Lexology August 2, 2023
Businesses operating in regulated industries, particularly in the financial services and healthcare sectors, need to ensure they are paying close attention to the details of the exemptions in the increasingly complex patchwork of state privacy laws. Key differences in the exemptions built into these new state laws will result in many regulated businesses having drastically divergent compliance obligations on a state-by-state basis.
The majority of the new and emerging privacy laws in the United States create entity-level exemptions for financial services entities subject to the Gramm-Leach-Bliley Act (GLBA), as well as for healthcare/medical services-related entities regulated by the Health Insurance Portability and Accountability Act (HIPAA). In Virginia, Connecticut, Utah, Tennessee, Montana, Florida, Texas, Iowa, and Indiana, both GLBA-regulated and HIPAA-regulated...
Today's Sponsors
Today's Sponsor