Reopening the Workplace During and After COVID-19; Tackling Critical Legal Issues and Implementing Employer Best Practices

Data broker regulation is rapidly expanding across the United States, creating new compliance obligations—and significant litigation and enforcement risks—for businesses that collect, purchase, sell, license, or otherwise share personal information.

The California Air Resources Board (“CARB”) recently released several resources to assist companies preparing for the first reporting cycle under California’s Climate Corporate Data Accountability Act (“SB 253”). The new materials include a voluntary reporting intake platform, plus a video tutorial, that gives reporting entities an opportunity to voluntarily provide CARB with entity information, including regarding in-scope subsidiaries and contact information for fee invoicing for 2026.

California’s SB 690 would limit CIPA pen-register lawsuits tied to cookies, pixels, and analytics tools while broader privacy compliance risks remain.