Photo of Lissette Payne

Lissette counsels clients on the evolving legal landscape of privacy and data security. Her practice focuses on providing strategic advice related to data compliance and incident response issues.

On April 28, the Connecticut House passed Senate Bill 6, an act concerning personal data privacy and online monitoring (SB 6 or Connecticut Act). The Senate unanimously passed SB 6 on April 20, and is now currently under consideration by Governor Ned Lamont. If the bill becomes law, it will go into effect on

On March 24, Governor Spencer J. Cox signed the Utah Consumer Privacy Act (UCPA), making Utah the fourth state in the country to adopt a comprehensive privacy law. The UCPA is set to take effect on December 31, 2023, and this law’s substantive requirements closely mirror the Virginia Consumer Data Protection Act (VCDPA). The UCPA

Introduction

As of March 22, 11 states have wrapped up their 2022 legislative sessions. In these early sessions, privacy legislation was considered in seven of the 11 states that have completed their 2022 sessions, namely Florida, Washington, Indiana, Virginia (amendments to enacted regime), West Virginia, Wisconsin, and Utah. Privacy bills passed out of at least

On February 18, California lawmakers proposed two bills that further extend the existing employee and business-to-business (B2B) data exemptions included in the California Consumer Privacy Act and the California Privacy Rights Act (CPRA). AB2891 would extend the exemptions expiration date until January 01, 2026, while AB2871 would permanently codify these exemptions.

These exemptions were included

On January 28, following the European Commission’s June 4, 2021 issuance of modified standard contractual clauses (SCCs), the United Kingdom’s (U.K.) secretary of state for digital, culture, media, and sport, presented the U.K. Parliament with two new mechanisms to effectuate cross-border transfers of data: (1) the International Data Transfer Agreement (the IDTA) and (2)