-
Regulatory
-
US
-
General
- Trump’s EO on Combating Cybercrime, Fraud, and Predatory Schemes Against American Citizens March 2026 - The White House
- Trump’s Cyber Strategy for America March 2026 - The White House
- Trump’s EO on Sustaining Select Efforts to Strengthen the Nation’s Cybersecurity and Amending EO 13694 and EO 14144 June 2025 - The White House
- Children’s Online Privacy Protection Rule February 2025 - FTC
- Biden’s Executive Order on Strengthening and Promoting Innovation in the Nation’s Cybersecurity January 2025 - The White House
- Proposed: HIPPA Security Rule to Strengthen the Cybersecurity of Electronic Protected Health Information January 2025 - Department of Health and Human Services
- Proposed Rule: Protecting Americans from Harmful Data Broker Practices (Regulation V) December 2024 - CFPB
- Managing Artificial Intelligence-Specific Cybersecurity Risks in the Financial Services Sector March 2024 - Department of the Treasury
-
California
- California AB 1008 (Updating CCPA to Include AI Generated Data) September 2024 - California Legislature
- California SB 1223 (Protecting Neural and Biological Data Privacy) September 2024 - California Legislature
-
Colorado
- Final Rules: Colorado Privacy Act March 2023 - Colorado Department of Law
- Colorado SB 21-190 (Privacy Act) July 2021 - Colorado Legislature
-
Delaware
- Delaware HB 154 (Data Privacy and Consumer Protection) May 2023 - Delaware Legislature
-
Iowa
- Iowa SF 262 (Data Privacy Act) March 2023 - Iowa Legislature
-
Maryland
- Maryland SB 541 (Online Data Privacy Act) May 2024 - Maryland Legislature
-
Minnesota
- Minnesota HF 4757 (Consumer Data Privacy Act) June 2024 - Minnesota Legislature
-
Nebraska
- Nebraska LB 525 (Agricultural Data Privacy Act) January 2025 - Nebraska Legislature
- Nebraska LB 1074 (Data Privacy Act) April 2024 - Nebraska Legislature
-
New Hampshire
- New Hampshire SB 255 (Consumer Privacy Statute) March 2024 - Bass Berry
-
New Jersey
- New Jersey SB 332 (Data Privacy Act) January 2024 - New Jersey Legislature
-
New York
- Urgent Cybersecurity Advisory: Elevated Threats Amid Escalating Situation in Iran July 2025 - NY Department of Health
- New York Notification of Unauthorized Acquisition of Private Information February 2025 - New York Legislature
- New York Internet Security and Privacy Act February 2025 - New York Legislature
-
Oregon
- Oregon SB 619 (Consumer Privacy Act) June 2023 - Oregon Legislature
-
Tennessee
- Tennessee SB 17/HB1181 (Information Protection Act) April 2023 - Tennessee Legislature
-
-
EU
- EU The Cyber Resilience Act (CRA) October 2024 - Official Journal of the EU
-
-
Memos & Analysis
-
US
-
General
- “Neural Data and the New Wave of Biometric Privacy Protections” February 2026 - Bass Berry Sims
- “Wellness Trackers, ‘Medical’ Status, and Cybersecurity: How FDA, FTC, and State Laws Interlock” February 2026 - Troutman Pepper Locke
- “Key Data Protection Changes Under the Data (Use and Access) Act 2025 Comes Into Force on February 5 2026” February 2026 - A&O Shearman
- “CISA Reopens Comment Opportunity on Cyber Incident Reporting Requirements” February 2026 - Wiley
- “AI Risk Meets Cyber Governance: NIST’s Draft Cyber AI Profile” January 2026 - Goodwin
- “A New Era of US Privacy Enforcement Has Only Just Begun: 2025 Trends and Outlook for 2026 and Beyond” January 2026 - ArentFox Schiff
- “Navigating the Where, When, and What of Data Privacy Risk Assessments” January 2026 - Clark Hill
- “NIST Releases Draft Framework for AI Cybersecurity, Solicits Public Comment: What Organizations Using or Deploying AI Should Know” January 2026 - Crowell
- “Ransomware on the Rise: The Expanding Role of Legal Counsel in Incident Response” October 2025 - Crowell
- “Key Takeaways from the 2025 Private Credit Connect: East conference” October 2025 - DLA Piper
- “Your Website Chatbot Could Cost Your Business: What You Need to Know About Rising Digital Wiretapping Risks in Florida and Beyond” October 2025 - Fisher Phillips
- “DOJ and Treasury Undertake Significant Enforcement Actions Targeting Southeast Asian Scam Networks, Underscoring Cyber-Enabled Fraud as an Enforcement Priority” October 2025 - Paul Weiss
- “State App Store Accountability Acts Introduce New Obligations for App Developers” October 2025 - Wiley
- “On-Premises Oracle EBS Systems at Risk Due to CL0P Exploit” October 2025 - Lowenstein Sandler
- “U.S. Senators Propose ‘MIND Act’ to Study and Recommend National Standards for Protecting Consumers’ Neural Data” October 2025 - Davis Wright Tremaine
- “October 6 Compliance Deadline for DOJ’s Data Security Program: What Companies Need to Know” October 2025 - Cooley
- “Fall 2025 Regulatory Roundup: Top U.S. Privacy and AI Developments for Businesses to Track” September 2025 - Hinshaw
- “European General Court Confirms Validity of the EU–U.S. Data Privacy Framework” September 2025 - Baker Botts
- “Salesforce Users: Organizations Using the Salesloft Drift AI Chat Agent with Salesforce Must Check Their Presence for Compromise” September 2025 - Lowenstein Sandler
- “Additional Analysis on DOD’s Final Rule for the Cybersecurity Maturity Model Certification Program” September 2025 - Wiley
- “FTC COPPA Enforcement – Still Alive and Well” September 2025 - Mintz
- “The EU-US Data Privacy Framework Survives an Annulment Challenge” September 2025 - BCLP
- “Salesloft Drift Supply Chain Attack Leads to Widespread Data Theft” September 2025 - McDermott
- “Multistate Privacy Enforcement Sweep Puts Global Privacy Control in the Spotlight” September 2025 - Goodwin
- “States Ramp Up Enforcement of Privacy Opt-Out Compliance” September 2025 - Venable
- “Series of Major Data Breaches Targeting the Insurance Industry” August 2025 - Crowell
- “Federal Jury Finds Against Meta for Collecting Data from Flo Health” August 2025 - Robinson+Cole
- “CISA Releases Malware Analysis Report for Microsoft SharePoint Vulnerabilities” August 2025 - Robinson+Cole
- “DOJ Ends July 2025 with Two Groundbreaking FCA Settlements in the Cybersecurity Space” August 2025 - Gibson Dunn
- “The Growing Threat of AI Deepfake Attacks” August 2025 - The D&O Diary
- “NYDFS Imposes $2M Penalty for Violations of its Cybersecurity Regulation” August 2025 - Pillsbury
- “Hardening Software Security: DOJʼs Civil Cyber Fraud Settlements Continue to Illumina[te] the Importance of Cybersecurity” August 2025 - Crowell
- “AI and Privacy on a Legal Collision Course: Steps Businesses Should Take Now” August 2025 - Baker Donelson
- “Privacy Legislation: July 2025 Update” July 2025 - Frost Brown Todd
- “AI Governance and Data Minimization in the 5G Era: What Employers and Providers Must Consider Now” July 2025 - Fisher Phillips
- “American Medical Association Adopts Landmark Policy on Neural Data Privacy” July 2025 - Cooley
- “July 2025 Privacy Compliance Countdown: Key Deadlines for Five State Privacy Laws and DOJ’s Bulk Sensitive Data Rule” July 2025 - Hinshaw
- “Update: Enforcement of DOJ Data Security Program Set to Begin July 9” July 2025 - Wiley
- “When Does a Service Provider Become Liable for Its Users’ Piracy? The Supreme Court Grants Cert in Cox v. Sony to Address Issues of Contributory Infringement and Willful Infringement” July 2025 - Crowell
- “A Closer Look at the Data Security Requirements in DOJ’s Bulk Data Rule” June 2025 - Venable
- “Navigating Consent: Emerging Trends in Children’s Data Privacy Across APAC” June 2025 - A&O Shearman
- “OCR’s Risk Analysis Initiative: Lessons From Recent HIPAA Enforcement Actions” June 2025 - ArentFox Schiff
- “NSA Issues Cybersecurity Guidance and Best Practices for AI Systems” June 2025 - Davis Wright Tremaine
- “Where Cybersecurity Maturity Meets Confidence in C-suite and Board Leadership” June 2025 - Deloitte
- “Trump Executive Order Puts the Spotlight on Foreign Cyber Threats, Managing AI Vulnerabilities, and Secure Software Development” June 2025 - Debevoise & Plimpton
- “DOJ Publishes Final Rule Restricting Bulk Cross-Border Data Transfers of Sensitive Data to Foreign Persons” May 2025 - Bass Berry Sims
- “Trump 2.0 Tech Policy Rundown: 100 Days in, Federal Agencies Shift AI, Privacy, and Governance Priorities” May 2025 - Goodwin
- “Clearview AI Settlement Approved in Face-Scan Privacy Lawsuit” May 2025 - Wilson Sonsini
- “DoD Specifies Implementation Requirements for NIST 800-171 Cyber Standard” May 2025 - Crowell
- “Clock Ticking: DOJ’s New Data Security Rule Requires Compliance by July 8” May 2025 - Robinson Cole
- “FTC Order with GoDaddy Finalized Over Lax Data Security” May 2025 - Robinson Cole
- “Data Breach Lawsuits Surge Against Chord Specialty Dental Partners” May 2025 - Robinson Cole
- “AI Service Provider Faces Class Actions Over Catholic Health Data Breach” May 2025 - Robinson Cole
- “FDPIC Confirms Direct Applicability of Data Protection Law to AI and Outlines Regulatory Approach” May 2025 - A&O Shearman
- “Financial Services Industry Petitions the SEC for a Rulemaking to Amend the Cybersecurity Risk Management, Strategy, Governance and Incident Disclosure Rule” May 2025 - Debevoise & Plimpton
- “Maturing Compliance with the Bulk Sensitive Data Rule (Data Security Program) before the July 8, 2025 Safe Harbor Expires” May 2025 - Debevoise & Plimpton
- “Smoothing Privacy Contracting: Six Ways to Reduce Friction in Data Processing Agreements” May 2025 - Venable
- “DOJ Releases Guidance on Data Security Program” April 2025 - Davis Polk
- “DOJ New Data Transfer Rule Impacts Hiring, Business Ops + Vendor Mgmt: Time to Review Your Privacy + Cybersecurity Program” April 2025 - Jackson Lewis
- “Navigating the DOJ’s New Data Transfer Rule: Implications and Compliance Requirements” April 2025 - ArentFox Schiff
- “Data Security Program, Medicare Advantage, Colorado Insurance Requirements & More” April 2025 - Faegre Drinker
- “Privacy Enforcement: Shift Toward Cookie Consent?” April 2025 - Debevoise & Plimpton
- “DOJ Issues Guidance on Data Export Control Rule” April 2025 - WilmerHale
- “For Better or MORSE: Another Settlement Under DOJ’s Civil Cyber-Fraud Initiative” April 2025 - Crowell
- “DOJ Releases Its Data Security Program Compliance Guide” April 2025 - Pillsbury
- “Freshfields Authors US Cybersecurity Practice Guide” April 2025 - Freshfields
- “Cybersecurity Failures Lead to False Claims Act Case Against Government Contractor” April 2025 - Saul Ewing
- “DOJ’s Latest Guidance on the Data Security Program: What’s New?” April 2025 - Troutman Pepper
- “Managing Data Security and Privacy Risks in Enterprise AI” March 2025 - Frost Brown
- “Confronting Social Engineering in the Age of Artificial Intelligence” February 2025 - Hogan Lovells
- “A Civil Money Penalty With Warby Parker Following Cybersecurity Incident” February 2025 - Saul Ewing
- “AI Legal Landscape: Top Challenges and Strategies in 2025” February 2025 - ArentFox Schiff
- “2024 Privacy, AI & Cybersecurity Year in Review” February 2025 - Troutman Pepper
- “Insights FTC Finalizes Amendments to Rule Protecting Children’s Data” January 2025 - Wilson Elser
- “Trump 2.0 Week 1 Tech Policy Rundown: Pivot on AI but Data Rules Stand” January 2025 - Goodwin
- “New Year, New Privacy Laws!” January 2025 - Bass Berry
- “3 Steps to Protect Highly Sensitive Assets in an M&A Deal” January 2025 - Procopio
- “FDA Issues Artificial Intelligence-Enabled Device Software Functions Draft Guidance” January 2025 - DLA Piper
- “White House Releases Executive Order to Strengthen and Promote Cybersecurity Innovation” January 2025 - Paul Weiss
- “FTC Adopts Amended Children’s Online Protection Act Rule” January 2025 - Wiley
- “CFPB Proposes Interpretive Rule on Emerging Payment Mechanisms Under Regulation E and Requests Information to Consider Extended Data Privacy Protections” January 2025 - Steptoe
- “FTC finalizes changes to COPPA” January 2025 - DLA Piper
- “Privacy, Data and Cybersecurity Newsletter Issue 25” January 2025 - Katten
- “Key Cybersecurity and Privacy Developments in 2024” January 2025 - Paul Weiss
- “FTC Updates to the COPPA Rule Impose New Compliance Obligations for Online Services That Collect Data from Children” January 2025 - Gibson Dunn
- “White House Introduces Cyber Trust Mark Program” January 2025 - Pillsbury
- “Cybersecurity Overview: A Survey of Form 10-K Cybersecurity Disclosures by the S&P 100 Companies” December 2024 - Gibson Dunn
- “FCC Announces Administrators for IoT Cybersecurity Labeling Program” December 2024 - Wiley
- “Cyber Risks and Insurance 2025 Forecast” December 2024 - Wiley
- “11 Cybersecurity Blog Posts for 2024” December 2024 - Debevoise & Plimpton
- “Top 10 SEC Cyber/AI Blog Posts for 2024” December 2024 - Debevoise & Plimpton
- “Key Insights: DOJ’s Proposed Rule to Protect Bulk Sensitive Personal Data: What Companies Need to Know” November 2024 - Venable
- “Biden Administration Proposes to Limit Access to Sensitive Personal Data by Countries of Concern” November 2024 - Debevoise & Plimpton
- “FinCEN Warns of Criminal Use of Deepfake Technology to Circumvent Controls” November 2024 - Davis Wright Tremaine
- “Updates on Cybersecurity Requirements for Government Contractors” November 2024 - Wiley
- “4 Areas to Focus Board Oversight of Data-Related Risks” November 2024 - KPMG
- “Trends in US Cybersecurity Regulation” October 2024 - Mayer Brown
- “A Sword and a Shield: AI’s Dual-Natured Role in Cybersecurity” September 2024 - Torys
- “The Risks of an Operating System Integrated with Artificial Intelligence” July 2024 - Jackson Lewis
- “DOJ Announces Proposed Rule to Mitigate Data Security Risks Related to AI” March 2024 - DLA Piper (3/24)
- “The Development of AI and Protecting Student Data Privacy” February 2024 - Arent Fox
- “What’s Next for AI? Six Areas to Watch in 2024” January 2024 - Goodwin
- “The Impact of AI on Your Risk Profile” January 2024 - Cleary Gottlieb
- “Unpacking the Executive Order on AI (for Data Privacy)” November 2023 - Polsinelli
- “Data Scraping, Privacy Law, and the Latest Challenge to the Generative AI Business Model” July 2023 - ArentFox Schiff
- “Generative Artificial Intelligence, Automated User Interfaces, and the New Laws of Dark Patterns” June 2023 - Arent Fox
- “Generative AI: Privacy and Consumer Protection Considerations” May 2023 - Wilson Sonsini
- “Data Privacy Bill in Congress Would Create Federal Enforcement Over Algorithms” June 2022 - DLA Piper
-
California
- “California Attorney General Secures Record CCPA Settlement: Cross-Device Opt-Outs Now a System-Level Obligation” February 2026 - Lowenstein Sandler
- “California Imposes Largest CCPA Fine to Date on Disney” February 2026 - Clark Hill
- “Don’t Be Spooked by 2026 Privacy Compliance Regulations” October 2025 - Hinshaw
- “Privacy Opt-Outs Remain in the Crosshairs: Tractor Supply Faces Largest CPPA Fine to Settle Privacy Allegations” October 2025 - Venable
- “California Finalizes Pivotal CCPA Regulations on AI, Cyber Audits, and Risk Governance” October 2025 - Wiley
- “California Enacts New Privacy Laws as Other States Expand Data Privacy Regulations and Enforcement Focus” October 2025 - Venable
- “The California Opt Me Out Act: What it Means for Businesses Subject to the California Consumer Privacy Act” October 2025 - Clark Hill
- “California Privacy Protection Agency Fines Tractor Supply $1.35M for Privacy Law Violations” October 2025 - Holland & Knight
- “CCPA 2025 Updated Regulations: What’s New, What’s Next, and What to do” September 2025 - DLA Piper
- “The Golden State’s Latest Guardrails for Consumer Privacy” September 2025 - Bass Berry Sims
- “Cybersecurity Audits Under the California Consumer Privacy Act (CCPA)” September 2025 - Faegre Drinker
- “California, Colorado and Connecticut Keep Data Privacy Enforcement Pressure on with Joint Enforcement Sweep” September 2025 - Crowell
- “12 California Bills Employers Should Watch as State Lawmakers Sign Off for 2025” September 2025 - Fisher Phillips
- “Amendments to the COPPA Rule Now in Effect” August 2025 - Bass Berry Sims
- “CPPA Regulations Are Moving Forward: Here is What You Need To Know” August 2025 - Mintz
- “The CPPA Finalizes Rules on ADMT, Risk Assessments, and Cybersecurity Audits” August 2025 - Baker Botts
- “California Privacy Regulator Finalizes Automated Decisionmaking, Cybersecurity, and Risk Assessment Regulations” July 2025 - Davis Wright Tremaine
- “CPPA Approves New CCPA Regulations on AI, Cybersecurity, and Risk Governance, and Advances Updated Data Broker Regulations” July 2025 - Wilson Sonsini
- “New California Regs Will Impact Your AI and Privacy Policies” July 2025 - Fisher Phillips
- “Don’t Delay! California Likely to Soon Require Data Breach Notifications to be Provided to Consumers Within 30 Days” July 2025 - Fisher Phillips
- “CCPA Health Check: Key Compliance Lessons from the Healthline Settlement” July 2025 - Venable
- “CPPA Adopts Long Awaited Rulemaking Package “ July 2025 - Debevoise & Plimpton
- “California Regulator Finalizes CCPA Rules for Automated Decision Making, Cybersecurity Audits and Risk Assessments” June 2025 - Katten
- “CPPA Board Opens Draft Regulations for Public Comment” May 2025 - Wilson Sonsini
- “State Privacy Enforcement Ramp-Up Continues with New Actions in California and Texas” May 2025 - Wiley
- “California Court Rejects Attempt to Expand Third-Party Eavesdropping Claims to Internet Communications” April 2025 - Fisher Phillips
- “Honda Settles with the CPPA Over Privacy Violations: Key Takeaways for Businesses” March 2025 - Bass Berry
- “AB 1008: California Adds Privacy Obligations for AI Model Developers” February 2025 - Wilson Sonsini
- “California Privacy Protection Agency Clarifies Application of the CCPA to Insurance Companies” February 2025 - Ogletree Deakins
- “AI Voice Products Subject to California Invasion of Privacy Claims” February 2025 - Goodwin
- “California’s AI Laws Are Here: Is Your Business Ready?” February 2025 - Pillsbury
- “California Starts 2025 with More Regulatory Action” January 2025 - Venable
- “CPPA Proposed Rulemaking Package Part 1 – Cybersecurity Audits” December 2024 - Debevoise & Plimpton
-
Colorado
- “Don’t Be Spooked by 2026 Privacy Compliance Regulations” October 2025 - Hinshaw
- “Key Takeaways From the Annual Colorado Privacy Summit” October 2025 - Ballard Spahr
- “Colorado Privacy Act Rules Amendments Address Consent for Minors’ Use of Addictive Features” October 2025 - McDermott
- “Colorado Tightens Rules on Minors’ Online Data: Are You Ready for October 1?” September 2025 - Lowenstein Sandler
- “California, Colorado and Connecticut Keep Data Privacy Enforcement Pressure on with Joint Enforcement Sweep” September 2025 - Crowell
- “PTFA Privacy Claims: Is a Little-known Colorado Statute the New Right to Publicity? September 2025 - Clark Hill
- “Colorado Unveils New Privacy Rules” December 2024 - Fisher Phillips
- “Unpacking Proposed Amendments to Colorado’s Privacy Act Rules” November 2024 - Hinshaw
-
Connecticut
- “Connecticut Senate Weighs New Requirements For Large-Scale Data Breachers: 4 Ways to Prepare” February 2026 - Fisher Phillips
- “California, Colorado and Connecticut Keep Data Privacy Enforcement Pressure on with Joint Enforcement Sweep” September 2025 - Crowell
- “No More Warnings: Ignoring AG Costs $85,000” July 2025 - Mintz
-
Delaware
-
Florida
-
Iowa
- “Iowa Governor Signs Data Privacy Act into Law” March 2023 - Bass Berry
-
Kentucky
-
Louisiana
- “Apps and Minors: New Compliance Frontiers and Risks in Louisiana, Utah, and Texas” July 2025 - Bass Berry Sims
-
Maryland
- “Maryland Lands On Novel Data Privacy Scheme” May 2024 - Bass Berry
-
Michigan
- “Eyes on Michigan: What Businesses Need to Know About Pending Consumer Privacy and Identity Theft Legislation” September 2025 - Fisher Phillips
-
Minnesota
- “Minnesota Consumer Data Privacy Act: What Businesses Need to Know” July 2025 - Frost Brown Todd
- “July 2025 Privacy Compliance Countdown: Key Deadlines for Five State Privacy Laws and DOJ’s Bulk Sensitive Data Rule” July 2025 - Hinshaw
- “Minnesota Enhances Consumer Data Protections” June 2024 - Bass Berry
-
Missouri
-
Montana
- “Big Sky, Bigger Privacy: Montana Broadens Its Consumer Data Privacy Act” May 2025 - Bass Berry Sims
-
Nebraska
- “Nebraska Introduces First-of-its-Kind Privacy Bill Aimed at Protecting Agricultural Data” February 2025 - ArentFox
- “Nebraska Governor Signs Data Privacy Act” April 2024 - Bass Berry
-
New Hampshire
- “New Hampshire Comprehensive Privacy Bill Signed into Law” March 2024 - Bass Berry
-
New Jersey
- “Proposed New Jersey Regulations Would Require Major Privacy Compliance Shifts for Businesses” July 2025 - Fisher Phillips
- “New Jersey Proposes New Privacy Rules That Would Impact Compliance” June 2025 - Wiley
- “Insights from the Recent FAQs on New Jersey Data Privacy Law” January 2025 - Wilson Elser
- “Data Brokers Face Slew of Lawsuits Under New Jersey Privacy Law” December 2024 - Ogletree Deakins
- “New Jersey, New Privacy Law” January 2024 - Bass Berry
-
New York
- “July 2025 Privacy Compliance Countdown: Key Deadlines for Five State Privacy Laws and DOJ’s Bulk Sensitive Data Rule” July 2025 - Hinshaw
- “New York Department of Health Issues ‘Urgent’ Cybersecurity Warning to New York Health Care Providers Following U.S. Military Action in Iran” July 2025 - Crowell
- “New York’s Child Data Protection Act Is Now In Effect: What You Need to Do” June 2025 - Goodwin
- “The New York Public Service Commission Takes Steps to Protect Critical Energy Infrastructure and Utility Customers from Growing Cybersecurity Threats” June 2025 - Hodgson Russ
- “Are Your Cybersecurity Controls Ready for the New York State Department of Financial Services’ Deadlines?” April 2025 - Hinshaw
- “New York Health Data Requirements Potentially Ahead” March 2025 - Ogletree Deakins
- “New York Department of Financial Services Provides Cybersecurity Guidance on AI” February 2025 - Wilson Sonsini
- “New York Amends Data Breach Notification Law to Enhance Notification Requirements, Expand Definition of ‘Private Information’” January 2025 - Ogletree Deakins
- “NYDFS Issues Guidance Concerning Cybersecurity Risks Posed by Artificial Intelligence” November 2024 - Baker Botts
- “New York Department of Financial Services’ New Enhanced Cybersecurity Requirements Effective November 1, 2024” October 2024 - Pillsbury
- “NYDFS Issues Letter Highlighting Cybersecurity Risks of AI” October 2024 - McDermott Will & Emery
- “Managing Cybersecurity Risks Arising from AI – New Guidance from the NYDFS” October 2024 - Debevoise
- “DFS Issues Circular Letter Addressing Cybersecurity Risks Related to AI” October 2024 - ArentFox Schiff
- “NYDFS Publishes Guidance on AI-Related Cybersecurity Risks” October 2024 - Goodwin
- “NYDFS Issues Guidance on Artificial-Intelligence-Related Cybersecurity Risks” October 2024 - Alston & Bird
-
Oregon
- “Oregon Becomes Twelfth State to Enact a Comprehensive Consumer Privacy Law” April 2023 - Bass Berry
-
Pennsylvania
- “Pennsylvania House Passes Consumer Privacy Bill” October 2025 - Fisher Phillips
-
Rhode Island
-
Tennessee
- “July 2025 Privacy Compliance Countdown: Key Deadlines for Five State Privacy Laws and DOJ’s Bulk Sensitive Data Rule” July 2025 - Hinshaw
- “Tennessee Information Protection Act Approved by Lawmakers” April 2023 - Bass Berry
-
Texas
- “Apps and Minors: New Compliance Frontiers and Risks in Louisiana, Utah, and Texas” July 2025 - Bass Berry Sims
- “New Texas AI Law Affects Collection and Use of Biometric Identifiers” July 2025 - Frost Brown Todd
- “Texas Cyber Command: New Authority for Statewide Cybersecurity Coordination” July 2025 - Pillsbury
- “State Privacy Enforcement Ramp-Up Continues with New Actions in California and Texas” May 2025 - Wiley
-
Utah
- “Apps and Minors: New Compliance Frontiers and Risks in Louisiana, Utah, and Texas” July 2025 - Bass Berry Sims
-
Washington
- “Location Data as Health Data? Precedent-Setting Lawsuit Brought Against Retailer Under Washington’s My Health My Data Act” February 2025 - Ogletree Deakins
-
-
EU
- “EU Data Act: Key Provisions and What You Need to Know” October 2025 - Debevoise & Plimpton
- “EU Commission Publishes Call for Evidence on Digital Simplification Agenda” October 2025 - A&O Shearman
- “European General Court Confirms Validity of the EU–U.S. Data Privacy Framework” September 2025 - Baker Botts
- “The EU-US Data Privacy Framework Survives an Annulment Challenge” September 2025 - BCLP
- “EU Data Act: What Businesses Need to Know” September 2025 - Latham & Watkins
- “Cloud GDPR Risks Highlighted by European Commission Ruling Over Microsoft 365 Use” August 2025 - Crowell
- “The EU Data Act: Impact on Connected Products and Device Manufacturers” August 2025 - Faegre Drinker
- “Understanding Switching Termination Rights Under the Data Act” July 2025 - DLA Piper
- “Children first: How Ofcom’s Children’s Code and Age Checks Change the Digital Game” July 2025 - Crowell
- “EU Initiates Renewal of UK Adequacy Decision Following the UK’s Adoption of the Data (Use and Access) Act 2025” June 2025 - Katten
- “DORA Delegated Regulation on Threat-Led Penetration Testing Published in Official Journal” June 2025 - Katten
- “Data Protection Authorities in the EU Focus on AI Models and Continue to Develop Guidance” May 2025 - Wilson Sonsini
- “CJEU Publishes an Updated Fact Sheet Summarising Key Case Law on Protection of Personal Data” May 2025 - A&O Shearman
- “UK Publishes New Codes for Software Security and Warns on AI Cybersecurity Divide” May 2025 - Crowell
- “European Commission Publishes Proposals for Simplification of the GDPR” May 2025 - A&O Shearman
- “The EU’s Cyber Resilience Act: New Cybersecurity Requirements for Connected Products and Software” April 2025 - Pillbury
- “EU Data Protection, AI and Trade Secrets” March 2025 - Sullivan & Cromwell
- “EU and UK Data Protection Authorities Are Monitoring Use of Personal Data to Train AI” February 2025 - Wilson Sonsini
- “European Data Protection Roundup: January 2025” February 2025 - Debevoise & Plimpton
- “European Data Protection Roundup: Q4 2024” January 2025 - Debevoise & Plimpton
- “Privacy, Data and Cybersecurity Newsletter Issue 25” January 2025 - Katten
- “The EU Cyber Resilience Act Has Entered into Force” December 2024 - Steptoe
- “EU Privacy Regulators Confirm That Legitimate Interest Is a Valid Legal Basis for AI Model Training and Deployment” December 2024 - Wilson Sonsini
- “New EU Law on Security Requirements for Products with Digital Elements” November 2024 - Dechert
- “European Commission Adopts Implementing Regulation on Cybersecurity Risk Management and Reporting” November 2024 - Dechert
- “The EU Cyber Resilience Act: What Businesses Need to Know” November 2024 - BCLP
- “A Reminder That DORA is Less Than Three Months Away and Will Apply to US and UK CTPPs” October 2024 - Goodwin
- “Navigate the Shifting Sands of EU Cybersecurity Laws” October 2024 - Steptoe
- “DORA: Just Over Three Months Until Take Off” September 2024 - Latham & Watkins
-
Other
- “The Future of Agentic AI and its Data Protection Implications: the UK ICO’s Initial Assessment” January 2026 - A&O Shearman
- “English Beat GDPR Decline: UK Reforms Key Elements of Its Data Privacy Scheme” October 2025 - Bass Berry Sims
- “The Middle Eastʼs Big Bet on Artificial Intelligence and Data Security” September 2025 - Crowell
- “Mitigating Third-party Provider Cybersecurity Risks: Navigating the Australian Legal Framework” August 2025 - A&O Shearman
- “Does the Data (Use and Access) Act Deliver Innovation and Opportunity?” August 2025 - A&O Shearman
- “DSIT’s Latest Findings on AI, Other Emerging Technologies and Cyber Security” August 2025 - Crowell
- “Information Commissioner’s Office publishes 2024–2025 Annual Report” August 2025 - A&O Shearman
- “The Data (Use and Access) Act” July 2025 - Mayer Brown
- “ICO Issues Guidance on the Data (Use and Access) Act” July 2025 - A&O Shearman
- “UK Government’s Take on Ransomware: Insights from the Recent Consultation” July 2025 - Crowell
- “You Must Be This Tall to Click: The Online Safety Act and Age-Appropriate Access” June 2025 - Katten
- “EU Initiates Renewal of UK Adequacy Decision Following the UK’s Adoption of the Data (Use and Access) Act 2025” June 2025 - Katten
- “Data (Use and Access) Act gets Royal Assent” June 2025 - A&O Shearman
- “The UK’s Data Protection Reforms Finally Arrive: What You Should Know About the Data (Use and Access) Act” June 2025 - Paul Weiss
- “Are You Ready for the 1st Hong Kong Cybersecurity Law?” April 2025 - Debevoise & Plimpton
- “Canada Proposes Cyber Compliance Regime for Canadian Defense Suppliers” March 2025 - Crowell
- “EU and UK Data Protection Authorities Are Monitoring Use of Personal Data to Train AI” February 2025 - Wilson Sonsini
- “European Data Protection Roundup: January 2025” February 2025 - Debevoise & Plimpton
- “Privacy, Data and Cybersecurity Newsletter Issue 25” January 2025 - Katten
- “Helpful Guidance on Managing AI-Related Cybersecurity Risks from Hong Kong’s SFC” November 2024 - Debevoise & Plimpton
-
-
Trump's '25 AI-Cybersecurity Executive Order
- “EO on Cybersecurity Reveals Focus on AI-Cyber Convergence, Secure Software Development, and Foreign Threats” July 2025 - Goodwin
- “A New EO Signals Administration’s Cybersecurity Priorities “ July 2025 - Polsinelli
- “Trump Signs EO on AI Cybersecurity and Senate Floats New Approach to State AI Moratorium” June 2025 - Mintz
- “White House Narrows and Refocuses Biden EO on Strengthening Federal Cybersecurity” June 2025 - Jenner & Block
- “New Executive Order Modifies Cybersecurity Requirements Imposed on Federal Contractors” June 2025 - WilmerHale
-
Trump's ’26 Cyber Strategy and Executive Order on Cybercrime
- “President Trump’s Cyber Strategy and Executive Order Combating Cybercrime: Key Takeaways” March 2026 - Latham
- “Trump Administration Releases Cyber Strategy for America and Related EO on Combatting Cybercrime” March 2026 - Mayer Brown
- “Trump Administration Signals Greater Private Role in Offensive Cyber Operations” March 2026 - WilmerHale
Data Privacy and Cybersecurity
Table of Contents