Jeffrey Glassman

Several years into the CCPA and CPRA regime, most companies have the basics in place: a privacy policy, a cookie banner, and a process for responding to consumer requests. Enforcement activity over the past year, however, has...more California businesses that experience a data security incident now face a defined 30-day notification deadline under SB 446, a meaningful change from the prior standard, which required notice only “in the most expedient time...more A letter of intent is meant to be a roadmap, not a finished contract, but the choices made at that stage tend to harden quickly once diligence begins. Buyers and sellers who treat the LOI as a formality often find themselves...more The U.S. Supreme Court’s decision to take Salazar v. Paramount Global (cert. granted January 26, 2026) is more than a technical exercise in statutory interpretation. It is a live example of what happens when a targeted,...more