Explore key compliance strategies from Hinshaw partner Cathy Mulrow-Peattie and industry experts on AI-driven cyber risks and regulations, as covered in our alert with takeaways from the Q3 2025 FinCyber Femmes Meeting.

Explore this month’s Privacy, Cyber, & AI Decoded alert for key updates on the federal AI Action Plan, new state privacy laws in California and Colorado, and more.

Read our latest Privacy, Cyber & AI Decoded alert covering key compliance deadlines involving five state privacy laws, along with enforcement of the DOJ's Bulk Sensitive Data Rule taking effect.

Dive into our latest edition of Privacy, Cyber, & AI Decoded to explore important updates on AI regulation, data privacy, bulk data controls, and enforcement trends.

Discover key insights from the IAPP 2025 Global Summit, focusing on FTC enforcement priorities, AI regulation, and state privacy challenges for compliance professionals.

Understand essential compliance requirements and steps for your business to prepare for the 2025 New York State Department of Financial Services (NYDFS) cybersecurity regulations.

Read how a new California Privacy Protection Agency (CPPA) settlement order means companies must review their Do Not Sell/Share and Right to Limit processes and consent management tool implementation.

The World Economic Forum has stated that 88 percent of C-suite executives indicated that adopting artificial intelligence (AI) in their companies is a key initiative for 2025.

Read insights on the rise in state Attorney General enforcement actions and learn key compliance steps for protecting consumer privacy rights in the absence of federal privacy legislation.

To commemorate Data Privacy Day 2025, read the Hinshaw Privacy Team's top five privacy predictions for the year ahead.

As we say goodbye to 2024, we are pleased to announce our 2024 Hinshaw Readers’ Choice Awards in the privacy category. The following are the Top 5 Privacy, Cyber & AI Decoded alerts receiving the highest levels of engagement from our readers in 2024 on topics ranging from CFPB announcements and state privacy laws to genetic privacy issues.

On October 22, 2024, the Consumer Financial Protection Bureau (CFPB) issued its long-awaited Final Rule implementing Section 1033 of the Dodd-Frank Act ("Final Rule") with the intention of giving consumers greater rights, privacy, and security over their financial data.

Approximately one year after the Colorado Privacy Act (CPA) Rules went into effect, the Colorado Attorney General proposed draft amendments to reflect recent changes to the CPA. Recall that the CPA applies to "controllers" that conduct business in Colorado or produce or deliver commercial products or services that are intentionally targeted to Colorado residents and that either:

As January 2025 privacy strategy planning ramps up this fall, our Privacy, Security, & Artificial Intelligence team has put together a planning alert for 2024–2025. In this installment, we review the following nine state privacy laws set to take effect soon:  

On July 16, 2024, the California Privacy Protection Agency (Agency) discussed proposed updates to the California Consumer Privacy Act (CCPA) regulations. These proposed updates involve:

Rhode Island is the latest state to enact consumer privacy legislation. The Rhode Island Transparency and Privacy Protection Act (the "Act"), which passed into law on June 28, 2024, establishes a framework for controlling and processing personal data and includes consumer rights similar to those of other existing state laws. The Act goes into effect on January 1, 2026.

Over 18 states have now enacted comprehensive state privacy laws, three of which go into effect on July 1, 2024, in Texas, Florida, and Oregon, along with certain California Data Broker provisions.

On June 7, 2024, the New York state legislature passed two bills aimed at increasing the protection of children in an ever-changing digital world. Titled the New York Child Data Protection Act (CDPA) and the Stop Addictive Feeds Exploitation (SAFE) for Kids Act, these bills seek to protect children by restricting the selling of their data and limiting their access to predatory and addictive technology platforms seeking to exploit them.

On May 24, 2024, Senate Bill 4757, containing a comprehensive Minnesota Consumer Data Privacy Act (MCDA), was signed into law by Minnesota Governor Tim Walz. It will take effect on July 31, 2025.

The recent Federal Trade Commission (FTC) amendment adds a new security breach reporting requirement to the Gramm–Leach–Bliley Act (GLBA) Safeguards Rule. The Safeguards Rule is a regulatory framework that mandates financial institutions to implement security measures for protecting customer data.