Lawyer Highlights States' New Privacy Requirements
Companies and consultants should be aware of key privacy regulations in effect this year in Indiana, Kentucky, Rhode Island, Delaware, Oregon, California and other states, Shook Hardy privacy attorney Josh Hansen wrote in a post Friday.
Sign up for a free preview to unlock the rest of this article
Privacy Daily provides accurate coverage of newsworthy developments in data protection legislation, regulation, litigation, and enforcement for privacy professionals responsible for ensuring effective organizational data privacy compliance.
Specifically, he highlighted right-to-cure provisions in Delaware, Oregon and New Hampshire that have expired. Opt-out signal requirements in Delaware and Oregon are now live, he said. Privacy laws in Indiana, Kentucky and Rhode Island -- which largely follow the Virginia model -- are in effect, he wrote.
The Rhode Island requirement to “identify third parties to whom you ‘may’ sell ‘personally identifiable information,’” is a new provision worth tracking, he said.
In California, he highlighted new requirements for risk assessments, privacy policy updates and display of opt-out confirmation.