The new year is off to a quick start. February looms. Businesses are beginning to settle into 2026, and some trends (or at least outlines of such) are beginning to emerge. Businesses are digesting the AI and privacy bills that were signed into law last Fall. California Invasion of Privacy Act (CIPA) litigation shows no
Privacy
From the Kitchen to Compliance: Why Your Turkey and Your Privacy Policy Need Fresh Dates
By Colleen Dewhirst, Kenny Gutierrez & Susan Kimble on
Posted in Privacy
As you slowly emerge from your tryptophan coma next week, and realize that the first of December is upon us, many complex legal tasks may seem too daunting to face. Luckily, the privacy team at Stoel Rives has developed a plan to keep your privacy program running from the comfort of your post-Thanksgiving stretch pants.…
Diving into Data: Managing the Legal Risks of a Data-Driven Economy
Data is fueling innovation like never before. From AI development to strategic decision-making, high-quality data is a powerful business asset. However, it also comes with significant legal considerations. Privacy laws, intellectual property rights, and ethical obligations are all evolving quickly, and businesses must stay ahead of the curve.
We’ve written about three areas companies should…
Navigating Data Broker Privacy Compliance: Top 5 Considerations
By Kenny Gutierrez & John Pavolotsky on
Posted in Data Protection, Privacy
- Broad Definition of Data Brokers – Many businesses may unknowingly qualify as data brokers under laws
A Deeper Dive into the Proposed Modifications to the HIPAA Security Rule
By John Pavolotsky & Jon Washburn on
In our earlier post, we wrote:
“Through December 20, 2024, 575 security incidents involving unsecured protected health information affecting 500 or more individuals had been reported to Health and Human Services. Through the same date in 2023, 265 incidents had been reported. On December 27, 2024, the Office of Civil Rights at HHS issued…
Data Privacy and Cybersecurity Look Ahead: First Half of 2025
By John Pavolotsky & Kenny Gutierrez on
Posted in Cybersecurity, Data Protection, ePrivacy, EU, Laws / Regulations, Privacy, Regulators, Security
Privacy and cybersecurity are incredibly dynamic, and in 2025 we have committed ourselves to a look ahead post every six months, with the next one in July 2025. The new Congress convened on January 3, 2025, and a new administration starts on January 20. Most state legislatures reconvene in early-to-mid January. If you track privacy…
Filling the Void: 2024 State Privacy Legislation
By Elena Miller & Jacob Goldberg on
Posted in Laws / Regulations, Privacy
The prospects for and the effect of a comprehensive federal data privacy act remain uncertain. There are no indications that any comprehensive federal data privacy act will be considered by Congress this year, and questions and debates remain around whether federal privacy law will preempt state legislation or whether it will function as a minimum…
Navigating Workplace AI Regulations: Labor and Employment Law in the Age of Algorithmic Accountability
By Stoel Rives Attorney on
Artificial Intelligence (AI) tools are becoming commonplace in workplace. According to Equal Employment Opportunity Commission (EEOC) Chair Charlotte Burrows, “as many as 83 percent of employers and up to 99 percent of Fortune 500 companies now use some form of automated tool to screen or rank candidates for hire.”
Just as the use of AI…
Children’s Online Privacy Regulations Develop, Amidst Challenges
By Jacob Goldberg on
“More needs to be done to create a safe online space for children to learn, explore, and play.”
This was the unanimous finding of the California legislature in 2022, and, since that time, other stakeholders have agreed. Voters, parents, the President, and legislators have all suggested that something will, and needs…
The Confidentiality (or not) of Cyber-Forensics in a Data Breach
By Nathan Morales on
Data breaches are on the rise. So are the lawsuits that follow. This has led to an environment where cyber-forensics service providers are more important than ever. Clients seeking these services, however, often do so after becoming the unwilling victims of a data breach. And those circumstances create uncertainty for protecting — either as attorney-client…
Just Around the Corner: The Utah Consumer Privacy Act (“UCPA”)
By John Pavolotsky & Elena Miller on
2023 has seen a flurry of general state privacy laws, with twelve (12) such laws now on the books. The next one to “go live,” on December 31, 2023, is the Utah Consumer Privacy Act (UCPA). With no general federal privacy law in sight, the state privacy landscape continues to get more crowded and challenging…