In the absence of comprehensive Federal legislation, US states are taking the lead in enacting wide-reaching privacy regulations. This fractured approach to privacy regulation creates compliance challenges for businesses that operate in these states and are subject to these laws.
Currently, three US states have enacted comprehensive privacy legislation – California, Virginia, and Colorado. In this session we provide an overview of California’s landmark privacy regulation – the California Consumer Privacy Act (CCPA) and the new obligations imposed under the California Privacy Rights and Enforcement Act (CPRA) which will significantly amend the CCPA in 2023 as well as the Virginia Consumer Data Protection Act (VCDPA) and the Colorado Privacy Act (CPA), both slated to take effect in 2023. We also offer practical guidance on how to build a compliance program that can accommodate a multi-state approach.
This session is jointly hosted with US law firm Wiley. Speakers: Alex Brown (Simmons), Duane Pozza (Wiley) and Joan Stewart (Wiley).


