Cybersecurity & Privacy

  • September 16, 2026

    Parties Clash Over Scope Of GIPA In DNA Test-Taker's Suit

    An Illinois federal judge is weighing whether the state's genetic privacy law protects against disclosing information about people who have taken genetic tests, with a DNA testing company accused of unlawfully sharing such information with Google arguing Wednesday the statute applies only to disclosure of actual test results.

  • September 16, 2026

    State Bank Supervisor Group Issues AI Exam Framework

    The Conference of State Bank Supervisors on Wednesday unveiled a new oversight framework for artificial intelligence at financial firms, rolling out resources aimed at giving state examiners a common roadmap for reviewing how their regulated institutions are deploying the technology.

  • September 16, 2026

    Tenn. Must Face Adult-Entertainment Groups' Age-Check Suit

    A federal judge in Tennessee has ruled that the state must face a suit from free speech advocates, an individual adult-content creator and adult-entertainment industry groups claiming a state law requiring age checks violates their First Amendment rights.

  • September 16, 2026

    Split Conn. High Court Won't Shield Yale Accuser's Name

    In a 4-3 opinion Wednesday, the Connecticut Supreme Court said a trial judge correctly dismissed a sexual assault accuser's emergency 2024 request to remove her name from transcripts in the long-closed criminal prosecution of former Yale student Saifullah Khan, ruling the trial court lost jurisdiction after a jury's 2018 acquittal.

  • September 16, 2026

    McLaren Patients' Web Tracking Privacy Claims Advance

    A Michigan federal judge has allowed patients to move forward with claims that McLaren Health Care Corp. and the Barbara Ann Karmanos Cancer Institute allegedly intercepted their electronic communications and benefited from sensitive health information collected through tracking technology embedded in their websites.

  • September 16, 2026

    SEC Fines Ex-Okta Employees In Insider Trading Case

    Two former Okta sales managers have reached settlements with the U.S. Securities and Exchange Commission to resolve claims that they traded Okta stock on insider information before the company announced that its financial plan for the year needed adjustment.

  • September 16, 2026

    Vanguard Trims But Can't Shake Users' Data Tracking Suit

    A Pennsylvania federal judge tossed federal wiretapping and California invasion of privacy claims brought against investment management company Vanguard in a user class action over third-party tracking and sharing of data, but allowed the plaintiffs to amend the suit while keeping a state-based wiretapping claim alive. 

  • September 16, 2026

    Cyber Insurer Can't Avoid Auto Shop's $4.9M Coverage Suit

    An Illinois state court refused to toss an auto repair company's suit seeking to recover $4.9 million in coverage from its cyber insurer for a ransomware attack, saying the policy doesn't establish that the insurer owes nothing for the loss.

  • September 15, 2026

    Meta Beats Proposed Privacy Class Action Over 'Voiceprints'

    A California federal judge tossed on Tuesday a proposed class action claiming Meta's messaging platforms secretly and unlawfully capture Facebook users' "voiceprints" and related biometric information, finding the plaintiff agreed to let Meta use his personal data when he signed up for an account.

  • September 15, 2026

    Disney Wants Kids' Data Privacy Claims Tossed For Good

    Disney on Monday asked a California federal court to once again throw out a proposed class action claiming it allowed advertisers to illegally collect minors' personal information, pressing for the dismissal of a new version of the complaint just days after YouTube said it had reached a settlement in the case.

  • September 15, 2026

    How States' 'Perry Mason Moment' Led To $17B Meta Deal

    A recent landmark $17.1 billion settlement with Meta Platforms Inc. may have never happened if it weren't for a quick-thinking trial attorney and his close-knit team of lawyers representing 29 states, who worked together to swiftly shift strategies midtrial.

  • September 15, 2026

    Meta's Data Collection From DMV Is Invasive, Calif. Drivers Say

    Golden State drivers seeking to certify two classes over claims that Meta unlawfully obtained information from the state Department of Motor Vehicles' website told a California federal judge Tuesday that they have standing to sue under the Driver's Privacy Protection Act because the collection was invasive, even if it wasn't embarrassing or sensitive.

  • September 15, 2026

    Justices Told DHS Voter Citizenship Database 'Unprecedented'

    The U.S. Supreme Court should reject the Trump administration's bid to reinstate the U.S. Department of Homeland Security's upgraded citizenship verification database ahead of this year's election, a voting rights group told the court Tuesday, arguing that the administration unlawfully reinterpreted several statutes to claim that Congress authorized the changes.

  • September 15, 2026

    Cruz Delays FCC Nom's Hearing Amid Calls To Add Dem Pick

    A bevy of civil rights organizations said Tuesday the U.S. Senate should hold off on confirming another Republican to the Federal Communications Commission unless a sitting FCC Democrat is renominated to her post.

  • September 15, 2026

    Burger King Owner Inks $18M Deal In Suit Over $1B Buyout

    Burger King and Popeyes owner Restaurant Brands International Inc. has reached an $18.2 million deal with shareholders who say they were "materially uninformed" about the true value of the company's 2024 $1 billion buyout of fast food franchisee Carrols Restaurant Group Inc.

  • September 15, 2026

    Salesforce Must Face Claims Over Customer Data Breach

    A California federal judge has largely denied Salesforce's bid to dismiss a proposed class action alleging security weaknesses in its cloud platform allowed hackers to steal the personal information of customers and employees of Allianz, Farmers Group and TransUnion.

  • September 15, 2026

    No Pause Needed In Daniel's Law Cases, 3rd Circ. Told

    Atlas Data Privacy Corp. urged the Third Circuit to reject a bid to pause discovery in consolidated litigation over New Jersey's judicial privacy law as the appeals court considers a First Amendment challenge to the statute, arguing the defendant data brokers failed to show irreparable harm.

  • September 15, 2026

    Call Center Seeks Coverage For $5M Adidas Data Breach Deal

    A Wisconsin business process outsourcing company said in federal court that a Chubb unit breached its policy when the insurer refused to cover $5 million the call center paid to Adidas to resolve claims over data breaches that compromised the sneaker giant's customers' personal information.

  • September 14, 2026

    Zumba Video Buyers Seek Initial Nod For $2.7M Privacy Deal

    A certified class of over 4,500 on-demand video purchasers who allege Zumba illegally divulged their personal information to third parties pressed a Florida federal judge to approve a $2.7 million settlement they claim is "in a league of its own" and outpaces prior deals under federal video privacy law.

  • September 14, 2026

    Wash AG Fights T-Mobile's Bid To Undo Data Breach Ruling

    The Washington State Office of the Attorney General asked a King County Superior Court judge to deny T-Mobile's bid for reconsideration of a recent ruling finding it is liable for more than 722,000 violations of a state data breach notification law.

  • September 14, 2026

    Under Armour Can't Duck Suit Alleging Massive Data Breach

    A Maryland federal judge has denied Under Armour's bid to nix a proposed class action alleging a November data breach leaked the personal information of more than 72 million of its consumers and employees, saying the plaintiffs sufficiently claimed the breach caused them harm such as identity theft.

  • September 14, 2026

    Facebook Third-Party Apps Took User Data, Jury Told

    A technology expert testified Monday in New Mexico's data privacy trial against Meta that Facebook third-party app developers "rampantly" farmed user data and that the social media giant closed investigations of dubious developers without action.

  • September 14, 2026

    NY Flags AI Models As Cyber Risk Review Factor For Banks

    A top New York regulator is urging the state's banks and insurers to stay on top of evolving cybersecurity threats, flagging the launch of powerful new artificial intelligence models as the kind of major market development that can necessitate updating their risk assessments.

  • September 14, 2026

    Certifying Body Lied About Being US-Based, FCC Says

    Derycom Certification Services lied about its ties to China in order to receive the Federal Communications Commission's authorization to serve as a telecommunication certification body, which requires an organization to be based in the United States, the agency said.

  • September 14, 2026

    Renaissance Learning Beats Student Data Privacy Suit

    A California federal judge has dismissed a proposed class action accusing education software company Renaissance Learning Inc. of unlawfully collecting and sharing students' personal information, finding that the families' allegations did not support their privacy, wiretapping or unjust enrichment claims.

Expert Analysis

  • Justices' FCC Fine Ruling May Weaken Agency Leverage

    Author Photo

    The U.S. Supreme Court's decision in Federal Communications Commission v. AT&T upheld the commission's forfeiture framework as consistent with Jarkesy, but it is also likely to reduce the effectiveness of the commission’s forfeiture proceedings as a collection and deterrence tool, say attorneys at Venable.

  • Ill. Law Firm MSO Bill Clashes With Court Power, Ethics Rules

    Author Photo

    An Illinois bill prohibiting law firms from certain business arrangements with management service organizations, sent to the governor for signature last week, encroaches upon the courts' constitutional powers and goes beyond the Illinois Rules of Professional Conduct in regulating investment in law-related services, says Matthew O’Hara at Smith Gambrell.

  • 3rd Circ. Decision Sheds Light On BIPA Bank Exemption

    Author Photo

    The Third Circuit's recent decision in McGoveran v. Amazon illuminates how courts are extending the Illinois Biometric Information Privacy Act's financial institution carveout beyond banks and insurers to technology vendors and other businesses handling biometric data, a defendant-friendly shift that still casts uncertainty around BIPA's enforcement, say attorneys at Dorsey & Whitney.

  • Constructing AI Compliance Plans As State Laws Diverge

    Author Photo

    With Colorado, Connecticut and the federal government recently announcing wildly different approaches to artificial intelligence regulation, creating a workable compliance program means addressing overlapping obligations using shared systems rather than separate silos, say attorneys at Ogletree.

  • Opinion

    State Courts Must Be Gatekeepers Of Expert Testimony

    Author Photo

    Based on my experience in the state judiciary, emulating federal courts' role as gatekeepers of expert witness testimony would help state court judges maintain the appearance of impartiality and assist juries, thus enhancing the overall confidence people have in their justice system, says Lorie Gildea at Greenberg Traurig.

  • Weighing The Implications Of The Anthropic Export Directive

    Author Photo

    The Trump administration recently issued an export control directive against Anthropic to suspend all access to Fable 5 and Mythos 5 by any foreign national, representing one of the first uses of the regime against a frontier large language model in widespread commercial distribution, says attorney Sohan Dasgupta.

  • Series

    Moshing Makes Me A Better Lawyer

    Author Photo

    Entering a mosh pit is much like entering the practice of law — it is difficult, you have to know both the written and unwritten rules, and conduct yourself according to the expectations of each community, says Christopher Deubert at Constangy Brooks.

  • Why Highly Specialized Experts May Risk Exclusion At Trial

    Author Photo

    Expert witnesses with highly specific areas of focus may be vulnerable to exclusion in court, making it important for attorneys to check how potential witnesses' qualifications can be bolstered by their publications and other professional activities, say Evan Weisberg and Christopher Cunio at Hunton, and Kevin Cahill at FTI Consulting.

  • Steps For Employers After 7th Circ. BIPA Retroactivity Ruling

    Author Photo

    The Seventh Circuit's recent ruling in Clay v. Union Pacific sharply limits per-scan statutory damages theories in pending Biometric Information Privacy Act cases by retroactively applying a 2024 amendment, but employers should not mistake the holding for a broad safe harbor, say attorneys at Thompson Coburn.

  • Trump AI Order: Voluntary Framework, Mandatory Implications

    Author Photo

    President Donald Trump's recent executive order promoting the advancement of artificial intelligence innovation and security establishes a new framework for government collaboration with the AI industry, but its classified benchmarking criteria, prerelease framework terms and operational rules will determine whether it establishes de facto compliance expectations, say attorneys at Ropes & Gray.

  • Defending Against Remote Work Risks During The World Cup

    Author Photo

    With World Cup matches underway, remote work policies and security measures can help employers manage the risks of employees working from sports arenas and other nontraditional locations, including hours-worked compliance, network security and data protection, says Lisa Burton at Ogletree.

  • Drawing A Line Between Settlement Pressure And Extortion

    Author Photo

    U.S. v. Luo, pending in the U.S. District Court for the Southern District of New York, may force courts to address anew when settlement negotiations become criminal extortion, particularly in the age of easily fabricated digital evidence, says attorney Denis Kiely.

  • Colorado's New Chatbot Law May Be Defined By Its Carveouts

    Author Photo

    What makes Colorado's conversational artificial intelligence service law worth close attention is what it leaves out, so a thorough scoping analysis may be as important as compliance planning for companies that develop, license or deploy conversational AI, say attorneys at Eversheds Sutherland.

  • Risk Reduction Lessons For PE Firms From PowerSchool Suit

    Author Photo

    A California federal court's recent orders allowing claims against Bain Capital to proceed based on a data breach at its subsidiary PowerSchool indicate that private equity firms need to strategically approach acquisition activities to avoid cybersecurity risks, say attorneys at Womble Bond.

  • 'Honeypot' Suit Spotlights Nuances Of Trade Secret Law

    Author Photo

    Fintech company MyCard's recent complaint filed in Delaware federal court, alleging that competitor Atomic FI copied its proprietary software, including a "honeypot" in the form of a specific 37-character string, highlights fact-intensive questions of when alleged trade secrets are actually secret, says Eugene Mar at Farella Braun.

Want to publish in Law360?


Submit an idea

Have a news tip?


Contact us here
Can't find the article you're looking for? Click here to search the Cybersecurity & Privacy archive.