CC @daniellecitron.bsky.social @daniel-solove.bsky.social @paulschwartz.bsky.social @wmcgeveran.bsky.social @aliciasn.bsky.social @tiffanycli.bsky.social @hartzog.bsky.social @aselbst.bsky.social @ariezra.bsky.social @kendraserra.bsky.social @rcalo.bsky.social @yaleisp.bsky.social @jevan.bsky.social

Friendly reminder it also includes a student award. If you've got students writing interesting privacy scholarship, encourage them to apply!

This is a season for sipping tea, enjoying cooler temperatures, and writing as many reports as I can crank out before January rolls around

According to Macko, there are “hundreds” of open investigations, many of which concern businesses who have not yet been alerted by the agency.

⏩ Read the announcement here: cppa.ca.gov/announcement...

⏩ Read about the agency's enforcement update here: www.jdsupra.com/legalnews/ca...

One of the consortium's purposes is to "coordinate efforts to investigate potential violations of applicable laws." This is especially interesting to me in light of CalPrivacy's September board meeting, at which Deputy Director of Enforcement Michael Macko provided an update on enforcement efforts

Yes. Not actually necessary for the job, but in most interviews I was told that they would only hire someone who could also do patent prosecution.

This is my experience. During law school I wanted to be a patent lawyer and being patent bar ineligible was disqualifying for most jobs (even litigation).

Poetic considering how all of this started. The escalator giveth, the escalator taketh away.

This is one bill worth keeping an eye on as we close out the year!

• This bill would ban the sale of sensitive data (“sensitive data” is defined broadly and includes some uncommon categories such as government-issued identifiers and neural data); and
• The Attorney General would have rulemaking authority.

• This bill would require affirmative consent to "transfer" a consumer's sensitive data to a third party, in addition to a MODPA-style restriction on transferring sensitive data unless doing so is "strictly necessary" to provide a requested product or service;