Starting in 2023, several new privacy laws go into effect in California, Virginia, Colorado, Connecticut, and Utah. These laws apply not only to businesses based in those states but to any business that meets certain thresholds and collects, stores, or processes personal information from any residents in those states. Penalties for non-compliance with these laws can be steep.
California, which already has the most comprehensive privacy laws in the United States, has passed a new law, the California Privacy Rights Act (“CPRA”) that amends the existing California Consumer Privacy Act. Some of the material changes made by the CPRA include:
It is important for any business that collects personal data to ascertain whether it meets the thresholds that would mandate compliance with these new laws and then to assure such compliance from both a legal as well as technical standpoint. In addition, these laws apply not only to ecommerce businesses but to any business that collects personal information, even if only by having a “contact us” link on a website and collecting emails. The laws also apply to any personal information collected off-line.
Please contact the Olshan attorney with whom you regularly work or the attorney listed below if you would like to discuss further or have questions with respect to this matter.
Mary L. Grieco
Olshan Frome Wolosky LLP
+1 212 451 2389
Tel: +1 212 451 2258 Email: firstname.lastname@example.org http://www.olshanlaw.com/