Expert Analysis

• Immunity May Not Protect Gov't-Backed Cyber Operators

  

  Companies considering participation in a National Coordination Center program that authorizes private actors to conduct offensive cyber operations on the government’s behalf should understand the limits of sovereign immunity and the operational and legal risks lurking in the details and undefined parameters of the program, say attorneys at Steptoe.

• White House AI Accord Could Reshape Reasonable Care

  

  President Donald Trump's recent joint commitment on frontier responsibilities — signed by leaders of Google, Anthropic, Meta and more — may pose legal risks for nonsignatories, as businesses using artificial intelligence may find the accord's safeguards cited against them as evidence of what reasonable care requires, says Peter Schildkraut at Arnold & Porter.

• OCC Plan May Bring Data Sharing Flexibility, Diligence Issues

  

  The Office of the Comptroller of the Currency's recent proposal to overhaul its supervisory information sharing regime for the first time in decades would provide important flexibility to banks, but it could create new issues around confidentiality agreements, disclosure controls and diligence processes, say attorneys at Simpson Thacher.

• Protecting Trade Secrets When AI Agents Go Rogue

  

  In light of a recent incident in which artificial intelligence agents compromised parts of Hugging Face's production systems, and the uncertain court guidance surrounding liability in such situations, companies looking to update their trade secret protections should carefully examine agents' permissions and technical limitations, says Matt Nealon at Marshall Gerstein.

• Planning For D&O Exclusions As Risks Mount For Banks

  

  Banks should scrutinize directors and officers exclusions for artificial intelligence, disclosure and cybersecurity risks during policy renewal negotiations to preserve coverage amid the current uptick in insurer scrutiny and related shareholder litigation, say attorneys at Jones Walker.

• CFIUS Annual Report Reveals Enforcement Trends

  

  The Committee on Foreign Investment in the United States' recently published annual report to Congress shows that it is increasingly focused on nonnotified transactions, mandatory filing compliance, critical technologies and postclosing mitigation enforcement across the full life cycle transactions, say attorneys at Bass Berry.

• Series

  Fintech Regulator Outlook: Collaboration In North Dakota

  

  The recent speed of new digital asset products entering the market continues to introduce compliance challenges, so regulators and companies alike must examine the intersection of artificial intelligence, cybersecurity, collaboration and modernization to navigate regulatory complexity, says Lise Kruse at the North Dakota Department of Financial Institutions.

• Terminix Deal Shows Risks Of Calif. Aggregating Local Lapses

  

  California district attorneys’ novel use of an unfair competition law to merge unrelated local enforcement matters against pest control providers Rentokil and Terminix into one recently settled statewide case demonstrates that lack of adequate communication between facilities and corporate compliance managers may cause isolated regulatory violations to snowball into larger challenges, say attorneys at Kazmarek Mowrey.

• What Lawyers Should Know Before Accepting Crypto Payment

  

  As clients increasingly request to pay legal fees, retainers and escrow funds using cryptocurrency, lawyers should consider how only a handful of state bar authorities have addressed the issue with varying ethics opinions, as well as the related questions that no authority has yet answered, says attorney Felix Shipkevich.

• What To Know As State 'Neural Data' Privacy Laws Emerge

  

  Attorneys at Goodwin discuss new state laws aimed at regulating consumer data generated from nervous system activity, explain why neurotechnology is attracting state and federal legislators’ attention, and highlight the compliance obligations that industry players should address now.

• Data Sale In Spirit Bankruptcy Raises Novel Privacy Risks

  

  Spirit Airlines' planned sale of deidentified business data to Google for artificial intelligence training exposes gaps in the Bankruptcy Code's privacy guardrails, particularly for employee information, say attorneys at Patterson Belknap.

• Fighting Class Cert. In Wash. False Email Promo Cases

  

  Retailers facing a recent wave of class actions alleging their email promotions violated the Washington Commercial Electronic Mail Act may be able to demonstrate that sending individualized, customer-specific messages produced experiences too diverse to be adjudicated on a classwide basis, say attorneys at Benesch.

• Series

  Calif. Banking Brief: All The Notable Legal Updates In Q3

  

  California's financial regulators spent the third quarter of 2026 focusing on consumer protection enforcement at home while resisting federal efforts to displace state oversight — reinforcing the state's intention to shape the compliance landscape for institutions operating within its borders despite federal deregulatory trends, say attorneys at Ropes & Gray.

• IDScan Data Breach Puts Spotlight On Vendor Oversight

  

  A recently reported breach that exposed millions of identification documents held by IDScan.net highlights the liability risks for businesses that contract with third-party identity processors, and emphasizes the importance of auditing vendors' data retention practices, say attorneys at Tucker Ellis.

• Series

  Mentalism Makes Me A Better Lawyer

  

  Convincing strangers I can read their minds may seem like an unusual second career for a legal practitioner, but both disciplines share several important requirements, including trust and preparation, says Warren Biro at Manatt.