As of July 1, 2020, for Maine, and Oct. 1, 2019, for Nevada, some companies will have to comply with additional requirements and restrictions regarding personal information selling under new laws that seem inspired by but not as broad as the California Consumer Privacy Act. Maine’s Act to Protect the Privacy of Online Customer Information requires prior opt-in to data selling (the CCPA requires offering opt-out) and introduces new notice requirements but only for broadband providers. Nevada’s Senate Bill 220 applies to any operator of online services, within or outside Nevada, but not offline, and “selling” is more narrowly defined than under the CCPA. In this post for Privacy Tracker, Baker McKenzie's Lothar Determann and Helena Engfeldt, CIPP/E, CIPP/US, analyze where the laws overlap and diverge. (IAPP member login required.)
If you want to comment on this post, you need to login.