Sara Pegarella

Sara Pegarella

Widener University School of Law graduate, Managing Legal Editor at TermsFeed.

Sara graduated from Widener University School of Law in 2010, and has a B.A. in English/writing. After years of technical/legal writing and compliance consulting, she began focusing on editing, and managing teams of writers. She's also a certified Integrative Health Practitioner and health coach. When not finding typos, she's gardening, reading, listening to health and biohacking podcasts, and spending time in nature.

Children and Teens' Online Privacy Protection Act (COPPA 2.0)

The Children and Teens Online Privacy Protection Act (known as COPPA 2.0) was passed on July 30, 2024. It aims to protect the privacy of children and teens online. This law updates the original Children and Teens Online Privacy Protection Act (COPPA) with increased protections and requirements for websites whose...

California AB 2426: Consumer Protection: False Advertising: Digital Goods

California AB 2426 was approved by California Governor Gavin Newsom on September 24, 2024. The law is designed to protect California consumers from false advertising as it applies to digital goods. This article will explain what this law is, who it applies to, and how to comply with it. What is California...

Saudi Arabia Personal Data Protection Law (PDPL)

Saudi Arabia joined a growing number of countries that have enacted privacy and data protection laws with its Personal Data Protection Law (PDPL), which took effect on September 14th, 2023. This article explains what the PDPL is, who it applies to, how to comply with the PDPL, and what happens if...

Rhode Island Data Transparency and Privacy Protection Act (DTPPA)

The Rhode Island Data Transparency and Privacy Protection Act (DTPPA) is a comprehensive privacy law designed to give Rhode Islanders greater control over their personal information, with a central focus on data transparency. As the latest addition to the growing patchwork of U.S. privacy laws, the DTPPA includes many familiar compliance...

Privacy Policy For When You're Using Cloud Service Providers (CSPs)

Almost all websites use cloud hosting services these days, managed by third-party providers. These hosting services are also known as Cloud Service Providers (CSPs). If you're struggling to figure out whether you need a Privacy Policy, whether your policy should disclose that you are using a CSP, or how to talk...

GDPR With No Data Collection

Organizations that collect or use European Union (EU) residents' personal data must comply with the General Data Protection Regulation (GDPR). But what about the owners of websites and apps that don't collect data? This article explains whether the GDPR applies if you don't collect data and how to comply with the...