DATA PROTECTION & PRIVACY INDEX FOR 2022 FROM THE BACKGROUND BUZZ
January | Virginia: The Virginia Consumer Data Protection Act (VCDA) Working Group on the Joint Commission on Technology and Science has identified 167 points of emphasis around the VCDA.
January | National: Lawmakers have introduced new consumer data privacy bills in Florida, Washington, Indiana and Washington, D.C.
February | California: Under the CPRA, California employees will have the right to receive a “notice of collection” explaining how the employer will use personal information.
February | National: Several states have enacted laws that largely follow the footsteps of the California Consumer Privacy Act.
February | Virginia: Several bills could amend the Virginia Consumer Data Protection Act (VCDPA) in 2023.
February | California and Colorado: Updates have been provided in California and Colorado regarding the rulemaking process pertaining to the CCPA and the CPA.
February | Georgia: The Georgia Computer Data Privacy Act (GCDPA) has been introduced and in some ways, it is more strict than the CCPA.
February | Indiana: Indiana’s Senate Bill 358 sets forth a number of consumer data protection standards.
February | Massachusetts: The Massachusetts Information Privacy and Security Act will provide updates on the state’s Consumer Privacy Laws.
February | National: Several bills have been discussed regarding consumer data privacy across the country, including Arizona, Iowa and Rhode Island.
March | National: Any company that collects, stores and/or manages someone’s basic information should become familiar with data privacy laws across the country.
March | National: Check out this weekly update on the status of proposed state privacy legislation in 2022.
March | Utah: Utah has introduced a consumer privacy act that contains more stringent applicability thresholds in comparison to other state laws.
April | Virginia: The Virginia Consumer Data Privacy Act (CDPA) could be amended based on four amendments passed by the Virginia House and Senate.
April | Colorado: Colorado’s attorney general has released guidance that outlines best practices for safeguarding consumer data.
April | Utah: Although similar to other consumer privacy laws, several significant differences exist with the Utah Consumer Privacy Act.
April | National: Several privacy laws have been introduced and/or updated throughout the country.
April | California: Although the CCPA doesn’t require specific provisions in agreements with service providers, there are incentives for those who include certain provisions in the agreements.
May | National: AI technology can offer a low margin for error when it comes to tracking the potential for identity fraud.
May | California: The Workplace Technology Accountability Act aims to regulate employers, and their vendors, regarding the use of employee data.
May | Utah: Utah became the fourth state to enact comprehensive consumer privacy legislation.
May | Connecticut: The Connecticut legislature has passed Connecticut SB 6, which closely resembles the Colorado Privacy Act.
May | New York: Employers in New York must provide written notice to their employees prior to engaging in certain electronic monitoring activities.
June | Connecticut: The Connecticut Data Privacy Act applies to anyone conducting business in the state or producing products or services targeted to Connecticut residents.
June | Utah: The Utah Consumer Privacy Act applies to businesses involved in data processing that conduct business in Utah or produce a product or service targeted at Utah residents.
June | California: The CCPA has released a 66-page working draft of regulations to the CPRA.
June | California: Effective January 1, 2023, businesses that are subject to the CPRA should reevaluate their existing privacy practices.
June | National: United States companies that collect Sensitive HR Data in the EEA/UUK and transfer it to the US in compliance with the GDPR should consider several factors.
June | National: State privacy rights should be considered by employers who are interested in monitoring work-related and other activities of their employees.
June | National: The American Data Privacy and Protection Act prohibits covered entities from collecting, processing or transferring covered data.
July | International: Several big-name companies and world leaders have provided their signatures on an update to a 2018 voluntary practice code for combatting disinformation to a co-regulation scheme.
July | National: Biometric privacy-enhancing technologies (BPET) have been introduced as playing a major role in protecting the sensitive information of Americans.
August | National: Five new privacy laws should be reviewed by organizations in preparation of their 2023 effective dates.
September | California: Effective January 1, 2023, employee and Business-to-Business (B2B) personal information exemptions under the CCPA will expire.
September | National: A timeline has been created that addresses the comprehensive data privacy laws in California, Colorado, Connecticut, Utah and Virginia.
October | Colorado: The proposed draft Colorado Privacy Act (CPA) Rules has been released and it adds significant complexity and obligations on businesses.
October | Connecticut: Connecticut has become the fifth state to enact a broadly applicable consumer privacy law.
October | International: Several topics have been brought up in the data privacy world, including the release of the Executive Order of Trans-Atlantic Data Privacy Framework.
October | International: An executive order has been signed to implement a new framework to protect the privacy of personal data shared between the U.S. and Europe.
October | National: MVR checks must involve a disclosure, an authorization and a summary of rights in order to avoid significant fines and accidents.
November | California: The CCPA will take effect in the job applicant and employment context on January 1.