The American Privacy Rights Act 2024 (APRA) was released on April 7, 2024, by U.S. Representative Cathy Rodgers and U.S. Senator Maria Cantwell. Thereafter, on May 23, 2024, the U.S. House Committee on Energy and Commerce Subcommittee on Data, Innovation, and Commerce approved a revised draft of the APRA. The revised APRA retains the provisions of the original draft while introducing certain amendments, including the Children's Online Privacy Protection Act 2.0. (COPPA 2.0). In this article, OneTrust DataGuidance Research breaks down the main provisions of the APRA, including the revisions.

The US privacy landscape has seen significant change in the past year, through the introduction of various state privacy legislation and federal initiatives. On June 23, 2024, the Protecting Americans' Data from Foreign Adversaries Act of 2024 (the Act) under Division I of House Resolution 815 Making emergency supplemental appropriations for the fiscal year ending September 30, 2024, and for other purposes (House Resolution 815) entered into force. OneTrust DataGuidance breaks down the key provisions of the Act with expert comments from Mark Francis, Partner at Holland & Knight LLP.

In the US, privacy laws are quickly evolving - especially for financial services companies. A significant number of states are passing or contemplating laws to protect personal information, including consumer financial information. At the same time, U.S. federal regulators are either initiating or updating laws and regulations, including recent changes to the Gramm-Leach-Bliley Act (GLBA) Safeguards Rule and the U.S. Congress considering a federal privacy law. This ever-changing landscape makes it challenging for financial institutions to navigate whether state privacy laws apply to their operations. In this Insight article, Eyvonne Mallet, Of Counsel at Loeb & Loeb LLP, outlines current state privacy law exemptions for financial institutions and suggests best practices for businesses in the financial space.