Cybersecurity & Privacy

  • September 30, 2026

    Meta Fights 'Monster' Proposed $1.1B CIPA Judgment

    Meta has urged a California federal judge not to grant a partial final judgment of more than $1.1 billion against it for unlawfully obtaining sensitive data from users of the menstrual tracking app Flo, saying the judgment it criticized as "Frankenstein's monster" violates its due process rights.

  • September 30, 2026

    DraftKings Uses AI To Exploit Losing Bettors, Suit Alleges

    DraftKings weaponizes artificial intelligence to identify vulnerable gamblers who tend to lose and then deploys promotions enticing those gamblers to place more bets to increase the house's revenue, according to a proposed class action filed Wednesday in Massachusetts federal court.

  • September 30, 2026

    FCC OKs Cable Biz Waiver To Fix Banned Routers

    The Federal Communications Commission has come through with another waiver that will allow certain companies to make changes to foreign-made routers that the agency has banned from being imported, in the hopes of avoiding the supply chain shortages that the ban created.

  • September 30, 2026

    23andMe Beats Calif.'s Bankruptcy Sale Privacy Challenge

    A Missouri federal judge on Tuesday denied California's bid to undo the $305 million bankruptcy sale of 23andMe over concerns that the sale sidestepped state consumer data protections, ruling that the state lacks standing to challenge the sale and that the court's "good-faith" findings aren't clearly erroneous.  

  • September 30, 2026

    Google Looks To Toss 'Implausible' Amended AI Spying Action

    Google is seeking to permanently end the third iteration of a proposed action alleging its "Smart Features" unlawfully give Gemini AI access to users' private correspondence, asserting Google's privacy policy allows it to automatically collect such communication data.

  • September 30, 2026

    Benefits Firm Can't Knock Out Data Breach Suit

    A Georgia federal court on Wednesday narrowed, but refused to dismiss, a proposed class action accusing a human resources services firm of failing to safeguard customer information ahead of a 2024 data breach.

  • September 30, 2026

    Ohio Parents Say Netflix Hooks Kids For Ad Data

    Netflix falsely marketed itself as a "kid-friendly" streaming alternative to Big Tech platforms while secretly building an addictive surveillance machine around children, Ohio parents have claimed in a proposed class action, which is at least the third lawsuit accusing the company of harvesting families' personal data.

  • September 30, 2026

    FCC Opens 2 Spectrum Bands For Satellite Services

    The Federal Communications Commission on Wednesday opened two portions of spectrum totaling more than 1,000 megahertz to expand satellite broadband as part of a long-range plan to free up the airwaves for space-based activities.

  • September 30, 2026

    Tech Co. Sensata Can't Duck Data Breach Class Action

    Sensata Technologies Inc. must face a lawsuit over a cybersecurity breach, a Massachusetts federal judge ruled Wednesday, finding that the industrial sensor technology company's former employees adequately pled that the ransomware attack has exposed them to a risk of identity theft.

  • September 30, 2026

    Paramount Can't Ax Most Claims In Pluto TV Privacy Action

    A California federal judge Tuesday allowed seven claims to proceed in an amended action alleging Paramount Skydance Corp. unlawfully disclosed the personally identifiable information of children who streamed content on its Pluto TV service, finding the parents sufficiently alleged privacy injuries after an earlier dismissal.

  • September 30, 2026

    Mid-Atlantic Law Firm Hit With Data Breach Class Action

    A Virginia woman filed a proposed class action on Tuesday accusing Midkiff Muncie & Ross PC of failing to protect her personal information from a cyberattack that the mid-Atlantic firm says it discovered in December.

  • September 30, 2026

    Insurer Must Cover Part Of Consulting Firm's $7.6M DOJ Deal

    A CNA insurer was required to defend a consulting firm against a False Claims Act suit claiming it allowed New Yorkers' personal information to be compromised while operating a pandemic-era rental assistance portal, and must cover a portion of the firm's $7.6 million settlement, a Virginia federal court ruled.

  • September 30, 2026

    Verano, Dispensary Failed To Protect Patient Info, Suit Says

    An Illinois woman is alleging that nationwide cannabis operator Verano Holdings Corp. and a St. Charles dispensary failed to properly protect patient data, allowing 2.4 million lines of database information to be put on the internet.

  • September 29, 2026

    Social Media Cos., Teens Spar Over Evidence Ahead Of Trials

    Social media companies and teens who allege the companies harmed their mental health sparred in California state court Tuesday over what evidence jurors will hear in an upcoming round of bellwether trials, including whether jurors should hear purported instances of domestic violence in the teens' home lives.

  • September 29, 2026

    Geico Call Class Sunk After Plaintiff Tosses Phone In River

    A Maryland federal judge has refused to certify a class of thousands of insurance claimants who received allegedly unauthorized prerecorded medical appointment reminders from a scheduling vendor retained by Geico, finding that factors such as the plaintiff's decision to throw his cellphone into the Mississippi River made him an inadequate class representative.

  • September 29, 2026

    OpenAI Knew AI Was Rogue Before Hugging Face, Suit Says

    A public interest law nonprofit sued OpenAI in California state court Tuesday, seeking to hold the ChatGPT maker liable for a July cyberattack on Hugging Face, arguing OpenAI "straightforwardly violated California law" by failing to rein in hundreds of rogue AI agents that OpenAI knew were running amok without proper safeguards.

  • September 29, 2026

    7th Circ. Skeptical Of Reviving License Plate Surveillance Suit

    A Seventh Circuit panel seemed skeptical Tuesday that it should revive two Cook County residents' lawsuit claiming the Illinois State Police subject residents to unconstitutional searches through automatic license plate reading cameras whose data is saved for months.

  • September 29, 2026

    DC Circ. Anthropic Ruling Could Chill Contractor Speech

    The D.C. Circuit's decision backing the U.S. Department of Defense's removal of Anthropic from its supply chain was based on a broad reading of the Federal Acquisition Supply Chain Security Act, which could lead contractors to be more careful about publicizing disputes with the department.

  • September 29, 2026

    States' Temporary Aid Data-Sharing Injunction Bid Falls Short

    A D.C. federal judge declined to block a Trump administration policy allowing disclosures of temporary financial assistance recipients' sensitive personal information to federal authorities, saying that while it "seems plausible" this will chill participation in the program, Democratic-led states challenging the policy haven't provided "concrete evidence" of such harm.

  • September 29, 2026

    Ex-U. Of Mich. Coach Says Student's Hacking Suit Falls Short

    Former University of Michigan assistant football coach Matthew Weiss says a civil suit alleging he used his position in the athletic program to access personal photos and videos of thousands of young athletes is time-barred and hinges on expanding cybersecurity laws past precedent.

  • September 29, 2026

    Google Beats Suit Over 'Pig Butchering' App Scams, For Now

    A California federal judge tossed with leave to amend Monday a proposed class action alleging Google falsely advertised its Google Play Store as safe despite allowing swarms of "pig butchering" crypto-scam apps, finding that the claims are barred by Section 230 of the Communications Decency Act.

  • September 29, 2026

    Reed Smith Adds AI, Data And Cyber Partner In Chicago

    Reed Smith LLP announced Tuesday that an attorney specializing in cybersecurity and data privacy matters has moved her practice to the firm's Chicago office after more than two years with Neal Gerber & Eisenberg LLP.

  • September 29, 2026

    Fired Teacher Says AI Tainted Review And Arbitration

    A Massachusetts kindergarten teacher is suing to redo arbitration over her firing, saying the arbitrator who affirmed the school's decision used artificial intelligence to vet her claims that the principal relied on AI to prepare her final, negative performance evaluation.

  • September 29, 2026

    DOJ Puts FCA Target On Health Data Security Lapses

    Government contractors that fail to protect personal health information are on the radar of U.S. Department of Justice officials looking to leverage the False Claims Act, attorneys told attendees at a health law conference in Washington, D.C.

  • September 28, 2026

    Grok-Maker Can't Get Deepfake Suit Paused Or Transferred

    Elon Musk's artificial intelligence company must continue battling a proposed class action brought by women suing over Grok-generated deepfakes of them in sexual situations, a California federal judge ruled Monday, declining to pause or transfer the suit to Texas.

Expert Analysis

  • GM Privacy Penalty Signals A Change In Calif. Enforcement

    Author Photo

    General Motors' $12.75 million settlement with the California attorney general over its sale of driving behavior and geolocation data to brokers shows that disclosures and user choice may no longer be enough to define permissible data use, says Sonja Arndt-Johnson at Buchalter.

  • NY Defamation Carveout Hinges On Causation, Not Labels

    Author Photo

    A New York federal court's decisions in two cases involving tortious interference claims, and the recent Second Circuit ruling in Satanic Temple v. Newsweek Digital, highlight that the dispositive question for alleged defamation is whether injury flows through reputation or through direct interference with a relationship, says attorney Andrea Natale.

  • Series

    Power To The Paralegals: Burnout As A Structural Problem

    Author Photo

    Law firm leadership can best retain their paralegals not by encouraging self-care, but by seeking top-down structural solutions for the quiet proliferation of responsibilities and the vicarious exposure to client trauma that particularly drive burnout in this vital role, says Erika Sneeringer at Brockstedt Mandalas.

  • 11th Circ. Ruling Reflects Shift In Digital Consent Frameworks

    Author Photo

    The Eleventh Circuit's recent decision in Tejon v. Zeus Networks that a browsewrap terms-of-service hyperlink was insufficiently conspicuous to bind a consumer to an arbitration agreement could accelerate a broader industry shift to clickwrap as the baseline for enforceable digital consent, say attorneys at Sheppard.

  • Class Actions At The Circuit Courts: June Lessons

    Author Photo

    In this month's review of class action appeals, Mitchell Engel at Shook Hardy discusses five recent rulings from cases involving allegations of internet data misuse, consumer fraud claims, immigration, insurance and First Amendment violation claims.

  • Justices' FCC Fine Ruling May Weaken Agency Leverage

    Author Photo

    The U.S. Supreme Court's decision in Federal Communications Commission v. AT&T upheld the commission's forfeiture framework as consistent with Jarkesy, but it is also likely to reduce the effectiveness of the commission’s forfeiture proceedings as a collection and deterrence tool, say attorneys at Venable.

  • Ill. Law Firm MSO Bill Clashes With Court Power, Ethics Rules

    Author Photo

    An Illinois bill prohibiting law firms from certain business arrangements with management service organizations, sent to the governor for signature last week, encroaches upon the courts' constitutional powers and goes beyond the Illinois Rules of Professional Conduct in regulating investment in law-related services, says Matthew O’Hara at Smith Gambrell.

  • 3rd Circ. Decision Sheds Light On BIPA Bank Exemption

    Author Photo

    The Third Circuit's recent decision in McGoveran v. Amazon illuminates how courts are extending the Illinois Biometric Information Privacy Act's financial institution carveout beyond banks and insurers to technology vendors and other businesses handling biometric data, a defendant-friendly shift that still casts uncertainty around BIPA's enforcement, say attorneys at Dorsey & Whitney.

  • Constructing AI Compliance Plans As State Laws Diverge

    Author Photo

    With Colorado, Connecticut and the federal government recently announcing wildly different approaches to artificial intelligence regulation, creating a workable compliance program means addressing overlapping obligations using shared systems rather than separate silos, say attorneys at Ogletree.

  • Opinion

    State Courts Must Be Gatekeepers Of Expert Testimony

    Author Photo

    Based on my experience in the state judiciary, emulating federal courts' role as gatekeepers of expert witness testimony would help state court judges maintain the appearance of impartiality and assist juries, thus enhancing the overall confidence people have in their justice system, says Lorie Gildea at Greenberg Traurig.

  • Weighing The Implications Of The Anthropic Export Directive

    Author Photo

    The Trump administration recently issued an export control directive against Anthropic to suspend all access to Fable 5 and Mythos 5 by any foreign national, representing one of the first uses of the regime against a frontier large language model in widespread commercial distribution, says attorney Sohan Dasgupta.

  • Series

    Moshing Makes Me A Better Lawyer

    Author Photo

    Entering a mosh pit is much like entering the practice of law — it is difficult, you have to know both the written and unwritten rules, and conduct yourself according to the expectations of each community, says Christopher Deubert at Constangy Brooks.

  • Why Highly Specialized Experts May Risk Exclusion At Trial

    Author Photo

    Expert witnesses with highly specific areas of focus may be vulnerable to exclusion in court, making it important for attorneys to check how potential witnesses' qualifications can be bolstered by their publications and other professional activities, say Evan Weisberg and Christopher Cunio at Hunton, and Kevin Cahill at FTI Consulting.

  • Steps For Employers After 7th Circ. BIPA Retroactivity Ruling

    Author Photo

    The Seventh Circuit's recent ruling in Clay v. Union Pacific sharply limits per-scan statutory damages theories in pending Biometric Information Privacy Act cases by retroactively applying a 2024 amendment, but employers should not mistake the holding for a broad safe harbor, say attorneys at Thompson Coburn.

  • Trump AI Order: Voluntary Framework, Mandatory Implications

    Author Photo

    President Donald Trump's recent executive order promoting the advancement of artificial intelligence innovation and security establishes a new framework for government collaboration with the AI industry, but its classified benchmarking criteria, prerelease framework terms and operational rules will determine whether it establishes de facto compliance expectations, say attorneys at Ropes & Gray.

Want to publish in Law360?


Submit an idea

Have a news tip?


Contact us here
Can't find the article you're looking for? Click here to search the Cybersecurity & Privacy archive.