Cybersecurity & Privacy

  • September 30, 2025

    Nationwide Insurers Must Defend Auto Co. In BIPA Dispute

    Two Nationwide units must defend an automotive accessory company accused of violating Illinois' Biometric Information Privacy Act, an Illinois federal court held Tuesday, following a ruling in a separate case that found no coverage for the company under its Hanover Insurance policies.

  • September 30, 2025

    CFPB Looks To Save Renewed Experian Credit Reporting Suit

    Consumer reporting agency Experian Information Solutions Inc. should not be allowed to escape certain Fair Credit Reporting Act allegations taking aim at its handling of consumer disputes, the Consumer Financial Protection Bureau has argued, asserting the parties made an "inadvertent mutual mistake" in leaving Experian's name off the parties' agreement to toll the CFPB's claims.

  • September 30, 2025

    Defamation Litigation Roundup: Trump, Baker McKenzie

    In this month's review of defamation fights, Law360 reports the latest updates in President Donald Trump's suits against major news organizations over their reporting on his presidency and relationships, as well as developments in a voting machine company's suit against MyPillow's CEO over election-rigging claims.

  • September 30, 2025

    Undercover Cop's Nonwhite 'Bitmoji' May Be Bias, Court Says

    A Massachusetts police department's use of a nonwhite "bitmoji" avatar while conducting gang surveillance on Snapchat could reasonably be viewed as selective enforcement, the state's high court said on Tuesday, in a case being watched by a coalition of criminal justice, civil liberties and privacy advocates.

  • September 30, 2025

    Calif. Agency Fines Retailer $1.35M Over Data Privacy Lapses

    Rural lifestyle retailer Tractor Supply Co. will pay a record $1.35 million penalty and overhaul its data privacy practices to resolve the California privacy agency's claims that it failed to properly notify consumers and job applicants of their privacy rights, maintain adequate agreements with service providers and provide consumers with an effective way to stop the sharing and sale of their personal information, the regulator announced Tuesday.

  • September 29, 2025

    Meta Faces Sanctions Bid Alleging Co. Destroyed 'Taps' Data

    Personal injury plaintiffs have urged a California state judge to sanction Meta Platforms Inc. in coordinated litigation over claims social media harms young users' mental health, alleging Meta willfully destroyed crucial time‑stamped "taps" data that captures users' taps, scrolls and swipes on Facebook and Instagram.

  • September 29, 2025

    Newsom Signs AI Law Requiring Guardrails, More Disclosures

    California Gov. Gavin Newsom on Monday signed into law a bill that bolsters safety and disclosure requirements for artificial intelligence companies in the Golden State, a measure the governor said further establishes California as a leader in "safe, secure and trustworthy artificial intelligence."

  • September 29, 2025

    Google VP Says Ad Tech Breakup Has Risks For Publishers

    A Google LLC executive tried to convince a Virginia federal judge Monday that the U.S. Justice Department has the company's advertising placement technology business backward, arguing that instead of helping website publishers, the breakup sought by the government would cost time and money, while artificial intelligence is scrambling prospects too much to warrant greater intervention.

  • September 29, 2025

    Meta Ducks Antitrust Suit As Economist's Opinions Excluded

    A California federal judge on Monday freed Meta from an antitrust lawsuit that accused it of monopolizing an asserted market for personal social networking, saying Facebook users failed to prove the existence of an antitrust injury, with or without help from an expert witness.

  • September 29, 2025

    Chess Website Can't Dodge Suit Over Video Data-Sharing

    An Illinois federal judge has refused to ax a proposed class action accusing Chess.com LLC of illegally sharing information about website visitors' video-viewing activities, finding that the plaintiff qualified as a "consumer" and met two other necessary elements to assert a claim under the Video Privacy Protection Act.

  • September 29, 2025

    Resort Co. Loses TCPA Suit Targeting Unsolicited Promo Calls

    Club Exploria LLC lost its bid to compel arbitration in a class action targeting unsolicited telemarketing calls when an Illinois federal judge favored instead the lead plaintiff's bid for a quick win on his claim that the resort company violated the Telephone Consumer Protection Act.

  • September 29, 2025

    Insurer Loses Bid To Ax Coverage Of $1.35M Wire Loss Fight

    An Arizona federal court on Monday tossed an insurer's action seeking to avoid covering a brokerage firm in an underlying state court suit alleging it caused an audio company's buyer to lose $1.35 million through an incorrect wire transaction, finding both cases turn on the same factual issues.

  • September 29, 2025

    Meta Stole Plan For Instagram Shopping, Antitrust Suit Alleges

    A British company Friday sued Meta Platforms Inc. in California federal court, claiming the tech giant was only able to build Instagram Shopping and create a "Meta monopoly" over the tag-based shopping market by secretly stealing the startup's proprietary business plan and exploiting its social network dominance.

  • September 29, 2025

    Ill. Judge Trims Suit Over Chicago Children's Hospital Hack

    Patients and patrons of Lurie Children's Hospital in Chicago whose personal information was allegedly compromised in a hack can pursue their claim that the hospital's negligent data security practices led to the exposure, but an Illinois federal judge dismissed most of their other claims.

  • September 29, 2025

    MyPillow CEO Defamed Smartmatic, Minn. Judge Rules

    MyPillow CEO Mike Lindell defamed Smartmatic when he accused the voting systems company of rigging votes in the 2020 election to favor President Joe Biden, a Minnesota federal judge ruled, but issues of damages and whether the statements were made with malice will need to be worked out by a jury.

  • September 29, 2025

    TikTok Can't Use Section 230 To End NJ AG's Harm Suit

    A New Jersey state court judge has rejected TikTok's bid to use an internet safety law carveout that shields publishers of third-party information to end Attorney General Matthew Platkin's lawsuit over the exploitation of children, reasoning that the alleged harm stems from the social media app's design rather than what users view.

  • September 29, 2025

    NY's Top Financial Services Regulator Is Stepping Down

    The head of the New York State Department of Financial Services is stepping down next month and will be replaced on an interim basis by the chief of its fintech-focused innovation division, New York Gov. Kathy Hochul said Monday.

  • September 26, 2025

    Meta Set To Appeal Flo Privacy Verdict As Users Seek Billions

    Meta is gearing up to appeal a California federal jury verdict that found it liable for using a data analytics tool to illegally retrieve sensitive health data from users of the popular menstrual tracking app Flo, the company disclosed in a posttrial filing in which the plaintiffs separately asked the court to award statutory damages that could reach the billions.

  • September 26, 2025

    Trump Demands Microsoft Fire Ex-Biden Deputy AG Monaco

    President Donald Trump on Friday demanded that Microsoft fire its new President of Global Affairs Lisa Monaco, deputy attorney general in the Biden administration and homeland security adviser in the Obama administration, in what seems to be the president's latest effort to exact revenge on his perceived political enemies.

  • September 26, 2025

    Ad Tech Judge Told Google Shouldn't Control Auctions

    The head of an industry consortium that could have an important role in breaking up Google's advertising placement technology business told a Virginia federal judge Friday that the Justice Department should be able to take away Google's control over the processes that pick where ads are placed.

  • September 26, 2025

    Google Asks High Court To Pause Epic Play Store Order

    Google has asked the U.S. Supreme Court to pause parts of the order won by Epic Games in its antitrust case targeting the tech giant's app store policies, saying the sweeping injunction threatens to create security and privacy concerns for millions of users.

  • September 26, 2025

    Conn. Psych Facility Faces Class Claims Over Data Breach

    A residential psychiatric treatment facility in Connecticut fell victim to a cyberattack that exposed the personal information of more than 5,000 current and former patients and employees, according to a putative class action that alleges The Children's Center of Hamden Inc. was negligent with its data security.

  • September 26, 2025

    Fla. Urges 11th Circ. To Remand Snap Inc. Suit To State Court

    The Florida Office of the Attorney General urged the Eleventh Circuit to undo an order blocking enforcement of a law that requires Snap Inc. to limit teens' access to the platform, arguing the case belongs in state court. 

  • September 26, 2025

    Oldies.com Class Claims Over Video-Buying Info Kept Alive

    A Pennsylvania federal judge has ruled that online video seller oldies.com must face a customer's proposed class action claiming it unlawfully disclosed his personal viewing information, finding he adequately showed the website violated the Video Privacy Protection Act.

  • September 26, 2025

    FCC Rejects More Equipment Labs Tied To Adversaries

    The Federal Communications Commission said Friday it had blocked more labs tied to foreign adversaries from its equipment authorization program.

Expert Analysis

  • Annual Report Shows CFIUS Extending Its Reach In 2024

    Author Photo

    The recently released 2024 annual report from the Committee on Foreign Investment in the United States reveals record civil penalties and enhanced internal capabilities, illustrating expanding jurisdiction and an increasing appetite for enforcement actions, says Nathan Fisher at StoneTurn.

  • From Clerkship To Law Firm: 5 Transition Tips For Associates

    Excerpt from Practical Guidance
    Author Photo

    Transitioning from a judicial clerkship to an associate position at a law firm may seem daunting, but by using knowledge gained while clerking, being mindful of key differences and taking advantage of professional development opportunities, these attorneys can flourish in private practice, say attorneys at Lowenstein Sandler.

  • Cybersecurity Risks Can Lurk In Gov't Contractor Acquisitions

    Author Photo

    The Justice Department’s recent False Claims Act enforcement activity against Raytheon and Nightwing-related defense contractors demonstrates the importance of identifying and mitigating potential cybersecurity compliance risks when acquiring a company that contracts with the federal government, say attorneys at Foley & Lardner.

  • Associates Can Earn Credibility By Investing In Relationships

    Author Photo

    As the class of 2025 prepares to join law firms this fall, new associates must adapt to office dynamics and establish credible reputations — which require quiet, consistent relationship-building skills as much as legal acumen, says Kyle Forges at Bast Amron.

  • New Colo. Teen Privacy Rules Signal National Regulatory Shift

    Author Photo

    Recently released proposed rule amendments to the Colorado Privacy Act that would create some of the most robust protections for minors' online data in the U.S. reflect an ongoing trend of states taking steps to extend privacy protection for their residents, complicating the compliance burden for companies, say attorneys at Morgan Lewis.

  • A Look At New Calif. Cybersecurity, Risk Assessment Rules

    Author Photo

    The California Privacy Protection Agency Board recently finalized regulations related to automated decision-making technology, cybersecurity audits and risk assessments that establish additional requirements on businesses operating in California, and although these new rules are less onerous than some of the draft rules, compliance may still require substantial planning and updates, say attorneys at Morgan Lewis.

  • Lessons From 7th Circ.'s Deleted Chat Sanctions Ruling

    Author Photo

    The Seventh Circuit’s recent decision in Pable v. Chicago Transit Authority, affirming the dismissal of an ex-employee’s retaliation claims, highlights the importance of properly handling the preservation of ephemeral messages and clarifies key sanctions issues, says Philip Favro at Favro Law.

  • Divest Order Shows How Security Fears Extend CFIUS Scope

    Author Photo

    A recent White House order forcing a Chinese company to divest its 2020 acquisition of a U.S. audiovisual supplier demonstrates the Committee on Foreign Investment in the United States’ growing power to sink foreign transactions over national security concerns — and the enormous risks to U.S. companies from such reviews, say attorneys at Bass Berry.

  • Series

    Quilting Makes Me A Better Lawyer

    Author Photo

    Turning intricate patterns of fabric and thread into quilts has taught me that craftsmanship, creative problem-solving and dedication to incremental progress are essential to creating something lasting that will help another person — just like in law, says Veronica McMillan at Kramon & Graham.

  • Lessons Learned 3 Years After First CCPA Enforcement Action

    Author Photo

    Three years after the first public enforcement action under the California Consumer Privacy Act, Attorney General Rob Bonta has pursued a steady stream of enforcement actions across industries, providing a clearer picture of how the law is being interpreted and enforced, says Tatum Andres at Kilpatrick.

  • 2 Appellate Rulings Offer Clickwrap Enforcement Road Map

    Author Photo

    Two recent decisions from the Fourth and Eleventh Circuits in cases involving Experian signal that federal appellate courts are recognizing clickwrap agreements' power in spite of their simplicity, and offer practical advice on how companies can sufficiently demonstrate notice and assent when attempting to enforce contractual terms, says Brian Willett at Saul Ewing.

  • What 2 Profs Noticed As Transactional Law Students Used AI

    Author Photo

    After a semester using generative artificial intelligence tools with students in an entrepreneurship law clinic, we came away with numerous observations about the opportunities and challenges such tools present to new transactional lawyers, say professors at Cornell Law School.

  • Crypto Custody Guidelines Buoy Both Banks And Funds

    Author Photo

    A statement released last month by banking regulators — highlighting risks that the agencies expect banks holding crypto-assets to mitigate — may encourage more traditional institutions to offer crypto-asset safekeeping and thereby offer asset managers more options for qualified custodians to custody crypto-assets for their clients, say attorneys at Dechert.

  • Top Takeaways From Trump's AI Action Plan

    Author Photo

    President Donald Trump's AI Action Plan represents some notable evolution in U.S. policy, including affirmation of the administration's trend toward prioritizing artificial intelligence innovation over guardrails and toward supporting greater U.S. private sector reach overseas, say attorneys at WilmerHale.

  • Reel Justice: 'Eddington' Spotlights Social Media Evidence

    Author Photo

    In the neo-Western black comedy “Eddington” released last month, social media is a character unto itself, highlighting how the boundaries between digital and real-world conduct can become blurred, thereby posing evidentiary challenges in criminal prosecutions, says Veronica Finkelstein at Wilmington University School of Law.

Want to publish in Law360?


Submit an idea

Have a news tip?


Contact us here
Can't find the article you're looking for? Click here to search the Cybersecurity & Privacy archive.