AI Risks May Recalibrate 'Reasonable Security' Standards

A definitive answer to what constitutes reasonable vulnerability management in the age of artificial intelligence is still emerging, but the answer is likely less a reset of the standard than a recalibration of how organizations meet it, say Scott Loughlin at Hogan Lovells and Mike Priest at Globe Life.

DOJ Directive Gives Contractors A Fraud Risk Road Map

For government contractors, the 10 factors described in the U.S. Department of Justice's recent corporate fraud enforcement directive functions as a de facto scoring rubric for internal audits that mirrors what prosecutors will prioritize, say attorneys at Spencer Fane.

Key Risk Assessment Gaps To Note From NY Cyber Guidance

Covered entities should take a fresh look at the compliance gaps flagged in recent New York State Department of Financial Services guidance on "deficient cybersecurity programs," particularly around scope, asset inventories and documentation, say attorneys at Mayer Brown.

FTC's Changing Model Raises Questions About Its Mission

Federal Trade Commission leaders have recently sketched a vision of an agency that continues an enforcement role distinct from the U.S. Department of Justice's, even as a shift toward greater presidential control makes enforcement more responsive to changes in administrations, say attorneys at Wiley.

2nd Circ. EFAA Ruling Shifts Employer Litigation Strategy

In Diaz-Roa v. Hermes Law, the Second Circuit recently held that, under the Ending Forced Arbitration of Sexual Assault and Sexual Harassment Act, employers can't carve out nonharassment claims and send them to arbitration, which has implications for discovery, litigation costs and resolution strategy in EFAA-covered disputes, say attorneys at Krevolin Horst.

How Bank Lobby's Suit Tests OCC's Crypto Charter Powers

The Independent Community Bankers of America’s recent lawsuit challenging the Office of the Comptroller of the Currency’s ability to charter cryptocurrency companies marks another chapter in the struggle over the appropriate regulatory framework for digital assets, while raising a classic administrative law question at its most basic level, say attorneys at Ballard Spahr.

New Calif. Law Ties Finance Contracts To State Licensing

Under a California law taking effect in 2028, commercial financing licensing requirements have been substantially expanded — meaning that fintechs relying on limited regulatory enforcement will face risk from their own borrowers, who could use licensing failures to resist repayment, say attorneys at Husch Blackwell.

Frozen Potato Ruling Highlights Data-Sharing Antitrust Risk

A recent Illinois federal court decision allowing key claims against frozen potato producer competitors to proceed illustrates the vulnerability of highly concentrated industries to antitrust exposure through aggregated data sharing, say attorneys at Foley & Lardner.

How FCC Robocall Rules Reshape TCPA Opt-Out Compliance

The Federal Communications Commission's recent changes to its Telephone Consumer Protection Act rules may simplify how businesses process consumer opt outs for robocalls and robotexts, but they also introduce nuances to the opt-out process that may be challenging to operationalize, say attorneys at Hunton.

PFAS Ruling Extinguishes A Policyholder Path To Coverage

Following an Ohio federal court's recent ruling in Fire-Dex v. Admiral Insurance, policyholders whose PFAS exposure is concentrated in workplace products will see bids for coverage fail under the occupational-disease exclusion, giving insurers a defense well suited for the category of claims that has been most resistant to pollution exclusions, say attorneys at Benesch.

AG Watch: Minnesota Takes Action To Secure Child Safety

Minnesota Attorney General Keith Ellison has built one of the most aggressive and structurally coherent child protection enforcement programs in the country, targeting consumer-facing sectors that his office has concluded prey on minors, such as tobacco and nicotine, social media platforms, and artificial intelligence, say attorneys at Crowell & Moring.

Southern Glazer's Deal Tests FTC's Robinson-Patman Push

A California federal court's recent decision in Federal Trade Commission v. Southern Glazer's secures a rare Robinson-Patman Act pricing limitations agreement, but conditions attached to the decision indicate that practitioners may only see a handful of new private RPA cases a year, says Steven Cernak at Bona Law.

Opinion

The SEC Crypto Proposal Rests On A Term No One Can Define

The U.S. Securities and Exchange Commission's recently proposed Regulation Crypto Assets is its most ambitious attempt to set rules for the crypto industry, but its repeated use of the phrase "essential managerial efforts" means it perpetuates the uncertainty the regime is meant to cure, says Joseph A. Hall at Davis Polk.

Navigating Dueling Regulations For Bank Investment Advisers

Recent U.S. Securities and Exchange Commission examination findings show that investment advisory activities remain an active area of regulatory focus, and reinforce the need for banks to assess intersecting compliance obligations, say attorneys at Fredrikson.

Series

Being In The Peace Corps Made Me A Better Lawyer

When I served in the Peace Corps, the people of the West African village where I was stationed helped me acclimate to my new surroundings and enabled me to develop problem-solving, teamwork and empathy skills that have bolstered my legal practice far beyond the ability to offer technical advice, says Brian Bewley at McGuireWoods.