Perspective: What Will Be The Defining Cybersecurity Issues In 2016?

California's 2026 legislative session concluded with Governor Newsom signing several landmark privacy and AI bills into law, including comprehensive child safety measures, AI auditor oversight frameworks, and expanded data protection requirements. How will these new regulations reshape digital advertising, workplace AI deployment, and online platform obligations for businesses operating in California?

California's Senate Bill 690 eliminates the private right of action for pen register claims under CIPA when violations arise from website or mobile app tracking technologies, leaving enforcement solely to the Attorney General. The bill applies retroactively to claims filed after January 1, 2025, and awaits Governor Newsom's signature with an operative date of January 1, 2027.

California Senate Bill 690 has passed, amending the California Invasion of Privacy Act by eliminating the private right of action for Section 638.51 claims. Kristine Argentine and Paul Yovanic Jr. discuss the implications of this legislative change and what businesses should expect when the amendment takes effect on January 1, 2027.

A recent Seventh Circuit decision is a reminder of BIPA’s financial institution GLBA exceptions. In that case, the court held that a vendor to GLBA-regulated entities was exempt from Illinois’ biometric law.

California's Legislature has unanimously passed SB 690, a landmark reform that could eliminate thousands of pending class action lawsuits based on website tracking technologies under the California Invasion of Privacy Act. The bill removes the private right of action for pen register claims arising from routine web analytics tools, potentially reshaping the data privacy litigation landscape while companion bills simultaneously expand substantive privacy obligations.

Delaware Governor Matt Meyer has signed H.B. 380, dramatically expanding the Delaware Personal Data Privacy Act to include stringent third-party contracting requirements, broader sensitive data protections, and lower jurisdictional thresholds. The amendments introduce California-style due diligence obligations for data disclosures, expand sensitive data categories to include neural data and financial information, and impose new profiling requirements that extend even to employment contexts. These changes po

California's Senate Bill 690 represents a pivotal legislative response to the explosion of website-tracking lawsuits under the California Invasion of Privacy Act, specifically targeting claims brought under the pen-register provision that have generated thousands of cases since 2022. While the bill would eliminate private plaintiffs' ability to pursue these particular claims involving digital tracking technologies, it leaves other CIPA provisions intact and raises questions about how the litigation landscap

New York Attorney General Letitia James has released final rules for the Stop Addictive Feeds Exploitation (SAFE) for Kids Act. The law was signed in 2024, but the effective date was triggered by the release of these rules.

California's State Legislature has passed five major privacy bills addressing private litigation restrictions, expanded deletion rights, children's online safety, sensitive data protections, and user privacy settings. These measures, now awaiting Governor Newsom's signature, could fundamentally reshape how businesses handle consumer data and face privacy-related lawsuits in the state.

On September 2, 2026, Delaware’s Governor signed House Bill (HB) 380 and HB 381. HB 380 amends the Delaware Personal Data Privacy Act (DPDPA), which was enacted in 2023 and became effective January 1, 2025. HB 381 separately amends Delaware’s computer security breach notification law.

Peak hurricane season demands proactive preparation for flood insurance claims, particularly for businesses covered under the National Flood Insurance Program. Understanding policy requirements, documenting property conditions, and establishing claims procedures before disaster strikes can mean the difference between a successful claim and inadequate recovery.

Corporate legal departments increasingly use third party platforms and managed billing services to review outside counsel invoices. In many cases, the client selects the system and directs its law firms to submit bills through it. Some of these services now use artificial intelligence, automated review, or a combination of technology and human reviewers to examine individual time entries and recommend billing reductions.

Tennessee's amended Litigation Financing Consumer Protection Act introduces sweeping changes that will fundamentally alter how third-party litigation funding operates in civil cases. From mandatory disclosure requirements to joint liability provisions, these new regulations create both opportunities and risks that every in-house counsel must understand before their next lawsuit.

Judicial recusal in Texas litigation presents a high-stakes dilemma for parties questioning a judge's impartiality. While successfully removing a presiding judge is rare, Texas law provides specific grounds for recusal when circumstances would cause a reasonable observer to doubt judicial neutrality, balancing the need for impartial tribunals against judges' authority to make difficult decisions.

The Treasury Department has issued a final rule permanently limiting the Corporate Transparency Act's enforcement to foreign entities only, exempting domestic U.S. companies from beneficial ownership reporting requirements. However, this significant narrowing faces potential legal challenges and could be reversed by future administrations, leaving the ultimate fate of the CTA uncertain.

The National Institutes of Health has issued a Request for Information on a draft policy that would mandate researchers share plain-language study results with clinical research participants. The proposed requirement would apply broadly to all NIH-supported clinical research and could create significant operational challenges for academic medical centers with large research portfolios. Public comments are due October 26, 2026, providing institutions an opportunity to address practical implementation concern

Texas is ramping up oversight of data center projects as Governor Abbott's directive adds new review requirements to an already complex interconnection process. The policy debate now encompasses transmission infrastructure, water resources, tax incentives, and community impacts. With the 2027 legislative session approaching, stakeholders in Texas's booming data center industry face an evolving regulatory landscape that could fundamentally reshape how large-scale digital infrastructure projects are developed

The Supreme Court's unanimous decision in Montgomery v. Caribe Transport II, LLC has fundamentally altered the landscape for freight brokers facing negligent hiring claims. After years of conflicting court decisions on whether federal law shields brokers from state tort liability, the nation's highest court has definitively ruled that such claims fall within the FAAAA's safety exception and are not preempted.

A federal court awarded Van Leeuwen Ice Cream nearly $24 million in a trademark infringement case against Rebel Creamery, but less than a month later, Rebel filed for Chapter 11 bankruptcy protection.

Louisiana's Behind the Counter Protection Act, effective August 1, 2026, strengthens criminal penalties for workplace violence against retail, restaurant, and customer-facing employees. While the law doesn't mandate new compliance programs, businesses should understand how enhanced penalties for assault and battery apply to their workforce and consider integrating these protections into existing safety practices.