Compliance Stuff

House Republicans just introduced sweeping federal data privacy legislation yesterday that could reshape how businesses collect, store, and use personal information, aiming to finally replace a growing patchwork of state laws with a single national standard . But the bill, known as the SECURE Data Act, faces significant hurdles before becoming law, so employers and businesses should approach it cautiously. This Insight will recap what you need to know about the bill and provide a few best practices all businesses can take when it comes to data privacy. What Is the SECURE Data Act? The Securing and Establishing Consumer Uniform Rights and Enforcement over Data Act, introduced by Rep. John Joyce (R-Pa.) on April 22 and backed by House Energy and Commerce Committee Chair Brett Guthrie (R-Ky.), would create the first comprehensive federal consumer privacy framework in US history. The bill is the product of a Data Privacy Working Group that gathered input from more than 170 organizations a...

Key Takeaways: California’s Delete Request and Opt-Out Platform (DROP) is now finalized and will launch January 1, 2026, enabling consumers to submit a single, authenticated deletion request to all registered data brokers. Data brokers face significant new operational obligations starting August 1, 2026, including mandatory DROP integration, retrieval of requests at least every 45 days, 90-day determination deadlines, and suppression list requirements. Noncompliance can result in penalties of $200 per request, per day. DROP operationalizes the Delete Act and expands consumer privacy rights, requiring data brokers to overhaul how they identify, match, store, and delete personal information, including in situations where they may not traditionally view themselves as data brokers. At the  November 7, 2025  Board meeting for the California Privacy Protection Agency, which recently adopted the public-facing shorthand “ CalPrivacy ,” Board Member Jennifer Urban described the state’...