Compliance Stuff

Key point: Oklahoma becomes the 20th state to enact a broad consumer data privacy law. On March 20, 2026, Oklahoma Governor Kevin Stitt signed  SB 546  into law. In doing so, Oklahoma becomes the 20th state to enact a broadly applicable consumer data privacy law. Passage of a consumer data privacy law in Oklahoma has been a multiyear process. The Oklahoma House first passed a consumer data privacy bill authored by then-Representative Collin Walke in 2021, but the bill stalled in the Senate. The House again passed a bill in 2022, and it again stalled in the Senate. The new law is a more business-friendly blend of the 2022 version of Virginia’s consumer data privacy law and the Texas consumer data privacy law. Ultimately, entities subject to other state privacy laws will not have any new compliance obligations. In the below article, we provide an overview of the new law. Applicability The law applies to controllers and processors that conduct business in Oklahoma or produce a p...

Pennsylvania could soon join the growing list of states to enact comprehensive data privacy laws, and businesses that operate in PA must take note. Earlier this month, the commonwealth’s House passed a bipartisan consumer privacy bill that would set parameters on the collection and sale of consumers’ personal data. We’ll explain everything you need to know about HB 78, why it’s important, and six steps your business should consider taking now. Quick Background Pennsylvania’s  HB 78 , which passed the state’s House of Representatives on October 1, would establish the Consumer Data Privacy Act (CDPA) if ultimately approved by the state Senate and Gov. Josh Shapiro. The bill, like its predecessors in other states, is intended to provide consumers with greater control over the collection, use, and sale of personal data. But unlike California’s data privacy law, PA’s proposed law would  not  cover employment-related information. Snapshot of the Proposed CDPA If enacted, ...

Pennsylvania could soon join the growing list of states to enact comprehensive data privacy laws, and businesses that operate in PA must take note. Earlier this month, the commonwealth’s House passed a bipartisan consumer privacy bill that would set parameters on the collection and sale of consumers’ personal data. We’ll explain everything you need to know about HB 78, why it’s important, and six steps your business should consider taking now. Quick Background Pennsylvania’s  HB 78 , which passed the state’s House of Representatives on October 1, would establish the Consumer Data Privacy Act (CDPA) if ultimately approved by the state Senate and Gov. Josh Shapiro. T he bill, like its predecessors in other states, is intended to provide consumers with greater control over the collection, use, and sale of personal data . But unlike California’s data privacy law, PA’s proposed law would  not  cover employment-related information. Snapshot of the Proposed CDPA If enacted,...

  On October 1, Montana became the newest state with a comprehensive data privacy law, the   Montana Consumer Data Privacy Act . Application The MCDPA applies to any persons who conduct business in Montana or produce products or services targeting residents in Montana and who Control or process the personal data of more than 50,000 consumers, except for personal data controlled or processed for payment transaction purposes; or   Control or process the personal data of more than 25,000 consumers and derive more than 25 percent of their gross revenue through the sale of personal data. Exemptions The following entities are exempt from the MCDPA: Any Montana body, authority, board, bureau, commission, district, agency or, political subdivision. Non-profit organizations. Institutions of higher education. National securities associations registered under the federal Securities Exchange Act of 1934. Financial institutions and their affiliates governed by Title V of the Gramm-Lea...