Cybersecurity & Privacy

  • September 16, 2026

    State Bank Supervisor Group Issues AI Exam Framework

    The Conference of State Bank Supervisors on Wednesday unveiled a new oversight framework for artificial intelligence at financial firms, rolling out resources aimed at giving state examiners a common roadmap for reviewing how their regulated institutions are deploying the technology.

  • September 16, 2026

    Tenn. Must Face Adult-Entertainment Groups' Age-Check Suit

    A federal judge in Tennessee has ruled that the state must face a suit from free speech advocates, an individual adult-content creator and adult-entertainment industry groups claiming a state law requiring age checks violates their First Amendment rights.

  • September 16, 2026

    Split Conn. High Court Won't Shield Yale Accuser's Name

    In a 4-3 opinion Wednesday, the Connecticut Supreme Court said a trial judge correctly dismissed a sexual assault accuser's emergency 2024 request to remove her name from transcripts in the long-closed criminal prosecution of former Yale student Saifullah Khan, ruling the trial court lost jurisdiction after a jury's 2018 acquittal.

  • September 16, 2026

    McLaren Patients' Web Tracking Privacy Claims Advance

    A Michigan federal judge has allowed patients to move forward with claims that McLaren Health Care Corp. and the Barbara Ann Karmanos Cancer Institute allegedly intercepted their electronic communications and benefited from sensitive health information collected through tracking technology embedded in their websites.

  • September 16, 2026

    SEC Fines Ex-Okta Employees In Insider Trading Case

    Two former Okta sales managers have reached settlements with the U.S. Securities and Exchange Commission to resolve claims that they traded Okta stock on insider information before the company announced that its financial plan for the year needed adjustment.

  • September 16, 2026

    Vanguard Trims But Can't Shake Users' Data Tracking Suit

    A Pennsylvania federal judge tossed federal wiretapping and California invasion of privacy claims brought against investment management company Vanguard in a user class action over third-party tracking and sharing of data, but allowed the plaintiffs to amend the suit while keeping a state-based wiretapping claim alive. 

  • September 16, 2026

    Cyber Insurer Can't Avoid Auto Shop's $4.9M Coverage Suit

    An Illinois state court refused to toss an auto repair company's suit seeking to recover $4.9 million in coverage from its cyber insurer for a ransomware attack, saying the policy doesn't establish that the insurer owes nothing for the loss.

  • September 15, 2026

    Meta Beats Proposed Privacy Class Action Over 'Voiceprints'

    A California federal judge tossed on Tuesday a proposed class action claiming Meta's messaging platforms secretly and unlawfully capture Facebook users' "voiceprints" and related biometric information, finding the plaintiff agreed to let Meta use his personal data when he signed up for an account.

  • September 15, 2026

    Disney Wants Kids' Data Privacy Claims Tossed For Good

    Disney on Monday asked a California federal court to once again throw out a proposed class action claiming it allowed advertisers to illegally collect minors' personal information, pressing for the dismissal of a new version of the complaint just days after YouTube said it had reached a settlement in the case.

  • September 15, 2026

    How States' 'Perry Mason Moment' Led To $17B Meta Deal

    A recent landmark $17.1 billion settlement with Meta Platforms Inc. may have never happened if it weren't for a quick-thinking trial attorney and his close-knit team of lawyers representing 29 states, who worked together to swiftly shift strategies midtrial.

  • September 15, 2026

    Meta's Data Collection From DMV Is Invasive, Calif. Drivers Say

    Golden State drivers seeking to certify two classes over claims that Meta unlawfully obtained information from the state Department of Motor Vehicles' website told a California federal judge Tuesday that they have standing to sue under the Driver's Privacy Protection Act because the collection was invasive, even if it wasn't embarrassing or sensitive.

  • September 15, 2026

    Justices Told DHS Voter Citizenship Database 'Unprecedented'

    The U.S. Supreme Court should reject the Trump administration's bid to reinstate the U.S. Department of Homeland Security's upgraded citizenship verification database ahead of this year's election, a voting rights group told the court Tuesday, arguing that the administration unlawfully reinterpreted several statutes to claim that Congress authorized the changes.

  • September 15, 2026

    Cruz Delays FCC Nom's Hearing Amid Calls To Add Dem Pick

    A bevy of civil rights organizations said Tuesday the U.S. Senate should hold off on confirming another Republican to the Federal Communications Commission unless a sitting FCC Democrat is renominated to her post.

  • September 15, 2026

    Burger King Owner Inks $18M Deal In Suit Over $1B Buyout

    Burger King and Popeyes owner Restaurant Brands International Inc. has reached an $18.2 million deal with shareholders who say they were "materially uninformed" about the true value of the company's 2024 $1 billion buyout of fast food franchisee Carrols Restaurant Group Inc.

  • September 15, 2026

    Salesforce Must Face Claims Over Customer Data Breach

    A California federal judge has largely denied Salesforce's bid to dismiss a proposed class action alleging security weaknesses in its cloud platform allowed hackers to steal the personal information of customers and employees of Allianz, Farmers Group and TransUnion.

  • September 15, 2026

    No Pause Needed In Daniel's Law Cases, 3rd Circ. Told

    Atlas Data Privacy Corp. urged the Third Circuit to reject a bid to pause discovery in consolidated litigation over New Jersey's judicial privacy law as the appeals court considers a First Amendment challenge to the statute, arguing the defendant data brokers failed to show irreparable harm.

  • September 15, 2026

    Call Center Seeks Coverage For $5M Adidas Data Breach Deal

    A Wisconsin business process outsourcing company said in federal court that a Chubb unit breached its policy when the insurer refused to cover $5 million the call center paid to Adidas to resolve claims over data breaches that compromised the sneaker giant's customers' personal information.

  • September 14, 2026

    Zumba Video Buyers Seek Initial Nod For $2.7M Privacy Deal

    A certified class of over 4,500 on-demand video purchasers who allege Zumba illegally divulged their personal information to third parties pressed a Florida federal judge to approve a $2.7 million settlement they claim is "in a league of its own" and outpaces prior deals under federal video privacy law.

  • September 14, 2026

    Wash AG Fights T-Mobile's Bid To Undo Data Breach Ruling

    The Washington State Office of the Attorney General asked a King County Superior Court judge to deny T-Mobile's bid for reconsideration of a recent ruling finding it is liable for more than 722,000 violations of a state data breach notification law.

  • September 14, 2026

    Under Armour Can't Duck Suit Alleging Massive Data Breach

    A Maryland federal judge has denied Under Armour's bid to nix a proposed class action alleging a November data breach leaked the personal information of more than 72 million of its consumers and employees, saying the plaintiffs sufficiently claimed the breach caused them harm such as identity theft.

  • September 14, 2026

    Facebook Third-Party Apps Took User Data, Jury Told

    A technology expert testified Monday in New Mexico's data privacy trial against Meta that Facebook third-party app developers "rampantly" farmed user data and that the social media giant closed investigations of dubious developers without action.

  • September 14, 2026

    NY Flags AI Models As Cyber Risk Review Factor For Banks

    A top New York regulator is urging the state's banks and insurers to stay on top of evolving cybersecurity threats, flagging the launch of powerful new artificial intelligence models as the kind of major market development that can necessitate updating their risk assessments.

  • September 14, 2026

    Certifying Body Lied About Being US-Based, FCC Says

    Derycom Certification Services lied about its ties to China in order to receive the Federal Communications Commission's authorization to serve as a telecommunication certification body, which requires an organization to be based in the United States, the agency said.

  • September 14, 2026

    Renaissance Learning Beats Student Data Privacy Suit

    A California federal judge has dismissed a proposed class action accusing education software company Renaissance Learning Inc. of unlawfully collecting and sharing students' personal information, finding that the families' allegations did not support their privacy, wiretapping or unjust enrichment claims.

  • September 14, 2026

    Cop Pitches Nationwide Class In Flock Privacy Lawsuit

    Flock's surveillance network invades the privacy of the public and enables law enforcement employees to track people for improper reasons, according to a proposed class action filed in Georgia federal court.

Expert Analysis

  • Legal Risks Rise As Construction-Site Drone Use Soars

    Author Photo

    Construction companies using drones face mounting legal risks as Federal Aviation Administration compliance requirements tighten, remote identification capabilities expand and proposed rules move toward organizational accountability, making it crucial to update contracts, schedules, safety protocols and data-governance practices now to avoid future liability, say attorneys at Cozen.

  • 4 Emerging Approaches To AI Protective Order Language

    Author Photo

    Over the last year, at least five federal district courts have issued or analyzed specific protective order provisions restricting the use of generative artificial intelligence platforms with protected materials, establishing that proactive AI-specific provisions are now standard practice and demonstrating that no single model works for every case, says Joel Bush at Kilpatrick.

  • Understanding The Legal Risks Of Fragile Supply Chains

    Author Photo

    To ensure supply chain resilience in times of crisis — such as the recent blockage of the strategically vital Strait of Hormuz — it is important for everyone involved in the chain to understand the distribution arrangements and laws applicable across jurisdictions, say lawyers at Brown Rudnick.

  • 1st Surveillance Pricing Law In Md. Reflects Broader Scrutiny

    Author Photo

    A new law will make Maryland the first state to target data-driven or surveillance-based price manipulation, highlighting increased scrutiny from federal and state enforcement agencies and policymakers as they consider whether new laws are required to regulate dynamic pricing, say attorneys at Pillsbury.

  • Heppner Ruling Left AI Privilege Risk For Lawyers Unresolved

    Author Photo

    While a New York federal judge’s recent ruling in U.S. v. Heppner resolved a privilege question surrounding client-side artificial intelligence use, it did not address how to mitigate the risks that can arise when confidential information enters the operative context of an AI system used by an attorney, says Jianfei Chen at Quarles & Brady​​​​​​​.

  • The Ethics And Practicalities Of Representing AI Agents

    Author Photo

    With autonomous artificial intelligence agents now able to take action without explicit instructions from — or the awareness of — their human owners, the bar must confront whether existing frameworks like informed consent and client privilege will be sufficient on the day an AI agent calls seeking counsel, say attorneys at Morrison Cohen.

  • Notable Q1 Updates In Insurance Class Actions

    Author Photo

    Notable insurance class action decisions from the first quarter of the year included reminders about the statute of limitations as a key defense for claims relating to allegedly deficient forms, the importance of focus on the specific contract at issue and further guidance on the contours of Rule 23, says Kevin Zimmerman at BakerHostetler.

  • How New E-Evidence Rules Will Affect EU-US Data Transfers

    Author Photo

    The forthcoming European Union e-evidence regulation signals the need to preserve digital evidence that is stored outside the issuing jurisdiction, bringing the EU significantly closer to the model employed by the U.S. and reflecting a shift in the legal landscape for cross-border data transfers, say lawyers at MoFo.

  • Arguments Show Justices Vacillating On Geofence Warrants

    Author Photo

    Questions and statements by the justices during recent oral arguments in Chatrie v. U.S., probing the Fourth Amendment limits of geofence warrants, revealed a Supreme Court that is skeptical of the government’s most sweeping claims, uncomfortable with the petitioner’s broadest theories and searching for a narrow off-ramp, say attorneys at Rogers Joseph.

  • Series

    Speed Jigsaw Puzzling Makes Me A Better Lawyer

    Author Photo

    My passion for speed puzzling — I can complete a 500-piece jigsaw puzzle in under 50 minutes — has sharpened my legal skills in more ways than one, with both disciplines requiring patience, precision and the ability to keep the bigger picture in mind while working through the details, says Tazia Statucki at Proskauer.

  • High Court's Cox Ruling Leaves ISP Copyright Rules Intact

    Author Photo

    Though some commentators predicted a cataclysmic impact from the U.S. Supreme Court's recent decision in Cox v. Sony, in actuality the decision correctly maintains the status quo for internet providers' copyright infringement liability, says Courtney Sarnow at CM Law.

  • Opinion

    Congress Should Ax Privacy Bill For Not Shielding Consumers

    Author Photo

    The SECURE Data Act should be rejected because, despite Congress' claims, it would not meaningfully rein in data practices, but instead would weaken enforcement, eliminate stronger protections and prioritize data extraction over consumer protection and accountability, say attorneys at DiCello Levitt.

  • 2 AI Snafus Show Why Attys Can't Outsource Judgment

    Author Photo

    The recent incident involving Sullivan & Cromwell where citations in a filed motion were fabricated by artificial intelligence, as well as a punitive ruling from the Sixth Circuit in U.S. v. Farris, demonstrate that the obligation to supervise AI has belonged and always will belong to lawyers, says John Powell at the Kentucky School Boards Association.

  • Series

    Playing Magic: The Gathering Makes Me A Better Lawyer

    Author Photo

    The competitive card game Magic: The Gathering offers me a training ground for the strategic thinking skills crucial to litigation, challenging me to adapt to oft-updated rules, analyze text as complicated as any statute and anticipate my opponent’s next moves, says Christopher Smith at Lash Goldberg.

  • How Banks And Fintechs Can Build COPPA-Ready Youth Apps

    Author Photo

    Recent Children's Online Privacy Protection Act and state law activity expanding children's data protections underscore compliance considerations for bank-fintech partnerships offering digital financial tech products for youth, including age-gating, data minimization and parental control, says Erin Illman at Bradley Arant.

Want to publish in Law360?


Submit an idea

Have a news tip?


Contact us here
Can't find the article you're looking for? Click here to search the Cybersecurity & Privacy archive.