Remove 2025 Remove Compliance Remove Federal law
article thumbnail

CPPA Proposed Rulemaking Package Part 2 – Automated Decision-Making Technology

Debevoise Data Blog

The Draft Regulations note several federal law preemptions, including for entities and data subject to HIPAA, entities and data subject to the FCRA, and data subject to the GLBA. The formal public comment has been further extended to February 19, 2025. The formal public comment has been further extended to February 19, 2025.

article thumbnail

National Security Update: DOJ Unveils Rules Restricting Sensitive Bulk Data Transfers

Debevoise Data Blog

company and its foreign subsidiaries and transactions required by federal law or international agreements. Third-Party Contractual and Compliance Obligations The rule prohibits data brokerage with any foreign person who is not a covered person unless the U.S. DOJ expects U.S. Noncompliance may result in enforcement action.