Cybersecurity & Privacy

  • November 26, 2025

    Calif. Privacy Agency Gaining Steam Ahead Of 5th Anniversary

    California's data privacy regulator has taken several notable steps in recent months, including handing down its first penalty upward of $1 million and finalizing long-awaited rules on topics such as cybersecurity audits and technologies that use artificial intelligence, and the groundbreaking agency shows no signs of slowing down as its fifth anniversary approaches. 

  • November 26, 2025

    Cyber Co. Says Mich. Atty's Recusal Bid Based On Speculation

    A Michigan attorney's attempt to have a judge recuse from a payment dispute launched by a cybersecurity firm "is a waste of the court's time," the company has said, because her bid is based on speculation over the judge's work in a federal prosecutor's office.

  • November 26, 2025

    High Court's $1B ISP Case May Define Digital Liability Norms

    Monday's U.S. Supreme Court arguments in a $1 billion copyright case filed by music companies against Cox Communications offer justices the first chance in decades to define business liability for customer piracy online.

  • November 26, 2025

    Up Next At High Court: ISP Liability & State Subpoena Suits

    The U.S. Supreme Court will return Monday for the first week of its December oral argument session, during which the justices will consider whether internet service providers can be held liable for contributing to their customers' infringing activity online and whether the subjects of state subpoenas are required to first challenge them in state court. 

  • November 26, 2025

    AGs Urge Congress To Reject Trump's Ban On State AI Laws

    Attorneys general from 32 states are urging Congress to preserve their ability to pass laws regulating artificial intelligence, contending that the Trump administration's renewed proposal to insert a moratorium into a federal spending bill would leave states powerless in the face of AI-powered scams, harmful chatbot hallucinations and other emerging dangers.

  • November 26, 2025

    NetChoice Fights Georgia Law On Parental Consent, Ads

    Internet trade group NetChoice is urging the Eleventh Circuit to continue blocking the enforcement of a Georgia law that would block social media platforms from allowing minors under 16 from creating accounts without parental permission.

  • November 26, 2025

    Justices Delay Copyright Chief Case Until FTC Firing Decision

    The U.S. Supreme Court said it will defer ruling on whether the Trump administration's firing of the U.S. Copyright Office leader was legal until the justices resolve cases involving the terminations of a Democratic Federal Trade Commission member and Federal Reserve Gov. Lisa Cook.

  • November 26, 2025

    After Big Win For 2 Trump Foes, A Third Faces 'Tougher Job'

    The recent dismissal of federal criminal charges against New York Attorney General Letitia James and former FBI director James Comey does little to help President Donald Trump's ex-national security adviser John Bolton, whose defense in a classified-materials case presents a thornier set of legal and factual issues, experts say.

  • November 26, 2025

    MVP: Holland & Knight's Paul Bond

    Paul Bond of Holland & Knight LLP's data strategy, security and privacy team has handled sprawling data privacy litigation in a rapidly evolving legal landscape, even ushering in a change to state law that curbed what he calls a "cottage industry" created by plaintiffs' attorneys, earning him a spot as one of the 2025 Law360 Cybersecurity and Privacy MVPs.

  • November 25, 2025

    11th Circ. Lets Fla. Enforce Social Media Law Amid Appeal

    A split Eleventh Circuit panel on Tuesday allowed Florida to enforce its law banning children 13 and under from social media while the Sunshine State appeals a lower court's injunction, ruling that Florida Attorney General James Uthmeier is likely to succeed in his argument that the law is constitutional.

  • November 25, 2025

    John Deere Rival Can't Appeal Info Safeguards In FTC Case

    A Deere & Co. competitor looking to shield confidential information it produced for a U.S. Federal Trade Commission right-to-repair investigation from related multidistrict litigation targeting Deere cannot tap the Seventh Circuit to resolve legal questions surrounding its failed protective order request, an Illinois federal judge said.

  • November 25, 2025

    Medical AI Co. Accused Of 'Smear Campaign' Against Rivals

    Two rivals of medical artificial intelligence platform OpenEvidence have told a Massachusetts federal judge the startup has used the courts in a campaign of "deceit, harassment and defamation" against competitors.

  • November 25, 2025

    Maryland Judge Keeps Kids' Privacy Law Challenge

    NetChoice's challenge to Maryland's "Kids Code" law regulating online privacy protections for children survived the state's motion to dismiss, after a Maryland federal judge Monday said the trade association had made sufficient claims that the law burdens protected speech.

  • November 25, 2025

    IT Contractor Fights $6.8M Verdict In FAA Contract Dispute

    An information technology company has asked a Michigan judge to erase or reduce a $6.8 million verdict finding the company caused a competitor to lose a Federal Aviation Administration contract, saying there was no basis for the jury's award.

  • November 25, 2025

    Unions Say More Info Is Needed In DOGE Data Access Dispute

    A union coalition urged a New York federal judge Monday to order the federal government to disclose how much access to federal workers' personal information it gave the Department of Government Efficiency and what the White House unit formerly headed by Elon Musk did with that information.

  • November 25, 2025

    LendingTree's QuoteWizard Unit Hit With Telemarketing Suit

    Lending Tree's insurance comparison subsidiary QuoteWizard.com LLC violated the Telephone Consumer Protection Act by placing unsolicited prerecorded telemarketing calls to people's phones without first getting their express consent, according to a proposed class action filed Monday in North Carolina federal court.

  • November 25, 2025

    MVP: Dechert's Brenda R. Sharton

    Brenda R. Sharton of Dechert LLP successfully defended popular menstrual tracking app Flo Health at trial in one of the largest consumer class actions ever in terms of damages claimed — in excess of $38 billion — earning her a spot among one of the 2025 Law360 Cybersecurity & Privacy MVPs.

  • November 25, 2025

    Circus, Bank Of America Agree To Wrap Up Online Theft Suit

    An Atlanta-based circus company and Bank of America have struck a tentative deal to end a lawsuit claiming the financial services giant let online thieves siphon off more than $4.8 million of the circus' funds, according to a filing in Georgia federal court. 

  • November 25, 2025

    Mass. Justices Clarify Access To Sealed Records For Appeals

    A Massachusetts law intended to give defendants acquitted of criminal charges a fresh start by automatically sealing a court's record does not prevent them or their attorneys from accessing the files, the state's high court ruled on Tuesday.

  • November 24, 2025

    Calif. AG Notches $1.4M Privacy Deal With Mobile App Maker

    California's attorney general is continuing to build on his enforcement efforts under the state's data privacy law, announcing a new $1.4 million settlement with a mobile gaming developer that allegedly failed to offer consumers a way to opt out of the sale and sharing of their personal information and that disclosed data belonging to users under 16 without proper permission.

  • November 24, 2025

    HHS Says It Plans To Resume Sharing Medicaid Info With ICE

    The U.S. Department of Health and Human Services has completed a decision-making process and established a new policy under which the agency will share certain Medicaid information with U.S. Immigration and Customs Enforcement, according to a notice published in the Federal Register on Monday.

  • November 24, 2025

    Calif. Personal Injury Law Firm Sued Over Ransomware Attack

    A former Adamson Ahdoot LLP client lodged a proposed class action in California state court on Friday over a Nov. 3 ransomware attack, alleging the law firm failed to protect his personal information despite touting on its website that it follows industry standards to do so.

  • November 24, 2025

    Teamsters Health Plan Wants Data Breach Suit Tossed

    A Massachusetts federal judge should toss a proposed class action accusing a Teamsters healthcare plan of failing to protect plan participants' personal information, the plan argued, seeking dismissal of a suit that seeks to hold the plan liable for an August data breach.

  • November 24, 2025

    DOJ Demand For Pa. Transgender Patient Records Blocked

    A Pennsylvania federal judge partially quashed part of a U.S. Department of Justice subpoena seeking health records for minors receiving gender-affirming care at The Children's Hospital of Philadelphia, ruling that the department lacked the statutory authority "for a rambling exploration" of medical files involving state-sanctioned medical care.

  • November 24, 2025

    Apple Fights Bid To Recertify 200 Million IPhone Buyer Class

    Apple has urged the Ninth Circuit to deny a petition from customers seeking to restore certification of a consumer class plaintiffs say reaches "upwards of 200 million" with a collective $20 billion in damages, in litigation claiming that the tech giant violated antitrust laws with its App Store policies.

Expert Analysis

  • Series

    Law School's Missed Lessons: How To Make A Deal

    Author Photo

    Preparing lawyers for the nuances of a transactional practice is not a strong suit for most law schools, but, in practice, there are six principles that can help young M&A lawyers become seasoned, trusted deal advisers, says Chuck Morton at Venable.

  • Annual Report Shows CFIUS Extending Its Reach In 2024

    Author Photo

    The recently released 2024 annual report from the Committee on Foreign Investment in the United States reveals record civil penalties and enhanced internal capabilities, illustrating expanding jurisdiction and an increasing appetite for enforcement actions, says Nathan Fisher at StoneTurn.

  • From Clerkship To Law Firm: 5 Transition Tips For Associates

    Excerpt from Practical Guidance
    Author Photo

    Transitioning from a judicial clerkship to an associate position at a law firm may seem daunting, but by using knowledge gained while clerking, being mindful of key differences and taking advantage of professional development opportunities, these attorneys can flourish in private practice, say attorneys at Lowenstein Sandler.

  • Cybersecurity Risks Can Lurk In Gov't Contractor Acquisitions

    Author Photo

    The Justice Department’s recent False Claims Act enforcement activity against Raytheon and Nightwing-related defense contractors demonstrates the importance of identifying and mitigating potential cybersecurity compliance risks when acquiring a company that contracts with the federal government, say attorneys at Foley & Lardner.

  • Associates Can Earn Credibility By Investing In Relationships

    Author Photo

    As the class of 2025 prepares to join law firms this fall, new associates must adapt to office dynamics and establish credible reputations — which require quiet, consistent relationship-building skills as much as legal acumen, says Kyle Forges at Bast Amron.

  • New Colo. Teen Privacy Rules Signal National Regulatory Shift

    Author Photo

    Recently released proposed rule amendments to the Colorado Privacy Act that would create some of the most robust protections for minors' online data in the U.S. reflect an ongoing trend of states taking steps to extend privacy protection for their residents, complicating the compliance burden for companies, say attorneys at Morgan Lewis.

  • A Look At New Calif. Cybersecurity, Risk Assessment Rules

    Author Photo

    The California Privacy Protection Agency Board recently finalized regulations related to automated decision-making technology, cybersecurity audits and risk assessments that establish additional requirements on businesses operating in California, and although these new rules are less onerous than some of the draft rules, compliance may still require substantial planning and updates, say attorneys at Morgan Lewis.

  • Lessons From 7th Circ.'s Deleted Chat Sanctions Ruling

    Author Photo

    The Seventh Circuit’s recent decision in Pable v. Chicago Transit Authority, affirming the dismissal of an ex-employee’s retaliation claims, highlights the importance of properly handling the preservation of ephemeral messages and clarifies key sanctions issues, says Philip Favro at Favro Law.

  • Divest Order Shows How Security Fears Extend CFIUS Scope

    Author Photo

    A recent White House order forcing a Chinese company to divest its 2020 acquisition of a U.S. audiovisual supplier demonstrates the Committee on Foreign Investment in the United States’ growing power to sink foreign transactions over national security concerns — and the enormous risks to U.S. companies from such reviews, say attorneys at Bass Berry.

  • Series

    Quilting Makes Me A Better Lawyer

    Author Photo

    Turning intricate patterns of fabric and thread into quilts has taught me that craftsmanship, creative problem-solving and dedication to incremental progress are essential to creating something lasting that will help another person — just like in law, says Veronica McMillan at Kramon & Graham.

  • Lessons Learned 3 Years After First CCPA Enforcement Action

    Author Photo

    Three years after the first public enforcement action under the California Consumer Privacy Act, Attorney General Rob Bonta has pursued a steady stream of enforcement actions across industries, providing a clearer picture of how the law is being interpreted and enforced, says Tatum Andres at Kilpatrick.

  • 2 Appellate Rulings Offer Clickwrap Enforcement Road Map

    Author Photo

    Two recent decisions from the Fourth and Eleventh Circuits in cases involving Experian signal that federal appellate courts are recognizing clickwrap agreements' power in spite of their simplicity, and offer practical advice on how companies can sufficiently demonstrate notice and assent when attempting to enforce contractual terms, says Brian Willett at Saul Ewing.

  • What 2 Profs Noticed As Transactional Law Students Used AI

    Author Photo

    After a semester using generative artificial intelligence tools with students in an entrepreneurship law clinic, we came away with numerous observations about the opportunities and challenges such tools present to new transactional lawyers, say professors at Cornell Law School.

  • Crypto Custody Guidelines Buoy Both Banks And Funds

    Author Photo

    A statement released last month by banking regulators — highlighting risks that the agencies expect banks holding crypto-assets to mitigate — may encourage more traditional institutions to offer crypto-asset safekeeping and thereby offer asset managers more options for qualified custodians to custody crypto-assets for their clients, say attorneys at Dechert.

  • Top Takeaways From Trump's AI Action Plan

    Author Photo

    President Donald Trump's AI Action Plan represents some notable evolution in U.S. policy, including affirmation of the administration's trend toward prioritizing artificial intelligence innovation over guardrails and toward supporting greater U.S. private sector reach overseas, say attorneys at WilmerHale.

Want to publish in Law360?


Submit an idea

Have a news tip?


Contact us here
Can't find the article you're looking for? Click here to search the Cybersecurity & Privacy archive.