Mark your calendar for this 15 January #LinkedInLive: "New year, new privacy laws and new attorneys general on the beat" Five new state comprehensive privacy laws became enforceable in January: Delaware, Iowa, Nebraska, New Hampshire and New Jersey. In this discussion, the IAPP’s Cobun Zweifel-Keegan, J.D., CIPP/US, CIPM will be joined by John Allen Eakins and Brandon Garod, representatives of the attorneys general of Delaware and New Hampshire, respectively. They will discuss regulatory philosophy, educational efforts, nuances in the laws and enforcement priorities. Register now:
New year, new privacy laws and new attorneys general on the beat
www.linkedin.com
Regrettably have to run for a meeting, but please reach out (connect via LinkedIn) and let me know how I can learn more. I see 2025 as a year of elevated attention on the tension between 𝐜𝐨𝐧𝐬𝐮𝐦𝐞𝐫 𝐩𝐫𝐢𝐯𝐚𝐜𝐲 𝐯𝐞𝐫𝐬𝐮𝐬 𝐜𝐨𝐧𝐬𝐮𝐦𝐞𝐫 𝐩𝐫𝐨𝐭𝐞𝐜𝐭𝐢𝐨𝐧 (e.g. pushing the boundaries of privacy as solutions to protect consumers, such as against unlawful robocalls, are introduced in the marketplace).
How do you expect your offices will coordinate or combine resources with other state enforcers of privacy laws on investigations or actions?
Criminal liability is why I bring up Delaware's Duty of Oversight and accountability. Businesses (controllers) must take responsibility for ensuring compliance with DPDPA requirements, including implementing data privacy measures that align with the principles of transparency, fairness, and accountability.
My question is how these laws might be extended to employees and specifically enforcement in the workplace. could the speakers please talk about protecting employee privacy through these or other laws?
Brian Schumaker, CIPP/US, CIPM Yes! You can access the full video at this same link after the broadcast ends.
Many for profit businesses are processors for non-profit controllers. When these for profit businesses do so, it is not clear whether that personal information is subject to the privacy laws or exempted from it. The same issue applies with respect to the other exemptions. Can you address how you address that situation?
Question: Do you expect businesses to obtain consent to process personal information of individuals that they collected before the privacy laws became effective?
Are there certain areas of the law that you might expect to be of early emphasis? Opt-outs? Universal opt-outs? Consumer rights writ-large?
Any chances of a Federal Privacy Law in the near future??
Director at McLane, Graf, Raulerson & Middleton
1wLiz Brown NH law (and all other U.S. privacy laws except California) exempts personal information processed concerning employees, independent contractors, etc. See e.g. N.H. RSA 507-H:3, II (o).