
Providing timely updates and perspectives on current events, legislation, regulatory enforcement, and a myriad of other topics that pertain to the collection, use, disclosure, and protection of data.

Indiana Becomes Seventh U.S. State to Enact an Omnibus Data Protection Law.
Indiana continues the 2023 trend of Midwest States enacting data protection laws under a “controller” and “processor” model.

Utah Ushers in New Age of U.S. State Regulations on Social Media Companies; Passes Law Requiring Parental Consent
U.S. states are moving to regulate social media as social media laws take shape—such as Utah’s which requires prior parental consent for those under the age of 18—in addition to state laws that more broadly regulate data protection.

Iowa Set to Become Sixth U.S. State to Enact an Omnibus Data Protection Law While Federal Legislation Stagnates.
Like recent new U.S. state data protection laws, the Iowa law creates a “controller” and “processor” regime modeled more so after EU law than the first U.S. state data protection law in California—the CCPA.