All posts by Patrick Johnson

Virginia Enacts New Broad Consent Requirement for Collection of Reproductive and Sexual Health Information

On March 24, 2025, Virginia Gov. Glenn Youngkin signed into law SB 754, amending the state’s Consumer Protection Act to prohibit businesses from “[o]btaining, disclosing, selling, or disseminating any personally identifiable reproductive or sexual health information without the consent of the consumer.” The amendment, which takes effect on July 1, […]

The DOJ’s Bulk Sensitive Personal Data Rule’s Imminent Relevance to Life Sciences Companies

A new US Department of Justice (DOJ) rule on “Preventing Access to US Sensitive Personal Data and Government-Related Data by Countries of Concern (including China) or Covered Persons” (rule) prohibits and restricts certain covered data transactions that result in the transfer or access to bulk US sensitive personal data by […]

ICO Releases ‘Consent or Pay’ Guidance

What happened? The UK Information Commissioner’s Office (ICO) has released updated guidance on ‘consent or pay’ business models. These models present users with a choice to either consent to the processing of their personal data for purposes like personalised advertising in return for access to a product or service, or […]

New European Commission: What Data-Driven Tech Companies Need to Know

This blog post summarizes the key points presented by Cooley lawyers Patrick Van Eecke, Enrique Capdevila and Athina Gaki during the Cooley webinar, “New European Commission: What Data-Driven Tech Companies Need to Know”, part of the CooleyREG Talks (EU) series, “New European Commission, New Economic Regulation for the EU and […]

CPPA Adopts Data Broker Registration Regulations, Begins Delete Act Enforcement

On November 9, 2024, the five-person board of the California Privacy Protection Agency (CPPA) voted unanimously to adopt the proposed Data Broker Registration regulations without modifications. The new regulations seek to clarify key provisions of the California Delete Act, which requires data brokers to register with the state of California […]