Cybersecurity & Privacy

  • March 25, 2026

    High Court Reverses Music Piracy Liability Ruling Against Cox

    The U.S. Supreme Court on Wednesday said the Fourth Circuit incorrectly affirmed a jury verdict that found Cox Communications liable for its customers' music piracy, concluding there is a legal distinction between mere knowledge of infringement and intent to promote it.

  • March 24, 2026

    Pentagon 'Punishing' Anthropic Would Be Illegal, Judge Says

    A California federal judge considering Anthropic's request to block the U.S. Department of Defense from labeling it a supply chain national security risk said Tuesday that it looks like the government is "punishing" Anthropic for bringing public attention to their contract fight, a move that would violate the First Amendment.

  • March 24, 2026

    Trump Admin Settles Suit Over Biden Social Media Collabs

    The Trump administration on Tuesday agreed to bar three federal agencies from interfering with social media companies' content moderation, resolving a high-profile challenge to the Biden administration's efforts to combat the spread of misinformation in a case that went up to the U.S. Supreme Court.

  • March 24, 2026

    Meta Tackles Borrowed Underwear Analogy In Privacy Suit

    A California federal judge mulling Meta's argument that its users' consent bars a proposed privacy class action pressed Meta's lawyers Tuesday on whether social expectations affect the bounds of that consent, observing that if she gave a friend permission to borrow her clothes, "I don't expect her to borrow my underwear."

  • March 24, 2026

    Baltimore Takes XAI To Court Over Grok's Sexual Deepfakes

    Baltimore on Tuesday became one of the first municipalities to sue Elon Musk's xAI over the Grok artificial intelligence platform's ability to transform ordinary photographs into nonconsensual sexualized deepfake images, including creating child sexual abuse material, saying it's exposing city residents to degrading content, harassment and psychological harm.

  • March 24, 2026

    BofA Wants Customer Suit Over Post-Jan. 6 Data Sharing Axed

    Bank of America has asked a Florida federal judge to toss a proposed class action accusing it of financial privacy violations tied to the aftermath of the Jan. 6, 2021, U.S. Capitol attack, arguing the U.S. Supreme Court has held that bank customers do not have ownership or expectations of privacy over their bank account records.

  • March 24, 2026

    FINRA CEO Highlights New Clearinghouse For Cyber Threats

    Robert Cook, CEO of the Financial Industry Regulatory Authority, said Tuesday that it will soon be rolling out a clearinghouse for firms to report cybersecurity threats and to promote information sharing across the industry.

  • March 24, 2026

    IT Co. Says Fed. Circ. Ruling Blesses 'Moving Target' Records

    An IT contractor said the Federal Circuit should reconsider a panel ruling upholding the U.S. Department of Commerce's authority to unilaterally take corrective action during litigation over a $1.5 billion procurement, warning it threatens to "devastate the bid protest process."

  • March 24, 2026

    Heritage Bank Client Alleges 'Unsecure' Servers Led To Breach

    A Heritage Bank customer claimed in a putative class action Tuesday that the Washington-based financial institution failed to properly guard users' personal data that was stolen in a March 1 cyberattack, alleging the company used substandard security practices and failed to update its systems on a timely basis.

  • March 24, 2026

    Wash. Mandates AI Content Flags, Suicide Safeguards

    Washington Gov. Bob Ferguson signed a pair of bills on Tuesday requiring large artificial intelligence companies to embed data that distinguishes deepfakes as AI-generated and forcing companion chatbot developers to take steps to protect minor users from suicide and self-harm.

  • March 24, 2026

    Snap Suit Tossed For State Enforcement Action Interference

    A Utah federal judge on Tuesday dismissed Snap Inc.'s suit against two state officials aiming to block a state enforcement action, finding that the court must abstain while that enforcement action is pending.

  • March 24, 2026

    Fiserv, Credit Union Settle Payment Data Security Lawsuit

    Fiserv Solutions LLC and Cencap Federal Credit Union have "tentatively settled" a Connecticut federal lawsuit accusing the payment processor and fintech provider of operating an online banking platform that contained security flaws.

  • March 24, 2026

    Meta Owes $375M In NM Trial Over Harm To Teens

    A New Mexico jury said Tuesday that Meta must pay $375 million over the state attorney general's bellwether claims that the social media giant hid the full scope of mental health harm its apps were causing to underage users.

  • March 24, 2026

    AGs Seek Federal Help To Tackle Chinese App Drug Trade

    North Carolina Attorney General Jeff Jackson announced Monday that he's leading a bipartisan group of state enforcers in asking the federal government to act on drug traffickers' co-opting of Chinese-owned messaging app WeChat and its sister app Weixin to propagate the illegal drug trade. 

  • March 23, 2026

    Meta Ends WhatsApp Security Head's Retaliation Suit For Now

    A California federal judge dismissed, for now, a retaliation claim by a former Meta employee who claimed he was fired after reporting cybersecurity shortfalls concerning WhatsApp, finding the plaintiff's complaints aren't protected under the Sarbanes-Oxley Act since his cybersecurity violation reports don't relate to internal accounting controls.

  • March 23, 2026

    Anthropic Says DOD Security Risk Label Is Unconstitutional

    Anthropic PBC has doubled down on its push for an order blocking the Trump administration from labeling it a supply chain risk to national security, telling a California federal court the executive branch was punishing "a major company for the sin of expressing its views on a matter of profound public significance."

  • March 23, 2026

    SEC Must Give Video Of Elon Musk Interview To Oscar Winner

    The U.S. Securities and Exchange Commission must release a video interview of Elon Musk from its civil fraud investigation of the billionaire to a film company led by Oscar-winner Alex Gibney, a D.C. federal judge ruled Monday, saying the SEC already has publicized the interview's contents through a transcript.

  • March 23, 2026

    Social Media Jurors Say They Are Deadlocked On A Defendant

    A California jury considering claims Meta and Google harm children's mental health through their social media platforms reported Monday that it is deadlocked as to one of the defendants, but it wasn't clear if the jury is stuck on the question of liability or on potential punitive damages.

  • March 23, 2026

    FCC Urges Justices To Reject Repeal Of Penalty Power

    The Federal Communications Commission has urged the U.S. Supreme Court to keep the agency's monetary penalty powers intact, saying the agency's current practice does not deny targets of fines their right to a jury trial and is not binding until a court orders payment.

  • March 23, 2026

    FCC Adds Foreign Routers To Nat'l Security Risk List

    The Federal Communications Commission on Monday added foreign-made routers to a list of consumer electronics gear that cannot be sold on the U.S. market without specific authorization.

  • March 23, 2026

    FINRA Fines Stash Capital For AML, Identity Theft Controls

    The Financial Industry Regulatory Authority fined digital investing platform operator Stash Capital $450,000 for allegedly failing to properly review applications and detect suspicious account activity during a period of sharp customer growth.

  • March 23, 2026

    Novartis Faces Class Suit Over Patient Health Info Disclosure

    Drugmaker Novartis collected patients' personal and health information through pharmaceutical marketing websites and transmitted it to third parties including Google using "surreptitious online tracking tools" without patients' consent, a proposed class action in New Jersey federal court alleges.

  • March 23, 2026

    Md. Judge Rules Written Consent Not Needed Under TCPA

    Echoing a recent Fifth Circuit ruling, a Maryland federal judge has held that written consent to receive telemarketing calls is not required under the Telephone Consumer Protection Act, reversing a decision to certify a class of consumers against a dental plan marketer.

  • March 23, 2026

    Pediatric Data Breach Class Action Can Stay In NC Biz Court

    A consolidated class action alleging a pediatric medical practice failed to protect minor patients' data from hackers can remain in the North Carolina Business Court, a judge ruled in finding the lawsuits were properly designated to the state's specialized superior court for complex business matters.

  • March 23, 2026

    New Wash. Law Cuts Antispam Penalties Amid Multiple Suits

    Statutory penalties for emails sent in violation of Washington state's Commercial Electronic Mail Act, which bars messages with false or misleading subject lines, will fall from $500 per email to $100 under a measure signed into law by Gov. Bob Ferguson on Monday.

Expert Analysis

  • Series

    Law School's Missed Lessons: Educating Your Community

    Author Photo

    Nearly two decades prosecuting scammers and elder fraud taught me that proactively educating the public about the risks they face and the rights they possess is essential to building trust within our communities, empowering otherwise vulnerable citizens and preventing wrongdoers from gaining a foothold, says Roger Handberg at GrayRobinson.

  • Strategies For Merchants As Payment Processing Costs Rise

    Author Photo

    As current economic pressures and rising card processing costs threaten to decrease margins for businesses, retail merchants should consider restructuring how payments are made and who processes them within the evolving legal framework, says Tom Witherspoon at Stinson.

  • Shifting Crypto Landscape Complicates Tornado Cash Verdict

    Author Photo

    Amid shifts in the decentralized finance regulatory landscape, the mixed verdict in the prosecution of Tornado Cash’s founder may represent the high-water mark in a cryptocurrency enforcement strategy from which the U.S. Department of Justice has begun to retreat, say attorneys at Venable.

  • 5 Crisis Lawyering Skills For An Age Of Uncertainty

    Author Photo

    As attorneys increasingly face unprecedented and pervasive situations — from prosecutions of law enforcement officials to executive orders targeting law firms — they must develop several essential competencies of effective crisis lawyering, says Ray Brescia at Albany Law School.

  • Compliance Tips Amid Rising FTC Scrutiny Of Minors' Privacy

    Author Photo

    The Federal Trade Commission has recently rolled out multiple enforcement actions related to children's privacy, highlighting a renewed focus on federal regulation of minors' personal information and the evolving challenges of establishing effective, privacy-protective age assurance solutions, say attorneys at Nelson Mullins.

  • Opinion

    It's Time For The Judiciary To Fix Its Cybersecurity Problem

    Author Photo

    After recent reports that hackers have once again infiltrated federal courts’ electronic case management systems, the judiciary should strengthen its cybersecurity practices in line with executive branch standards, outlining clear roles and responsibilities for execution, says Ilona Cohen at HackerOne.

  • Prepping For Website Automatic Opt-Out Signal Mandates

    Author Photo

    Maryland's Online Data Privacy Act, which, along with a growing number of U.S. states, requires businesses to offer mechanisms in their privacy policies or online interfaces to allow individuals to opt out of data collection, marks a new frontier in consumer privacy, raising both technical and legal risks, say attorneys at Baker Donelson.

  • Tips For Cos. Crafting Enforceable Online Arbitration Clauses

    Author Photo

    Recent rulings from the Ninth Circuit and the U.S. District Court for the Southern District of California indicate that courts are carefully examining the enforceability of online arbitration clauses, so businesses should review the design of their websites and consider specific language next to the "purchase" button, say attorneys at DTO Law.

  • 7 Lessons From The Tractor Supply CCPA Enforcement Action

    Author Photo

    The California Privacy Protection Agency's recent enforcement action targeting Tractor Supply for alleged violations of the California Consumer Privacy Act provides critical insights into the compliance areas that remain a priority for the California regulator, including businesses with significant consumer interactions, say attorneys at Troutman.

  • Series

    Writing Novels Makes Me A Better Lawyer

    Author Photo

    Writing my debut novel taught me to appreciate the value of critique and to never give up, no matter how long or tedious the journey, providing me with valuable skills that I now emphasize in my practice, says Daniel Buzzetta at BakerHostetler.

  • SDNY OpenAI Order Clarifies Preservation Standards For AI

    Author Photo

    The Southern District of New York’s recent order in the OpenAI copyright infringement litigation, denying discovery of The New York Times' artificial intelligence technology use, clarifies that traditional preservation benchmarks apply to AI content, relieving organizations from using a “keep everything” approach, says Philip Favro at Favro Law.

  • Addressing Legal Risks Of AI In The Homebuilding Industry

    Author Photo

    Artificial intelligence is transforming the homebuilding industry, but the legal challenges posed by its adoption spread across many areas, including contractual liability and intellectual property issues, so builders should adopt strategies to mitigate the risks and position themselves for success, says Philip Stein at Bilzin Sumberg.

  • Cybersecurity Rule For DOD Contractors Creates New Risks

    Author Photo

    A rule locking in the Cybersecurity Maturity Model Certification system for defense contractors increases False Claims Act and criminal enforcement risks by narrowing a key exemption and mandating affirmations of past compliance, which may discourage new companies from entering the defense contracting market, say attorneys at Haynes Boone.

  • Compliance Steps To Take As FCRA Enforcement Widens

    Author Photo

    As the Fair Credit Reporting Act receives renewed focus from both federal and state enforcers, regulatory and litigation risk is most acute in several core areas, which companies can address by implementing purpose processes and quick remediation of consumer complaints, among other steps, say attorneys at Wiley.

  • Assessing The Future Of The HIPAA Reproductive Health Rule

    Author Photo

    In light of a Texas federal court's recent decision to strike down a U.S. Department of Health and Human Services rule aimed to protect the privacy of patients seeking abortions and gender-affirming care, entities are at least temporarily relieved from compliance obligations, but tensions are likely to continue for the foreseeable future, says Liz Heddleston at Woods Rogers.

Want to publish in Law360?


Submit an idea

Have a news tip?


Contact us here
Can't find the article you're looking for? Click here to search the Cybersecurity & Privacy archive.