Children’s privacy is rapidly evolving beyond traditional COPPA compliance. New state laws, expanding FTC enforcement, age assurance requirements, and app store accountability measures are reshaping how businesses manage data related to minors and teens.

In this episode of Simplifying for Success, Priya Keshav, Founder and CEO of Meru Data, is joined by Nerissa Coyle McGinn, Partner at Loeb & Loeb LLP, to discuss the changing regulatory landscape and what businesses need to do to prepare. The conversation covers key enforcement trends, emerging age verification requirements, app store accountability laws, and the growing expectation for organizations to address children’s privacy through governance and operational practices.

Topics Covered

• Expanding FTC enforcement and its impact on children’s data
• State age assurance and age-appropriate design laws
• App store accountability requirements
• Key lessons from recent enforcement actions
• Age verification, parental controls, and compliance challenges
• Practical steps businesses can take to prepare for evolving requirements

California’s updated CCPA regulations raised the bar for privacy and security governance, introducing phased cybersecurity audit obligations for qualifying businesses beginning in 2026.

In this episode, Priya Keshav, Founder & CEO of Meru Data LLC, and Austin Manes, Privacy Counsel at Herbert Smith Freehills Kramer LLP, provide a practical understanding of what these requirements mean, how to determine whether your organization may be affected, and how to prepare for compliance.

Topics include:

• An overview of the new CCPA cybersecurity audit requirements

• What must be audited, who is responsible, and upcoming compliance deadlines

• Practical strategies to meet key compliance obligations

This webinar is approved by the IAPP - International Association of Privacy Professionals (IAPP) for Continuing Privacy Education (CPE) Credits.

Recent updates to the CCPA Regulations establish clear standards for conducting privacy risk assessments, introducing new obligations around timing, documentation, executive oversight, and ongoing review. For many organizations, these requirements represent a significant shift from informal privacy reviews to structured, auditable compliance processes.

In this webinar, Priya Keshav, Founder & CEO of Meru Data LLC, and Jennifer Sheridan, Founder of JLSheridan Law, will break down:

• When risk assessments are required under the updated regulations.
• What regulators expect to see in a compliant assessment.
• How timelines, updates, and attestations affect operational planning.
• Common pitfalls and practical strategies for readiness.

Join us for a practical discussion designed to help organizations align their data practices with the CCPA’s new risk-based regulatory framework.

The California Delete Act and the Data Rights Online Portal (DROP) system introduce new compliance requirements for businesses managing consumer data and privacy requests. Join us for an informative webinar with Priya Keshav, Founder & CEO of Meru Data LLC, and Jordan L. Fischer, Founder & Managing Partner of Fischer Law LLC, as they discuss the implications of this legislation and what organizations need to know to prepare for the evolving regulatory landscape.

As privacy regulations continue to expand, organizations must ensure their data governance and compliance frameworks are equipped to address new obligations under the California Delete Act and the DROP system. This session will provide practical insights to help businesses understand their responsibilities and establish effective processes for managing deletion requests and regulatory compliance.

Topics Covered:

• Preparing Your Business for Compliance
• Who It Applies To
• Understanding Regulatory Requirements
• Sustainable Compliance Practices

The Federal Trade Commission’s recent settlements and enforcement actions are redefining how organizations handle data consent and retention. In this episode, Priya Keshav, Founder & CEO of Meru Data LLC, and James A. Sherer, Partner at Baker & Hostetler LLP, examine the real‑world implications of these developments for corporate data retention programs.

The conversation highlights what companies need to do to align their retention practices with evolving regulatory expectations while still maintaining operational efficiency. It also outlines practical steps for building sustainable, compliant, and future‑ready data retention frameworks.

Topics covered in this session include:

• Key legal requirements for data retention and data minimization
• Designing effective, cross‑platform data‑retention strategies
• Operational considerations for achieving long‑term, sustainable compliance

Join Priya Keshav and Reena Bajowala on this month's podcast as they discuss simplifying for success in AI. Priya Keshav is the founder and owner of Meru Data, where she helps organizations worldwide simplify and sustain privacy and AI governance programs. Reena Bajowala brings deep experience in AI, cybersecurity, and privacy, advising clients on evaluating AI risks, implementing mitigations, and building compliant governance frameworks. In this episode, they discuss how in-house counsel should evaluate new AI technologies, key AI trends, emerging laws and regulations, their impact on compliance programs, and practical approaches to managing AI risk through effective AI governance.

Listen to Meru Data's podcast exploring the rapidly evolving state privacy enforcement landscape and the growing complexities of AdTech compliance. In this episode, we break down the latest regulatory developments, including the California Privacy Protection Agency’s (CPPA) recent enforcement action against Tractor Supply Company and the emergence of a new multi-state privacy enforcement consortium.

Gain practical, actionable insights to strengthen your organization’s privacy program as enforcement risks grow and expectations rise. This session will help you:

• Understand the CPPA’s latest enforcement action against Tractor Supply Company.
• Insights into the objectives and implications of the newly formed state privacy consortium
• Discuss the broader impact these changes could have on your privacy program.
• Guidance on anticipating how these regulatory changes may affect your privacy operations. including tips for training and embedding compliance into business operations

This session is approved by the International Association of Privacy Professionals (IAPP) for Continuing Privacy Education (CPE) credits.

Speakers

Priya Keshav, Founder & CEO, Meru Data LLC
Priya Keshav helps organizations proactively manage privacy risks involving data governance, AI, AdTech, data mapping, and compliance operations. With over 20 years of consulting experience including leadership roles at KPMG she brings deep expertise in privacy, cyber-crime response, eDiscovery, and forensic investigations. Priya frequently speaks at leading industry events across privacy, security, and AI governance.

Sundeep Kapur, Partner, Orrick, Herrington & Sutcliffe LLP
Sundeep Kapur advises global organizations on privacy compliance, regulatory investigations, AdTech, and emerging technology law. With extensive experience across U.S. state privacy laws, FTC regulations, GDPR, children’s safety laws, and AI frameworks, he is a recognized industry leader named Outstanding Contributor to Legal Affairs by the IAB in 2024. He plays a key role in shaping industry-wide AdTech privacy initiatives and serves on the Law360 2025 Cybersecurity & Privacy Editorial Advisory Board.

Listen to Meru Data’s podcast — Cross Border Privacy Rules (CBPR): A Comprehensive Overview

In this episode, we dive into the Cross Border Privacy Rules (CBPR) system, a globally recognized framework designed to streamline data transfers across jurisdictions. As organizations face increasing complexity in meeting international privacy standards, the CBPR certification offers a trusted, interoperable mechanism for managing cross-border data flows — adopted by economies such as the USA, Canada, Japan, Korea, Singapore, Mexico, the Philippines, Taipei, and Australia.

Join our expert panel as they unpack:

• What is the Global CBPR?
• How has the CBPR changed over time and what is its historical significance?
• How does it work? What kinds of companies can get certified?
• What are the benefits of participating?
• Are there areas for growth in the Global CBPR?
• How does CBPR interact with legislative frameworks?

🎙 Speakers:
Priya Keshav, Founder & CEO, Meru Data LLC – A leading voice in privacy, AI governance, and information risk management with 20+ years of consulting experience.
Dr. Divya Sridhar, VP, Global Privacy Division, BBB National Programs – A seasoned privacy policy expert overseeing the CBPR and global self-regulation programs.
Perry Li, Legal Director, OpenSpace

This webinar episode is approved by the International Association of Privacy Professionals (IAPP) for Continuing Privacy Education (CPE) Credits.

🎧 Tune in to gain actionable insights into how CBPR supports compliant, secure, and seamless cross-border data operations in a connected world.