In this discussion, Alan delves into the requirements for data protection impact assessments under US state consumer privacy and related laws, addressing the scope of these obligations, potential constitutional challenges, and why these assessments remain practically necessary—even if ultimately limited by the courts.

For more on achieving compliance and mitigating privacy risks, watch the full episode here.