Cybersecurity & Privacy

  • September 16, 2026

    State Bank Supervisor Group Issues AI Exam Framework

    The Conference of State Bank Supervisors on Wednesday unveiled a new oversight framework for artificial intelligence at financial firms, rolling out resources aimed at giving state examiners a common roadmap for reviewing how their regulated institutions are deploying the technology.

  • September 16, 2026

    Tenn. Must Face Adult-Entertainment Groups' Age-Check Suit

    A federal judge in Tennessee has ruled that the state must face a suit from free speech advocates, an individual adult-content creator and adult-entertainment industry groups claiming a state law requiring age checks violates their First Amendment rights.

  • September 16, 2026

    Split Conn. High Court Won't Shield Yale Accuser's Name

    In a 4-3 opinion Wednesday, the Connecticut Supreme Court said a trial judge correctly dismissed a sexual assault accuser's emergency 2024 request to remove her name from transcripts in the long-closed criminal prosecution of former Yale student Saifullah Khan, ruling the trial court lost jurisdiction after a jury's 2018 acquittal.

  • September 16, 2026

    McLaren Patients' Web Tracking Privacy Claims Advance

    A Michigan federal judge has allowed patients to move forward with claims that McLaren Health Care Corp. and the Barbara Ann Karmanos Cancer Institute allegedly intercepted their electronic communications and benefited from sensitive health information collected through tracking technology embedded in their websites.

  • September 16, 2026

    SEC Fines Ex-Okta Employees In Insider Trading Case

    Two former Okta sales managers have reached settlements with the U.S. Securities and Exchange Commission to resolve claims that they traded Okta stock on insider information before the company announced that its financial plan for the year needed adjustment.

  • September 16, 2026

    Vanguard Trims But Can't Shake Users' Data Tracking Suit

    A Pennsylvania federal judge tossed federal wiretapping and California invasion of privacy claims brought against investment management company Vanguard in a user class action over third-party tracking and sharing of data, but allowed the plaintiffs to amend the suit while keeping a state-based wiretapping claim alive. 

  • September 16, 2026

    Cyber Insurer Can't Avoid Auto Shop's $4.9M Coverage Suit

    An Illinois state court refused to toss an auto repair company's suit seeking to recover $4.9 million in coverage from its cyber insurer for a ransomware attack, saying the policy doesn't establish that the insurer owes nothing for the loss.

  • September 15, 2026

    Meta Beats Proposed Privacy Class Action Over 'Voiceprints'

    A California federal judge tossed on Tuesday a proposed class action claiming Meta's messaging platforms secretly and unlawfully capture Facebook users' "voiceprints" and related biometric information, finding the plaintiff agreed to let Meta use his personal data when he signed up for an account.

  • September 15, 2026

    Disney Wants Kids' Data Privacy Claims Tossed For Good

    Disney on Monday asked a California federal court to once again throw out a proposed class action claiming it allowed advertisers to illegally collect minors' personal information, pressing for the dismissal of a new version of the complaint just days after YouTube said it had reached a settlement in the case.

  • September 15, 2026

    How States' 'Perry Mason Moment' Led To $17B Meta Deal

    A recent landmark $17.1 billion settlement with Meta Platforms Inc. may have never happened if it weren't for a quick-thinking trial attorney and his close-knit team of lawyers representing 29 states, who worked together to swiftly shift strategies midtrial.

  • September 15, 2026

    Meta's Data Collection From DMV Is Invasive, Calif. Drivers Say

    Golden State drivers seeking to certify two classes over claims that Meta unlawfully obtained information from the state Department of Motor Vehicles' website told a California federal judge Tuesday that they have standing to sue under the Driver's Privacy Protection Act because the collection was invasive, even if it wasn't embarrassing or sensitive.

  • September 15, 2026

    Justices Told DHS Voter Citizenship Database 'Unprecedented'

    The U.S. Supreme Court should reject the Trump administration's bid to reinstate the U.S. Department of Homeland Security's upgraded citizenship verification database ahead of this year's election, a voting rights group told the court Tuesday, arguing that the administration unlawfully reinterpreted several statutes to claim that Congress authorized the changes.

  • September 15, 2026

    Cruz Delays FCC Nom's Hearing Amid Calls To Add Dem Pick

    A bevy of civil rights organizations said Tuesday the U.S. Senate should hold off on confirming another Republican to the Federal Communications Commission unless a sitting FCC Democrat is renominated to her post.

  • September 15, 2026

    Burger King Owner Inks $18M Deal In Suit Over $1B Buyout

    Burger King and Popeyes owner Restaurant Brands International Inc. has reached an $18.2 million deal with shareholders who say they were "materially uninformed" about the true value of the company's 2024 $1 billion buyout of fast food franchisee Carrols Restaurant Group Inc.

  • September 15, 2026

    Salesforce Must Face Claims Over Customer Data Breach

    A California federal judge has largely denied Salesforce's bid to dismiss a proposed class action alleging security weaknesses in its cloud platform allowed hackers to steal the personal information of customers and employees of Allianz, Farmers Group and TransUnion.

  • September 15, 2026

    No Pause Needed In Daniel's Law Cases, 3rd Circ. Told

    Atlas Data Privacy Corp. urged the Third Circuit to reject a bid to pause discovery in consolidated litigation over New Jersey's judicial privacy law as the appeals court considers a First Amendment challenge to the statute, arguing the defendant data brokers failed to show irreparable harm.

  • September 15, 2026

    Call Center Seeks Coverage For $5M Adidas Data Breach Deal

    A Wisconsin business process outsourcing company said in federal court that a Chubb unit breached its policy when the insurer refused to cover $5 million the call center paid to Adidas to resolve claims over data breaches that compromised the sneaker giant's customers' personal information.

  • September 14, 2026

    Zumba Video Buyers Seek Initial Nod For $2.7M Privacy Deal

    A certified class of over 4,500 on-demand video purchasers who allege Zumba illegally divulged their personal information to third parties pressed a Florida federal judge to approve a $2.7 million settlement they claim is "in a league of its own" and outpaces prior deals under federal video privacy law.

  • September 14, 2026

    Wash AG Fights T-Mobile's Bid To Undo Data Breach Ruling

    The Washington State Office of the Attorney General asked a King County Superior Court judge to deny T-Mobile's bid for reconsideration of a recent ruling finding it is liable for more than 722,000 violations of a state data breach notification law.

  • September 14, 2026

    Under Armour Can't Duck Suit Alleging Massive Data Breach

    A Maryland federal judge has denied Under Armour's bid to nix a proposed class action alleging a November data breach leaked the personal information of more than 72 million of its consumers and employees, saying the plaintiffs sufficiently claimed the breach caused them harm such as identity theft.

  • September 14, 2026

    Facebook Third-Party Apps Took User Data, Jury Told

    A technology expert testified Monday in New Mexico's data privacy trial against Meta that Facebook third-party app developers "rampantly" farmed user data and that the social media giant closed investigations of dubious developers without action.

  • September 14, 2026

    NY Flags AI Models As Cyber Risk Review Factor For Banks

    A top New York regulator is urging the state's banks and insurers to stay on top of evolving cybersecurity threats, flagging the launch of powerful new artificial intelligence models as the kind of major market development that can necessitate updating their risk assessments.

  • September 14, 2026

    Certifying Body Lied About Being US-Based, FCC Says

    Derycom Certification Services lied about its ties to China in order to receive the Federal Communications Commission's authorization to serve as a telecommunication certification body, which requires an organization to be based in the United States, the agency said.

  • September 14, 2026

    Renaissance Learning Beats Student Data Privacy Suit

    A California federal judge has dismissed a proposed class action accusing education software company Renaissance Learning Inc. of unlawfully collecting and sharing students' personal information, finding that the families' allegations did not support their privacy, wiretapping or unjust enrichment claims.

  • September 14, 2026

    Cop Pitches Nationwide Class In Flock Privacy Lawsuit

    Flock's surveillance network invades the privacy of the public and enables law enforcement employees to track people for improper reasons, according to a proposed class action filed in Georgia federal court.

Expert Analysis

  • Quantum Readiness May Paradoxically Raise Contractor Risk

    Author Photo

    The organizations best positioned for the cryptographic system migration deadlines and other requirements under President Donald Trump’s recent quantum executive orders will be those able to inventory their cryptographic dependencies while protecting their vulnerability road map from adversaries, says Jesse Lemon at The Beckage Firm.

  • Justices Stand On Statutory Specifics In Cisco And Landor

    Author Photo

    With its June 23 decisions in Cisco Systems Inc. v. Doe and Landor v. Louisiana Department of Corrections and Public Safety, the U.S. Supreme Court doubled down on the critical point that the statute invoked in a federal claim must authorize a private lawsuit and the remedy sought, says Patrick Judd at Phelps Dunbar.

  • High Court's FCC Fine Ruling Reframes Agency Enforcement

    Author Photo

    The U.S. Supreme Court's recent decision in Federal Communications Commission v. AT&T sweeps aside uncertainty about what kinds of regulatory enforcement trigger a Seventh Amendment right, say attorneys at Squire Patton.

  • Trump EOs Pair Quantum Push With Cyber Defense Overhaul

    Author Photo

    Two recent executive orders that mark a significant federal commitment to both advancing and defending against quantum technology create potential opportunities for companies in the quantum, AI and technology sectors and pose future compliance obligations contractors should begin considering now, say attorneys at King & Spalding.

  • Series

    Choral Singing Makes Me A Better Lawyer

    Author Photo

    Singing in the New York City Bar Chorus — a hobby partly inspired by the late U.S. District Judge Richard Owen, who infused my clerkship year with opera music — has improved my legal career by refining my abilities to listen, exude confidence and develop emotional intelligence, says Bonnie Baker at Friedman Kaplan.

  • Attorney Mental Health Is An Ethical Obligation In The AI Era

    Author Photo

    As attorneys cope with the increasing unpredictability that artificial intelligence and constant policy changes have created, particularly in practice areas where they carry the emotional weight of clients’ most consequential life events, otherwise soft discussions about self-care are a matter of professional competence, says attorney Jack Jrada.

  • GM Privacy Penalty Signals A Change In Calif. Enforcement

    Author Photo

    General Motors' $12.75 million settlement with the California attorney general over its sale of driving behavior and geolocation data to brokers shows that disclosures and user choice may no longer be enough to define permissible data use, says Sonja Arndt-Johnson at Buchalter.

  • NY Defamation Carveout Hinges On Causation, Not Labels

    Author Photo

    A New York federal court's decisions in two cases involving tortious interference claims, and the recent Second Circuit ruling in Satanic Temple v. Newsweek Digital, highlight that the dispositive question for alleged defamation is whether injury flows through reputation or through direct interference with a relationship, says attorney Andrea Natale.

  • Series

    Power To The Paralegals: Burnout As A Structural Problem

    Author Photo

    Law firm leadership can best retain their paralegals not by encouraging self-care, but by seeking top-down structural solutions for the quiet proliferation of responsibilities and the vicarious exposure to client trauma that particularly drive burnout in this vital role, says Erika Sneeringer at Brockstedt Mandalas.

  • 11th Circ. Ruling Reflects Shift In Digital Consent Frameworks

    Author Photo

    The Eleventh Circuit's recent decision in Tejon v. Zeus Networks that a browsewrap terms-of-service hyperlink was insufficiently conspicuous to bind a consumer to an arbitration agreement could accelerate a broader industry shift to clickwrap as the baseline for enforceable digital consent, say attorneys at Sheppard.

  • Class Actions At The Circuit Courts: June Lessons

    Author Photo

    In this month's review of class action appeals, Mitchell Engel at Shook Hardy discusses five recent rulings from cases involving allegations of internet data misuse, consumer fraud claims, immigration, insurance and First Amendment violation claims.

  • Justices' FCC Fine Ruling May Weaken Agency Leverage

    Author Photo

    The U.S. Supreme Court's decision in Federal Communications Commission v. AT&T upheld the commission's forfeiture framework as consistent with Jarkesy, but it is also likely to reduce the effectiveness of the commission’s forfeiture proceedings as a collection and deterrence tool, say attorneys at Venable.

  • Ill. Law Firm MSO Bill Clashes With Court Power, Ethics Rules

    Author Photo

    An Illinois bill prohibiting law firms from certain business arrangements with management service organizations, sent to the governor for signature last week, encroaches upon the courts' constitutional powers and goes beyond the Illinois Rules of Professional Conduct in regulating investment in law-related services, says Matthew O’Hara at Smith Gambrell.

  • 3rd Circ. Decision Sheds Light On BIPA Bank Exemption

    Author Photo

    The Third Circuit's recent decision in McGoveran v. Amazon illuminates how courts are extending the Illinois Biometric Information Privacy Act's financial institution carveout beyond banks and insurers to technology vendors and other businesses handling biometric data, a defendant-friendly shift that still casts uncertainty around BIPA's enforcement, say attorneys at Dorsey & Whitney.

  • Constructing AI Compliance Plans As State Laws Diverge

    Author Photo

    With Colorado, Connecticut and the federal government recently announcing wildly different approaches to artificial intelligence regulation, creating a workable compliance program means addressing overlapping obligations using shared systems rather than separate silos, say attorneys at Ogletree.

Want to publish in Law360?


Submit an idea

Have a news tip?


Contact us here
Can't find the article you're looking for? Click here to search the Cybersecurity & Privacy archive.