Ready to Register?

MyLawCLE All-Access Pass

Best choice

Add the All-Access Pass and get this program —
plus 1,000+ live CLE programs every year.


All specialty & ethics credits included
38 practice areas
New sections: AI & the Law, Practice Management
100s of current and trending legal topics
Nationally recognized and highly experienced presenters

$395 / year — this program included
Register with the All-Access Pass

This program + 1,000+ CLE programs, all year

Or register for just this program

Live Video Broadcast

Live webinar of this one program.
$195 Register

On-Demand Video

Recorded access + self-study credit.
$195 Register

U.S. Privacy Rights Traps: Navigating the Differences Among State Laws and Lessons from California’s Enforcement Wave

One state’s privacy law won’t cover the rest — and California is enforcing the gaps. Learn to map which laws reach your client, set a highwater-mark standard, handle rights requests without over-verifying, and fix the cookie-banner and opt-out failures California is now penalizing.

2026-10-06 12:00:00

Program Details

2026-10-06 12:00:00

Program Details

2026-10-06 12:00:00

Over 1,000+ webinars

2026-10-06 12:00:00

Course Overview

Compliant in one state is not compliant in all of them — and California is enforcing the difference

2026-10-06 12:00:00

State comprehensive privacy laws (CPLs) share a core but diverge on who is protected, what data is covered, which organizations are in scope, and which exceptions apply. Meanwhile, California has moved from rulemaking to a wave of enforcement actions — Healthline, Todd Snyder, Tractor Supply, Honda, Ford, and others — aimed at how businesses handle rights requests and consent.

Ask a consumer for more than a request requires, and verification itself becomes the violation. Ignore a Global Privacy Control signal, and every do-not-sell-or-share request goes unhonored. Deploy a cookie banner that makes opting out harder than opting in, and the consent it collects may not count. Treat sensitive, biometric, and ADMT data as ordinary personal information, and their enhanced rights go unaddressed. Add CIPA, ECPA, and wiretapping theories, and website tracking becomes litigation exposure.

Attendees leave with a framework for deciding which state laws apply and setting a highwater-mark standard that absorbs the outliers, a checklist for access, deletion, correction, and opt-out requests — verification, timing, training, and record keeping included — and good and bad cookie-banner examples with takeaways from California’s enforcement record.

Format

CLE Credit

2h CLE Credits

Level

Intermediate

Length

2

Key topics that will be covered

01
Which State Laws Apply
Which State Laws Apply Determining which states and laws reach a client, who is protected, what data is covered, which organizations are in scope, and which entity- and data-level exceptions apply.
02
Highwater-Mark Compliance
Building one program around the strictest obligations — assessments, policies and notices, appeals, DPAs, and cybersecurity — while addressing the outlier states.
03
Verification and Authentication
Verifying and authenticating consumer requests without over-collecting, and meeting the timing, response, training, and record-keeping obligations that follow.
04
Enhanced and Sensitive-Data Rights
Handling delete, correct, access, and copy requests alongside the enhanced rights for sensitive personal data, biometrics, and ADMT and profiling.
05
Opt-Out Signals and Tracking Exposure
Honoring do-not-sell, share, and target requests and GPC, UOOM, and OOPS signals, and managing CIPA, ECPA, and wiretapping exposure.
06
California Enforcement Lessons
Applying the lessons of Healthline, Todd Snyder, Tractor Supply, Sling/Dish, Honda, Ford, PlayOn Sports, and Disney/ABC to cookie banners and consent management.

Program schedule

clock 12:00 pm - 1:00 pm EST

CPLs: Applicability, Obligations and Rights – finding a highwater mark and addressing outliers

This session maps the landscape of U.S. state comprehensive privacy laws (CPLs): which states and laws apply, the unique features of specific CPLs, who is protected, what data is covered, which organizations are in scope, and which entity- and data-level exceptions apply. The speakers then work through the obligations that result — consumer rights (common and unique), verification and authentication, timing, responses, training and record keeping, assessments, policies and notices, appeals, DPAs, and cybersecurity — and show how to find a highwater mark that satisfies the strictest requirements while addressing the outliers.

Alan L. FrielAlan L. Friel
Kyle R. DullKyle R. Dull
Alara AbbasiAlara Abbasi
clock 1:10 pm - 2:10 pm EST

Consumer Rights and Requests – avoiding traps

This session focuses on consumer rights and requests and the traps that accompany them: the delete, correct, access, and copy rights; the enhanced rights attached to sensitive personal data (scope, opt-out versus opt-in, and prohibitions), biometric data, and ADMT and profiling; do-not-sell, share, and target obligations; GPC, UOOM, and OOPS opt-out signals; and CIPA, ECPA, and wiretapping exposure. The speakers draw lessons from California’s enforcement actions — including Healthline, Todd Snyder, Tractor Supply, Sling/Dish, Honda, Ford, PlayOn Sports, and Disney/ABC — and examine good and bad examples of cookie banners and consent management, closing with takeaways and Q&A.

Alan L. FrielAlan L. Friel
Kyle R. DullKyle R. Dull
Alara AbbasiAlara Abbasi
Alan L. Friel

Alan L. Friel

Squire Patton Boggs

Kyle R. Dull

Kyle R. Dull

Squire Patton Boggs

Alara Abbasi

Alara Abbasi

Squire Patton Boggs

Alan L. Friel

Alan L. Friel

Squire Patton Boggs

Alan L. Friel is a Partner at Squire Patton Boggs and Chair of the firm’s Data Privacy, Cybersecurity & Digital Assets Practice, a global group of more than 75 lawyers. He counsels companies on privacy and data protection, advertising technology, artificial intelligence governance, and cybersecurity, and defends them when regulators and plaintiffs come calling. Earlier in his career he served as general counsel, corporate secretary and chief administrative officer of a digital media and e-commerce company.

Education & Credentials

Mr. Friel earned his Juris Doctor from Northeastern University School of Law in 1991 and his Bachelor of Science from Georgia State University in 1988, and completed the Executive Program in Management at the UCLA Anderson School of Management in 2001. He is admitted in California (1993), New York (2002) and Georgia (2026), and before the Central District of California and the Ninth Circuit. He holds the CIPP and CIPM certifications from the International Association of Privacy Professionals.

Recognition & Leadership

Chambers USA has ranked Mr. Friel in Band 1 for Privacy & Data Security: Adtech from 2023 through 2026. He was named 2026 Data Privacy Law Expert of the Year in California by Leaders in Law, a Thomson Reuters Stand-out Lawyer from 2022 through 2026, a Los Angeles Times Legal Visionary and a National Law Journal Trailblazer for Media and Advertising Law in 2023. He is listed in The Best Lawyers in America for Advertising Law for 2026-2027 and holds the Martindale-Hubbell AV Preeminent rating.

Professional Involvement

Mr. Friel founded the IAPP Orange County KnowledgeNet Chapter and formerly chaired the Los Angeles County chapter. He sits on the Executive Committee and Board of the Los Angeles County Bar Association Privacy and Cybersecurity Section, serves on the Law Firm Advisory Board of the Association of Media and Entertainment Counsel, and participates in the Association of National Advertisers Privacy Working Group. He is active in the American Bar Association's Entertainment, Intellectual Property and Advertising & Promotions Sections, and teaches at Loyola Marymount University School of Law and the UCLA School of Film, Television and Digital Media.

Experience

Mr. Friel has edited the Privacy and Data Protection chapter of the CCH and Wolters Kluwer Corporate Legal Compliance Handbook since 2007 and serves on the Boards of Editors of Internet Law & Strategy and Cybersecurity Law & Strategy. He co-authored "Making Sense of the Patchwork of U.S. State Consumer Privacy Laws" for the CPI TechREG Chronicle in November 2024, and contributes regularly to the Privacy World blog, Law360 and the Daily Journal.
Kyle R. Dull

Kyle R. Dull

Squire Patton Boggs

Kyle R. Dull is a Senior Associate in the New York and Miami offices of Squire Patton Boggs, where he practices in the firm’s Data Privacy, Cybersecurity & Digital Assets, Government Investigations & White Collar, Intellectual Property & Technology, and Litigation groups. A former enforcement attorney in the Florida Attorney General’s Consumer Protection Division, Kyle brings a regulator’s perspective to consumer privacy compliance — having personally launched investigations into unfair and deceptive data practices, geolocation tracking, and children’s privacy violations before moving to private practice to help companies stay ahead of exactly those inquiries.

Education & Credentials

Kyle earned his J.D. from Tulane University Law School, where he received the Dean’s Scholarship for Academic Excellence, and his B.A. from Vanderbilt University, where he was named to the Dean’s List. He is admitted to practice in New York and Florida and before the U.S. District Court for the Southern District of Florida, and holds the Certified Information Privacy Professional (CIPP/US) credential from the International Association of Privacy Professionals.

Recognition & Leadership

Kyle has been recognized in Lexology 100: Data, where clients praised his “consistent and reliable support” in developing compliance programs and his “proactive” ongoing counsel in navigating complex regulatory landscapes. He served on the Law360 Consumer Protection Editorial Advisory Board (2021–2022) and is the author or presenter of more than 20 publications and speaking engagements since 2021 on state privacy laws, dark patterns, AI governance, and consumer protection enforcement.

Professional Involvement

Kyle is an active member of the Florida Bar’s Cybersecurity and Privacy Law Committee and previously served on its Consumer Protection Law Committee and Data Privacy and Cybersecurity Subcommittee (2020–2023). During his tenure at the Florida Attorney General’s Office, he supervised a team of five attorneys and nine investigators in a multistate investigation of the vaping industry and led consumer protection matters involving data practices, location tracking, and children’s privacy — experience that gives him unusual insight into how regulators build cases, what evidence they look for, and where companies most often stumble.

Experience

In private practice, Kyle counsels clients on building and maintaining privacy compliance programs under the CCPA and the growing patchwork of state consumer privacy laws, responding to regulatory investigations, and defending consumer protection and privacy litigation. He regularly advises on consumer rights request handling, dark patterns and consent design, AI governance, and children’s privacy. Having sat on both sides of the enforcement table, he is uniquely positioned to explain how the California Privacy Protection Agency and Attorney General evaluate verification practices in privacy request compliance — and how businesses can design verification procedures that satisfy regulators without over-collecting the very data the law is meant to protect.
Alara Abbasi

Alara Abbasi

Squire Patton Boggs

Alara Abbasi is an Associate in the Los Angeles office of Squire Patton Boggs, where she is a member of the firm’s Data Privacy, Cybersecurity & Digital Assets Practice and its Advertising, Media & Brands Industry Group. She provides regulatory, transactional, and litigation support to national and international companies on the full range of consumer privacy issues, and has emerged as a frequent commentator on California Privacy Protection Agency enforcement and the fast-growing body of state age- and identity-verification laws — the very intersection of verification and privacy compliance that this program addresses.

Education & Credentials

Alara earned her J.D. from the UCLA School of Law (2025) and holds two graduate degrees: an M.A. in Political Science from Ludwig-Maximilians-Universität München and an M.A. in Current Democracies from Universitat Pompeu Fabra in Barcelona (2021). She received her B.A. in Political Science from the University of California, Irvine (2017). She is admitted to practice in California and is fluent in Spanish, Farsi, German, and Turkish in addition to English — a multilingual background that supports her work for multinational clients navigating cross-border privacy obligations.

Recognition & Leadership

Alara is a regular author for Privacy World, Squire Patton Boggs’ leading data privacy and cybersecurity publication, where her analysis is syndicated across LexBlog, Lexology, and the American Legal Blogger network. Her writing includes “California Privacy Agency Rolls Out New Regulations and Approves $1.35 Million Penalty in Latest CCPA Enforcement Action” (October 2025), a widely circulated breakdown of the Agency’s regulatory package and enforcement posture, and a multi-part series on app store age verification laws, including “App Store Age Verification Laws: Your Questions, Answered” and coverage of the federal injunction against Texas’s statute.

Professional Involvement

Alara has helped organize and present the firm’s continuing legal education programming, including the expert-panel CLE webinar “Navigating the App Store Age Verification Laws” (November 2025). Her academic background in comparative politics and democratic governance informs her practical approach to privacy regulation, which she brings to bear in advising clients on how U.S. state privacy regimes interact with global data protection frameworks.

Experience

At Squire Patton Boggs, Alara advises clients on developing and maintaining privacy compliance programs, drafting privacy notices, policies, and related documentation, implementing data breach response plans, and defending privacy-related litigation and regulatory inquiries. Her day-to-day work tracking California Privacy Protection Agency rulemaking and enforcement actions, combined with her focused analysis of emerging identity- and age-verification mandates, makes her well positioned to break down the practical mechanics of verifying consumer privacy requests without creating new compliance exposure.
Alan L. Friel

Alan L. Friel

Squire Patton Boggs

Alan L. Friel is a Partner at Squire Patton Boggs and Chair of the firm’s Data Privacy, Cybersecurity & Digital Assets Practice, a global group of more than 75 lawyers. He counsels companies on privacy and data protection, advertising technology, artificial intelligence governance, and cybersecurity, and defends them when regulators and plaintiffs come calling. Earlier in his career he served as general counsel, corporate secretary and chief administrative officer of a digital media and e-commerce company.

Education & Credentials

Mr. Friel earned his Juris Doctor from Northeastern University School of Law in 1991 and his Bachelor of Science from Georgia State University in 1988, and completed the Executive Program in Management at the UCLA Anderson School of Management in 2001. He is admitted in California (1993), New York (2002) and Georgia (2026), and before the Central District of California and the Ninth Circuit. He holds the CIPP and CIPM certifications from the International Association of Privacy Professionals.

Recognition & Leadership

Chambers USA has ranked Mr. Friel in Band 1 for Privacy & Data Security: Adtech from 2023 through 2026. He was named 2026 Data Privacy Law Expert of the Year in California by Leaders in Law, a Thomson Reuters Stand-out Lawyer from 2022 through 2026, a Los Angeles Times Legal Visionary and a National Law Journal Trailblazer for Media and Advertising Law in 2023. He is listed in The Best Lawyers in America for Advertising Law for 2026-2027 and holds the Martindale-Hubbell AV Preeminent rating.

Professional Involvement

Mr. Friel founded the IAPP Orange County KnowledgeNet Chapter and formerly chaired the Los Angeles County chapter. He sits on the Executive Committee and Board of the Los Angeles County Bar Association Privacy and Cybersecurity Section, serves on the Law Firm Advisory Board of the Association of Media and Entertainment Counsel, and participates in the Association of National Advertisers Privacy Working Group. He is active in the American Bar Association's Entertainment, Intellectual Property and Advertising & Promotions Sections, and teaches at Loyola Marymount University School of Law and the UCLA School of Film, Television and Digital Media.

Experience

Mr. Friel has edited the Privacy and Data Protection chapter of the CCH and Wolters Kluwer Corporate Legal Compliance Handbook since 2007 and serves on the Boards of Editors of Internet Law & Strategy and Cybersecurity Law & Strategy. He co-authored "Making Sense of the Patchwork of U.S. State Consumer Privacy Laws" for the CPI TechREG Chronicle in November 2024, and contributes regularly to the Privacy World blog, Law360 and the Daily Journal.
Kyle R. Dull

Kyle R. Dull

Squire Patton Boggs

Kyle R. Dull is a Senior Associate in the New York and Miami offices of Squire Patton Boggs, where he practices in the firm’s Data Privacy, Cybersecurity & Digital Assets, Government Investigations & White Collar, Intellectual Property & Technology, and Litigation groups. A former enforcement attorney in the Florida Attorney General’s Consumer Protection Division, Kyle brings a regulator’s perspective to consumer privacy compliance — having personally launched investigations into unfair and deceptive data practices, geolocation tracking, and children’s privacy violations before moving to private practice to help companies stay ahead of exactly those inquiries.

Education & Credentials

Kyle earned his J.D. from Tulane University Law School, where he received the Dean’s Scholarship for Academic Excellence, and his B.A. from Vanderbilt University, where he was named to the Dean’s List. He is admitted to practice in New York and Florida and before the U.S. District Court for the Southern District of Florida, and holds the Certified Information Privacy Professional (CIPP/US) credential from the International Association of Privacy Professionals.

Recognition & Leadership

Kyle has been recognized in Lexology 100: Data, where clients praised his “consistent and reliable support” in developing compliance programs and his “proactive” ongoing counsel in navigating complex regulatory landscapes. He served on the Law360 Consumer Protection Editorial Advisory Board (2021–2022) and is the author or presenter of more than 20 publications and speaking engagements since 2021 on state privacy laws, dark patterns, AI governance, and consumer protection enforcement.

Professional Involvement

Kyle is an active member of the Florida Bar’s Cybersecurity and Privacy Law Committee and previously served on its Consumer Protection Law Committee and Data Privacy and Cybersecurity Subcommittee (2020–2023). During his tenure at the Florida Attorney General’s Office, he supervised a team of five attorneys and nine investigators in a multistate investigation of the vaping industry and led consumer protection matters involving data practices, location tracking, and children’s privacy — experience that gives him unusual insight into how regulators build cases, what evidence they look for, and where companies most often stumble.

Experience

In private practice, Kyle counsels clients on building and maintaining privacy compliance programs under the CCPA and the growing patchwork of state consumer privacy laws, responding to regulatory investigations, and defending consumer protection and privacy litigation. He regularly advises on consumer rights request handling, dark patterns and consent design, AI governance, and children’s privacy. Having sat on both sides of the enforcement table, he is uniquely positioned to explain how the California Privacy Protection Agency and Attorney General evaluate verification practices in privacy request compliance — and how businesses can design verification procedures that satisfy regulators without over-collecting the very data the law is meant to protect.
Alara Abbasi

Alara Abbasi

Squire Patton Boggs

Alara Abbasi is an Associate in the Los Angeles office of Squire Patton Boggs, where she is a member of the firm’s Data Privacy, Cybersecurity & Digital Assets Practice and its Advertising, Media & Brands Industry Group. She provides regulatory, transactional, and litigation support to national and international companies on the full range of consumer privacy issues, and has emerged as a frequent commentator on California Privacy Protection Agency enforcement and the fast-growing body of state age- and identity-verification laws — the very intersection of verification and privacy compliance that this program addresses.

Education & Credentials

Alara earned her J.D. from the UCLA School of Law (2025) and holds two graduate degrees: an M.A. in Political Science from Ludwig-Maximilians-Universität München and an M.A. in Current Democracies from Universitat Pompeu Fabra in Barcelona (2021). She received her B.A. in Political Science from the University of California, Irvine (2017). She is admitted to practice in California and is fluent in Spanish, Farsi, German, and Turkish in addition to English — a multilingual background that supports her work for multinational clients navigating cross-border privacy obligations.

Recognition & Leadership

Alara is a regular author for Privacy World, Squire Patton Boggs’ leading data privacy and cybersecurity publication, where her analysis is syndicated across LexBlog, Lexology, and the American Legal Blogger network. Her writing includes “California Privacy Agency Rolls Out New Regulations and Approves $1.35 Million Penalty in Latest CCPA Enforcement Action” (October 2025), a widely circulated breakdown of the Agency’s regulatory package and enforcement posture, and a multi-part series on app store age verification laws, including “App Store Age Verification Laws: Your Questions, Answered” and coverage of the federal injunction against Texas’s statute.

Professional Involvement

Alara has helped organize and present the firm’s continuing legal education programming, including the expert-panel CLE webinar “Navigating the App Store Age Verification Laws” (November 2025). Her academic background in comparative politics and democratic governance informs her practical approach to privacy regulation, which she brings to bear in advising clients on how U.S. state privacy regimes interact with global data protection frameworks.

Experience

At Squire Patton Boggs, Alara advises clients on developing and maintaining privacy compliance programs, drafting privacy notices, policies, and related documentation, implementing data breach response plans, and defending privacy-related litigation and regulatory inquiries. Her day-to-day work tracking California Privacy Protection Agency rulemaking and enforcement actions, combined with her focused analysis of emerging identity- and age-verification mandates, makes her well positioned to break down the practical mechanics of verifying consumer privacy requests without creating new compliance exposure.

Credits by state

AK2.0
AL2.0
AR2.0
AZ2.0
CA2.0
CO2.0
CT2.0
DC2.0
DE2.0
FL2.5
GA2.0
HI2.0
IA2.0
ID2.0
IL2.0
IN2.0
KS2.0
KY2.0
LA2.0
MA2.0
MD2.0
ME2.0
MI2.0
MN2.0
MO2.4
MS2.0
MT2.0
NC2.0
ND2.0
NE2.0
NH120.0
NJ2.0
NM2.0
NV2.0
NY2.0
OH2.0
OK2.5
OR2.0
PA2.0
RI2.5
SC2.0
SD2.0
TN2.0
TX2.0
UT2.0
VA2.0
VT2.0
WA2.0
WI2.0
WV2.4
WY2.0

1000+

Live stream programs

24/7

Access to live webinars & recordings

70,000+

Trusted by Legal Professionals

1000+

Live stream programs

24/7

Access to live webinars & recordings

70,000+

Trusted by Legal Professionals

1000+

Live stream programs

24/7

Access to live webinars & recordings

10,000+

Trusted by Legal Professionals

1000+

Live stream programs

24/7

Access to live webinars & recordings

70,000+

Trusted by Legal Professionals

MCLE Credits

Alabama
Approved
Alaska
Approved
Arizona
Approved
Arkansas
Approved
California
Approved
Colorado
Pending
Connecticut
Approved
Delaware
Pending
District of Columbia
No Required
Florida
Approved
Georgia
Approved
Hawaii
Approved
Idaho
Pending
Illinois
Pending
Indiana
Pending
Iowa
Pending
Kansas
Pending
Kentucky
Pending
Louisiana
Pending
Maine
Pending
Maryland
No Required
Massachusetts
No Required
Michigan
No Required
Minnesota
Pending
Mississippi
Pending
Missouri
Approved
Montana
Pending
Nebraska
Pending
Nevada
Pending
New Hampshire
Approved
New Jersey
Approved
New Mexico
Approved
New York
Approved
North Carolina
Pending
North Dakota
Approved
Ohio
Approved
Oklahoma
Pending
Oregon
Pending
Pennsylvania
Approved
Rhode Island
Pending
South Carolina
Pending
South Dakota
No Required
Tennessee
Approved
Texas
Approved
Utah
Pending
Vermont
Approved
Virginia
Not Eligible
Washington
Approved
West Virginia
Pending
Wisconsin
Approved
Wyoming
Pending

Alabama

Requirements

The Alabama State Bar MCLE Commission requires attorneys to complete 12 credits, including 1 ethics, by December 31 of each year. All credits must be reported by February 15 of the following year. A maximum of 12 credits, including 1 ethics credit, may be carried over for 1 year only.  

Formats

  • Attorneys can earn unlimited “live” credit through live seminars, live webcasts, and co-sponsored locations with MyLAWCLE-Alabama approved programs
  • Attorneys are limited to 6 credits per compliance period of “online” programs through MyLAwCLE On-Demand programs