-
Regulatory
-
US
-
General
- Managing Artificial Intelligence-Specific Cybersecurity Risks in the Financial Services Sector March 2024 - Department of the Treasury
- Proposed Rule: Protecting Americans from Harmful Data Broker Practices (Regulation V) December 2024 - CFPB
- Children’s Online Privacy Protection Rule February 2025 - FTC
-
California
- California AB 1008 (Updating CCPA to Include AI Generated Data) September 2024 - California Legislature
- California SB 1223 (Protecting Neural and Biological Data Privacy) September 2024 - California Legislature
-
Colorado
- Final Rules: Colorado Privacy Act March 2023 - Colorado Department of Law
- Colorado SB 21-190 (Privacy Act) July 2021 - Colorado Legislature
-
Delaware
- Delaware HB 154 (Data Privacy and Consumer Protection) May 2023 - Delaware Legislature
-
Iowa
- Iowa SF 262 (Data Privacy Act) March 2023 - Iowa Legislature
-
Maryland
- Maryland SB 541 (Online Data Privacy Act) May 2024 - Maryland Legislature
-
Minnesota
- Minnesota HF 4757 (Consumer Data Privacy Act) June 2024 - Minnesota Legislature
-
Nebraska
- Nebraska LB 1074 (Data Privacy Act) April 2024 - Nebraska Legislature
- Nebraska LB 525 (Agricultural Data Privacy Act) January 2025 - Nebraska Legislature
-
New Hampshire
- New Hampshire SB 255 (Consumer Privacy Statute) March 2024 - Bass Berry
-
New Jersey
- New Jersey SB 332 (Data Privacy Act) January 2024 - New Jersey Legislature
-
New York
- New York Notification of Unauthorized Acquisition of Private Information February 2025 - New York Legislature
- New York Internet Security and Privacy Act February 2025 - New York Legislature
-
Oregon
- Oregon SB 619 (Consumer Privacy Act) June 2023 - Oregon Legislature
-
Tennessee
- Tennessee SB 17/HB1181 (Information Protection Act) April 2023 - Tennessee Legislature
-
-
EU
- EU The Cyber Resilience Act (CRA) October 2024 - Official Journal of the EU
-
-
Memos & Analysis
-
US
-
General
- “Data Privacy Bill in Congress Would Create Federal Enforcement Over Algorithms” June 2022 - DLA Piper
- “DOJ Announces Proposed Rule to Mitigate Data Security Risks Related to AI” March 2024 - DLA Piper (3/24)
- “Trump 2.0 Week 1 Tech Policy Rundown: Pivot on AI but Data Rules Stand” January 2025 - Goodwin
- “DOJ Issues Guidance on Data Export Control Rule” April 2025 - WilmerHale
- “Generative AI: Privacy and Consumer Protection Considerations” May 2023 - Wilson Sonsini
- “Generative Artificial Intelligence, Automated User Interfaces, and the New Laws of Dark Patterns” June 2023 - Arent Fox
- “Data Scraping, Privacy Law, and the Latest Challenge to the Generative AI Business Model” January 1970 - Arent Fox Schiff
- “What’s Next for AI? Six Areas to Watch in 2024” January 2024 - Goodwin
- “The Impact of AI on Your Risk Profile” January 2024 - Cleary Gottlieb
- “The Development of AI and Protecting Student Data Privacy” February 2024 - Arent Fox
- “The Risks of an Operating System Integrated with Artificial Intelligence” July 2024 - Jackson Lewis
- “A Sword and a Shield: AI’s Dual-Natured Role in Cybersecurity” September 2024 - Torys
- “4 Areas to Focus Board Oversight of Data-Related Risks” November 2024 - KPMG
- “Confronting Social Engineering in the Age of Artificial Intelligence” February 2025 - Hogan Lovells
- “For Better or MORSE: Another Settlement Under DOJ’s Civil Cyber-Fraud Initiative” April 2025 - Crowell
- “DOJ Releases Its Data Security Program Compliance Guide” April 2025 - Pillsbury
- “Freshfields Authors US Cybersecurity Practice Guide” April 2025 - Freshfields
- “Cybersecurity Failures Lead to False Claims Act Case Against Government Contractor” April 2025 - Saul Ewing
- “DOJ’s Latest Guidance on the Data Security Program: What’s New?” April 2025 - Troutman Pepper
- “Managing Data Security and Privacy Risks in Enterprise AI” March 2025 - Frost Brown
- “A Civil Money Penalty With Warby Parker Following Cybersecurity Incident” February 2025 - Saul Ewing
- “Cybersecurity Overview: A Survey of Form 10-K Cybersecurity Disclosures by the S&P 100 Companies” December 2024 - Gibson Dunn
- “FCC Announces Administrators for IoT Cybersecurity Labeling Program” December 2024 - Wiley
- “Cyber Risks and Insurance 2025 Forecast” December 2024 - Wiley
- “11 Cybersecurity Blog Posts for 2024” December 2024 - Debevoise & Plimpton
- “Top 10 SEC Cyber/AI Blog Posts for 2024” December 2024 - Debevoise & Plimpton
- “New Year, New Privacy Laws!” January 2025 - Bass Berry
- “3 Steps to Protect Highly Sensitive Assets in an M&A Deal” January 2025 - Procopio
- “FDA Issues Artificial Intelligence-Enabled Device Software Functions Draft Guidance” January 2025 - DLA Piper
- “White House Releases Executive Order to Strengthen and Promote Cybersecurity Innovation” January 2025 - Paul Weiss
- “FTC Adopts Amended Children’s Online Protection Act Rule” January 2025 - Wiley
- “CFPB Proposes Interpretive Rule on Emerging Payment Mechanisms Under Regulation E and Requests Information to Consider Extended Data Privacy Protections” January 2025 - Steptoe
- “CFPB Proposes Interpretive Rule on Emerging Payment Mechanisms Under Regulation E and Requests Information to Consider Extended Data Privacy Protections” January 2025 - Steptoe
- “FTC finalizes changes to COPPA” January 2025 - DLA Piper
- “Privacy, Data and Cybersecurity Newsletter Issue 25” January 2025 - Katten
- “Key Cybersecurity and Privacy Developments in 2024” January 2025 - Paul Weiss
- “FTC Updates to the COPPA Rule Impose New Compliance Obligations for Online Services That Collect Data from Children” January 2025 - Gibson Dunn
- “White House Introduces Cyber Trust Mark Program” January 2025 - Pillsbury
- “AI Legal Landscape: Top Challenges and Strategies in 2025” February 2025 - Arent Fox
- “2024 Privacy, AI & Cybersecurity Year in Review” February 2025 - Troutman Pepper
-
California
- “Honda Settles with the CPPA Over Privacy Violations: Key Takeaways for Businesses” March 2025 - Bass Berry
- “California Court Rejects Attempt to Expand Third-Party Eavesdropping Claims to Internet Communications” April 2025 - Fisher Phillips
- “AB 1008: California Adds Privacy Obligations for AI Model Developers” February 2025 - Wilson Sonsini
- “California Privacy Protection Agency Clarifies Application of the CCPA to Insurance Companies” February 2025 - Ogletree Deakins
- “AI Voice Products Subject to California Invasion of Privacy Claims” February 2025 - Goodwin
- “CPPA Proposed Rulemaking Package Part 1: Cybersecurity Audits” December 2024 - Debevoise & Plimpton
- “California Starts 2025 with More Regulatory Action” January 2025 - Venable
- “California’s AI Laws Are Here: Is Your Business Ready?” February 2025 - Pillsbury
-
Colorado
- “Colorado Unveils New Privacy Rules” December 2024 - Fisher Phillips
-
Delaware
- “Delaware Becomes the Thirteenth State to Enact a Comprehensive Consumer Data Privacy Law” September 2023 - Bass Berry
-
Iowa
- “Iowa Governor Signs Data Privacy Act into Law” March 2023 - Bass Berry
-
Maryland
- “Maryland Lands On Novel Data Privacy Scheme” May 2024 - Bass Berry
-
Minnesota
- “Minnesota Enhances Consumer Data Protections” June 2024 - Bass Berry
-
Nebraska
- “Nebraska Governor Signs Data Privacy Act” April 2024 - Bass Berry
- “Nebraska Introduces First-of-its-Kind Privacy Bill Aimed at Protecting Agricultural Data” February 2025 - ArentFox
-
New Hampshire
- “New Hampshire Comprehensive Privacy Bill Signed into Law” March 2024 - Bass Berry
-
New Jersey
- “Data Brokers Face Slew of Lawsuits Under New Jersey Privacy Law” December 2024 - Ogletree Deakins
- “New Jersey, New Privacy Law” January 2024 - Bass Berry
-
New York
- “Are Your Cybersecurity Controls Ready for the New York State Department of Financial Services’ Deadlines?” April 2025 - Hinshaw
- “New York Health Data Requirements Potentially Ahead” March 2025 - Ogletree Deakins
- “New York Department of Financial Services Provides Cybersecurity Guidance on AI” February 2025 - Wilson Sonsini
- “New York Amends Data Breach Notification Law to Enhance Notification Requirements, Expand Definition of ‘Private Information’” January 2025 - Ogletree Deakins
-
Oregon
- “Oregon Becomes Twelfth State to Enact a Comprehensive Consumer Privacy Law” April 2023 - Bass Berry
-
Tennessee
- “Tennessee Information Protection Act Approved by Lawmakers” April 2023 - Bass Berry
-
Washington
- “Location Data as Health Data? Precedent-Setting Lawsuit Brought Against Retailer Under Washington’s My Health My Data Act” February 2025 - Ogletree Deakins
-
-
EU
- “EU Data Protection, AI and Trade Secrets” March 2025 - Sullivan & Cromwell
- “The EU’s Cyber Resilience Act: New Cybersecurity Requirements for Connected Products and Software” April 2025 - Pillbury
- “EU and UK Data Protection Authorities Are Monitoring Use of Personal Data to Train AI” February 2025 - Wilson Sonsini
- “European Data Protection Roundup: January 2025” February 2025 - Debevoise & Plimpton
- “DORA: Just Over Three Months Until Take Off” September 2024 - Latham & Watkins
- “The EU Cyber Resilience Act Has Entered into Force” December 2024 - Steptoe
- “The EU Cyber Resilience Act: What Businesses Need to Know” November 2024 - BCLP
- “EU Privacy Regulators Confirm That Legitimate Interest Is a Valid Legal Basis for AI Model Training and Deployment” December 2024 - Wilson Sonsini
- “European Data Protection Roundup: Q4 2024” January 2025 - Debevoise & Plimpton
- “Privacy, Data and Cybersecurity Newsletter Issue 25” January 2025 - Katten
-
Other
- “Canada Proposes Cyber Compliance Regime for Canadian Defense Suppliers” March 2025 - Crowell
- “EU and UK Data Protection Authorities Are Monitoring Use of Personal Data to Train AI” February 2025 - Wilson Sonsini
- “European Data Protection Roundup: January 2025” February 2025 - Debevoise & Plimpton
- “Privacy, Data and Cybersecurity Newsletter Issue 25” January 2025 - Katten
-
Data Privacy and Cybersecurity
Table of Contents