Cybersecurity & Privacy

  • March 27, 2026

    NC Biz Court Bulletin: Judge Exits, Duke Ducks Climate Suit

    The North Carolina Business Court saw an unexpected shakeup with one judge's retirement, rendered a pivotal decision in a first-of-its-kind climate change case against Duke Energy and oversaw a trial between the feuding owners of a commercial bed skirt company.

  • March 27, 2026

    States Suspect ICE Obtained Medicaid Data Despite Order

    A coalition of states told a federal judge that the Trump administration appears to have ignored an order limiting the types of Medicaid data that can be shared with immigration officials, potentially handing over reams of "off limits" data on citizens and green card holders.

  • March 27, 2026

    FCC Bars Another Chinese Test Lab Over Security Risk

    The Federal Communications Commission on Friday pulled the accreditation of another Chinese communications device testing lab due to concerns about Chinese state government control.

  • March 27, 2026

    GAO Says OMB Should Give More AI Privacy Guidance

    The Office of Management and Budget should do more to address privacy risks associated with government adoption of artificial intelligence, the U.S. Government Accountability Office said in a new report, after OMB instructed agencies to take a "pro-innovation approach."

  • March 26, 2026

    Anthropic Blocks Pentagon's 'Orwellian' Security Risk Label

    A California federal judge Thursday issued a preliminary injunction barring the Trump administration from labeling Anthropic as a supply chain risk to national security, calling the move a "classic illegal First Amendment retaliation" and "Orwellian."

  • March 26, 2026

    Acxiom Beats Consumers' Suit Over Data Sales, For Good

    A Virginia federal judge tossed a complaint alleging data analytics company Acxiom gathers and sells individuals' personal information like their addresses, birth dates and other identifiers to its clients, ruling Wednesday the laws alleged to have been violated only protect a person's name, portrait, or picture, "not any of this other data."

  • March 26, 2026

    Artist Says Tech Cos. Cut Attribution From Work Used For AI

    A Los Angeles 3D artist and visual effects creator accused four tech giants of failing to protect rights on millions of works by artists and designers that were used to train large-scale generative artificial intelligence systems, according to proposed class actions filed in California and Washington federal courts Thursday.

  • March 26, 2026

    PNC Beats Customer's $200K Forged Check Dispute

    PNC no longer faces allegations it failed to prevent a customer's losses after his employees drained nearly $205,000 from his accounts, a Philadelphia federal judge found, noting the plaintiff's estate administrator didn't properly dispute relevant facts asserted by the bank.

  • March 26, 2026

    Imaging Practice Data Breach Class Actions Hit NC Biz Court

    A series of putative class actions resulting from a data breach at imaging practice Triad Radiology Associates PLLC hit North Carolina Business Court this week, with a couple of the cases naming hospitals that partnered with the practice.

  • March 26, 2026

    Co. Accused Of Sharing Mental Health Data With Google

    A California resident alleged in Colorado federal court that a Denver-based telehealth mental health provider is providing sensitive customer data to Google without their consent in violation of federal and state privacy laws, according to a proposed class action filed Thursday.

  • March 26, 2026

    Ketamine, WilmerHale Probe Off Limits In Musk-OpenAI Trial

    A California federal judge has placed evidentiary guardrails on an April jury trial over Elon Musk's claims OpenAI duped him, excluding evidence on Musk's ketamine use and WilmerHale's investigation into Sam Altman's dismissal, but allowing evidence on Musk's rival startup, his romance with an ex-OpenAI boardmember and his Burning Man trip.

  • March 26, 2026

    3rd Circ. Sends Harriet Carter Wiretapping Case To Pa. Court

    The Third Circuit on Thursday said the federal courts lacked jurisdiction to hear a case alleging that Harriet Carter Gifts and a third-party company violated consumers' privacy rights under Pennsylvania wiretapping law by collecting their website browsing data, ordering the lower court to remand the case to state court.

  • March 26, 2026

    FCC Floats Caps For Offshore Telecom Call Center Work

    The Federal Communications Commission Thursday floated new rules to encourage the onshoring of customer call centers in the telecom industry.

  • March 26, 2026

    NC Suit Says Real Estate Co. Cyberattack Notice Took Months

    A real estate company faces a purported class action in North Carolina's Business Court accusing the firm of waiting months to notify its customers of a data breach in September and failing to disclose what kind of information was stolen.

  • March 25, 2026

    Law Firm Ransomware Attacks On Rise, Report Says

    Cyberattacks targeting law firms jumped in 2025, according to a new BakerHostetler report, which also highlighted recent spikes across a wide range of sectors in ransomware payments and class action lawsuits stemming from these incidents. 

  • March 25, 2026

    Cruise Booker's Brass Must Face $47M TCPA Default Citation

    A vacation booking company's four principals must answer an Illinois class's asset citation bid as it works to collect a $47 million default judgment in a "troubling" 11-year-old Telephone Consumer Protection Act case, a federal judge ruled.

  • March 25, 2026

    Justices' Music Piracy Ruling Could Reverberate Beyond ISPs

    The U.S. Supreme Court's ruling that Cox Communications is not liable for its customers' music piracy circumscribes the theories copyright owners may pursue for secondary infringement — limits that attorneys say will extend beyond internet service providers and influence litigation involving e-commerce platforms and artificial intelligence.

  • March 25, 2026

    Cognizant Must Face Clorox's $380M Suit Over Login Sharing

    A California state judge has trimmed Clorox's $380 million lawsuit accusing the cybersecurity company Cognizant of enabling a "catastrophic" 2023 cyberattack by voluntarily handing over Clorox employee passwords after hackers merely asked for them, tossing an intentional misrepresentation claim but keeping the bulk of the suit alive.

  • March 25, 2026

    Extreme Networks Must Face Suit Over COVID-Era Demand

    A California federal judge rejected Extreme Networks' bid to dismiss a suit alleging it misled investors about its financial prospects and declining client demand during the COVID-19 pandemic, saying the investors adequately pled that the cloud network equipment company engaged in a scheme to inflate revenues through so-called channel-stuffing.

  • March 25, 2026

    Anime Biz Allowed Breach Of 6.8M Email Addresses, Suit Says

    An anime streaming service's inadequate data security allowed hackers to gain access to an alleged 6.8 million unique email addresses and exfiltrate other personal information of subscribers, according to a proposed class action in California federal court.

  • March 25, 2026

    House Panel Advances Bill To Re-Up FirstNet Until 2037

    U.S. House committee lawmakers voted unanimously Wednesday to reauthorize the First Responder Network Authority for more than a decade past its current sunset next February while adding two seats to the board for public safety experts.

  • March 25, 2026

    NJ Gov. Sherrill Signs Trio Of Bills To Protect Immigrants

    New Jersey Gov. Mikie Sherrill signed on Wednesday three bills intended to limit state cooperation with federal immigration enforcement, strengthen privacy protections and require law enforcement officers — including federal agents — to identify themselves during public interactions.

  • March 25, 2026

    Meta Gets Class Suit Over Scam Investment Ads Axed, For Now

    A California federal judge dismissed a proposed class action against Meta over ads on its platforms from scammers impersonating financial professionals to run pump-and-dump investment schemes, saying unlike recent cases that could "disrobe" Meta of immunity under Section 230 of the Communications Decency Act, the plaintiffs didn't allege Meta co-created the ads.

  • March 25, 2026

    Sen. Scott Sues Booz Allen, IRS Leaker Over Data Breach

    U.S. Sen. Rick Scott, R-Fla., has sued federal contractor Booz Allen Hamilton and a former employee for leaking his tax returns along with a trove of confidential tax data on President Donald Trump and other wealthy people, adding to mounting litigation over the breach.

  • March 25, 2026

    Jury Doubles Damages Against Meta, Google In LA Bellwether

    A California state jury that found Meta and Google liable Wednesday for harming the mental health of a woman who says she became addicted to their social media platforms as a child delivered a second blow later in the day, awarding $3 million in punitive damages on top of a $3 million compensatory award.

Expert Analysis

  • 7 Lessons From The Tractor Supply CCPA Enforcement Action

    Author Photo

    The California Privacy Protection Agency's recent enforcement action targeting Tractor Supply for alleged violations of the California Consumer Privacy Act provides critical insights into the compliance areas that remain a priority for the California regulator, including businesses with significant consumer interactions, say attorneys at Troutman.

  • Series

    Writing Novels Makes Me A Better Lawyer

    Author Photo

    Writing my debut novel taught me to appreciate the value of critique and to never give up, no matter how long or tedious the journey, providing me with valuable skills that I now emphasize in my practice, says Daniel Buzzetta at BakerHostetler.

  • SDNY OpenAI Order Clarifies Preservation Standards For AI

    Author Photo

    The Southern District of New York’s recent order in the OpenAI copyright infringement litigation, denying discovery of The New York Times' artificial intelligence technology use, clarifies that traditional preservation benchmarks apply to AI content, relieving organizations from using a “keep everything” approach, says Philip Favro at Favro Law.

  • Addressing Legal Risks Of AI In The Homebuilding Industry

    Author Photo

    Artificial intelligence is transforming the homebuilding industry, but the legal challenges posed by its adoption spread across many areas, including contractual liability and intellectual property issues, so builders should adopt strategies to mitigate the risks and position themselves for success, says Philip Stein at Bilzin Sumberg.

  • Cybersecurity Rule For DOD Contractors Creates New Risks

    Author Photo

    A rule locking in the Cybersecurity Maturity Model Certification system for defense contractors increases False Claims Act and criminal enforcement risks by narrowing a key exemption and mandating affirmations of past compliance, which may discourage new companies from entering the defense contracting market, say attorneys at Haynes Boone.

  • Compliance Steps To Take As FCRA Enforcement Widens

    Author Photo

    As the Fair Credit Reporting Act receives renewed focus from both federal and state enforcers, regulatory and litigation risk is most acute in several core areas, which companies can address by implementing purpose processes and quick remediation of consumer complaints, among other steps, say attorneys at Wiley.

  • Assessing The Future Of The HIPAA Reproductive Health Rule

    Author Photo

    In light of a Texas federal court's recent decision to strike down a U.S. Department of Health and Human Services rule aimed to protect the privacy of patients seeking abortions and gender-affirming care, entities are at least temporarily relieved from compliance obligations, but tensions are likely to continue for the foreseeable future, says Liz Heddleston at Woods Rogers.

  • Opinion

    Expert Reports Can't Replace Facts In Securities Fraud Cases

    Author Photo

    The Ninth Circuit's 2023 decision in Nvidia v. Ohman Fonder — and the U.S. Supreme Court's punt on the case in 2024 — could invite the meritless securities litigation the Private Securities Litigation Reform Act was designed to prevent by substituting expert opinions for facts to substantiate complaint assertions, say attorneys at A&O Shearman.

  • Glimmers Of Clarity Appear Amid Open Banking Disarray

    Author Photo

    The Consumer Financial Protection Bureau's vacillation over data rights rules has created uncertainty, but a recent proposal is a strong signal that open banking regulations are here to stay, making now the ideal time for entities to take action to decrease compliance risk, says Adam Maarec at McGlinchey Stafford.

  • Opinion

    High Court, Not A Single Justice, Should Decide On Recusal

    Author Photo

    As public trust in the U.S. Supreme Court continues to decline, the court should adopt a collegial framework in which all justices decide questions of recusal together — a reform that respects both judicial independence and due process for litigants, say Michael Broyde at Emory University and Hayden Hall at the U.S. Bankruptcy Court for the District of Delaware.

  • FTC's Consumer Finance Pivot Brings Industry Pros And Cons

    Author Photo

    An active Federal Trade Commission against the backdrop of a leashed Consumer Financial Protection Bureau will be welcomed by most in the consumer finance industry, but the incremental expansion of the FTC's authority via enforcement actions remains a risk, say attorneys at Hudson Cook.

  • How A New BIS Rule Greatly Expands Export Restrictions

    Author Photo

    The newly effective affiliates rule from the U.S. Department of Commerce's Bureau of Industry and Security restricts exports to foreign companies that are 50% or more owned by entities listed on the BIS entity list and the military end-user list — a major shift in U.S. export control enforcement, say attorneys at Simpson Thacher.

  • 3 New Cyberinsurance Rulings Aid In Policy Interpretation

    Author Photo

    Although the cyberinsurance market has exploded, there is no standardized cyber language or form and only a few court decisions thus far interpreting cyberinsurance policy language, making these three recent rulings key for guiding policyholders, insurers and brokers, say attorneys at Haynes Boone.

  • Series

    Traveling Solo Makes Me A Better Lawyer

    Author Photo

    Traveling by myself has taught me to assess risk, understand tone and stay calm in high-pressure situations, which are not only useful life skills, but the foundation of how I support my clients, says Lacey Gutierrez at Group Five Legal.

  • New Health AI Guidance Features A Provider-Centric Approach

    Author Photo

    New guidance from the Joint Commission and Coalition for Health AI regarding the responsible use of artificial intelligence in healthcare deviates from preexisting guidance by recommending a comprehensive framework for using AI tools, focusing on healthcare provider organizations rather than on AI developers, say attorneys at Ropes & Gray.

Want to publish in Law360?


Submit an idea

Have a news tip?


Contact us here
Can't find the article you're looking for? Click here to search the Cybersecurity & Privacy archive.