics of Online Advertising (March 4)
  • “Dark Patterns” and Manipulative Design (March 11)
  • Universal Opt Outs and Global Privacy Controls (March 18)
  • Automated Decisionmaking (TBD)

This post is as of the posting date stated above. Sidley Austin LLP assumes no duty to update this post or post about any subsequent developments having a bearing on this post.

Sheri Porath Rockwell

Century City

sheri.rockwell@sidley.com

You might also like
Regulatory Update: National Association of Insurance Commissioners Spring 2024 National Meeting

The National Association of Insurance Commissioners (NAIC) held its Spring 2024 National Meeting (Spring Meeting) March 15 through 18, 2024. This Sidley Update summarizes the highlights from this meeting in addition to interim meetings held in lieu of taking place during the Spring Meeting. Highlights include proposed updates to the regulatory review process for affiliated investment management agreements, continued discussion of considerations related to private equity ownership of insurers, and continued development of accounting principles and investment limitations related to certain types of bonds and structured securities.

New Hampshire’s Comprehensive Data Privacy Legislation

As the state boasting the headquarters of the International Association of Privacy Professionals, many have been watching the development of the New Hampshire comprehensive consumer data privacy law with great interest, wondering if it may be a practical model for the nation. On March 6, 2024, Governor Chris Sununu signed SB 255-FN (“the Act”) into law. In some respects, New Hampshire’s privacy law is comparatively more moderate than some other state laws. For instance, the New Hampshire Secretary of State’s rulemaking authority under the Act is currently limited to establishing requirements for privacy notices. This narrow extension of rulemaking authority is a divergence from the broad rulemaking authority granted by California, Colorado, and other states. The New Hampshire law does not allow for a private right of action. There is a right to cure alleged violations through the first year the law is in force; afterwards, the opportunity to cure is left to the Attorney General’s discretion. The legislation will take effect on January 1, 2025.

EU Formally Adopts World’s First AI Law

On March 13, 2024, the European Parliament formally adopted the EU Artificial Intelligence Act (“AI Act”) with a large majority of 523-46 votes in favor of the legislation. The AI Act is the world’s first horizontal and standalone law governing AI, and a landmark piece of legislation for the EU.