Expert Analysis

• Takeaways From Groundbreaking Data Transfer Order

  

  A recent first-of-its-kind executive order and related proposed rulemaking lay the groundwork for important outbound U.S. data protections, but they may have unintended consequences related to the types of data and the subjects within their scope, say attorneys at Kirkland.

• What Recent Study Shows About AI's Promise For Legal Tasks

  

  Amid both skepticism and excitement about the promise of generative artificial intelligence in legal contexts, the first randomized controlled trial studying its impact on basic lawyering tasks shows mixed but promising results, and underscores the need for attorneys to proactively engage with AI, says Daniel Schwarcz at University of Minnesota Law School.

• Innodata Suit Highlights 'AI Washing' Liability Risk For Cos.

  

  A class action against software company Innodata over so-called AI washing, one of the first of its kind, underscores the litigation and enforcement risks that can arise from the U.S. Securities and Exchange Commission's novel theory about misleading artificial intelligence capabilities, say attorneys at Bracewell.

• For Now, Generative AI Is Risky For Class Action Counsel

  

  Although a recent survey showed most in-house counsel think that their outside counsel should be using generative artificial intelligence "in some way" in class action work, the technology is more a target for class actions than it is a tool to be used in practice at present, says Matthew Allen at Carlton Fields.

• Steps To Reduce CIPA Litigation Risks For Companies

  

  As class action claims brought under the California Invasion of Privacy Act continue to advance new theories under an old law to target companies for commonplace website and app activities, there are steps that organizations can take to reduce exposure and strengthen their defenses against such lawsuits, say attorneys at Hintze Law.

• Banks Should Continue To Prep For CFPB Data Rule Rollout

  

  Consumer Financial Protection Bureau-supervised banks should not expect industry pressure to delay the rollout of proposed Section 1033 open banking rules, which regulate how consumer financial information flows between financial institutions, and prepare their required data access portals and compliance procedures now, say attorneys at Troutman Pepper.

• Tips For Orgs Facing AI Data Privacy Compliance Challenges

  

  Regulators around the world are actively seeking to enforce data privacy and consumer protection laws against companies providing artificial intelligence-related services, raising complex compliance questions in areas like transparency, data minimization, lawfulness of processing, data subject rights and higher risk activities, say attorneys at Hogan Lovells.

• BIPA's Statutory Exemptions Post-Healthcare Ruling

  

  The Illinois Supreme Court's November opinion in Mosby v. Ingalls Memorial Hospital, which held that the Biometric Information Privacy Act's healthcare exemption also applies when information is collected from healthcare workers, is a major win for healthcare defendants that resolves an important question of statutory interpretation, say attorneys at Quinn Emanuel.

• Enforcement Risk Amid Increased Consumer Data Use

  

  While no state has introduced a private right of action for noncompliance with a comprehensive consumer privacy law — except for the California Consumer Privacy Act's data breach provision — organizations and retailers face risk from enforcement actions by state attorneys general and privacy regulators, say attorneys at Dentons.

• Business Litigators Have A Source Of Untapped Fulfillment

  

  As increasing numbers of attorneys struggle with stress and mental health issues, business litigators can find protection against burnout by remembering their important role in society — because fulfillment in one’s work isn’t just reserved for public interest lawyers, say Bennett Rawicki and Peter Bigelow at Hilgers Graben.

• Opinion

  The Problems In Calif. Draft Behavioral Ad Privacy Regs

  

  The California Privacy Protection Agency has an opportunity with its automated decision-making technology and profiling rulemaking to harmonize California's regulation of data-driven advertising, but this will be a failure unless several things are changed in its proposed treatment of behavioral advertising, say Alan Friel and Kyle Fath at Squire Patton.

• Series

  Skiing Makes Me A Better Lawyer

  

  A lifetime of skiing has helped me develop important professional skills, and taught me that embracing challenges with a spirit of adventure can allow lawyers to push boundaries, expand their capabilities and ultimately excel in their careers, says Andrea Przybysz at Tucker Ellis.

• How Breach Reporting Is Changing For Financial Institutions

  

  In May, the Federal Trade Commission's amended Safeguards Rule will extend the data protections that apply to information held by banks to information held by nonbanking financial institutions — and sweep even more broadly in some critical aspects, say Evan Yahng and Kurt Hunt at Dinsmore.

• High Court Social Media Speech Ruling Could Implicate AI

  

  In Moody v. NetChoice and NetChoice v. Paxton, the U.S. Supreme Court is considering whether certain state laws can restrict content moderation by social media platforms, but the eventual decision could also provide insight into whether the first amendment protects artificial intelligence speech, say Joseph Meadows and Quyen Dang at GRSM50.

• Assessing Chinese Cross-Border Data Transfers

  

  Jet Deng and Ken Dai at Dacheng unpack the regulatory framework for cross-border data transfers in China, detailing the major systems at play, last year's policy adjustments, and an outlook and practice tips for businesses.