In 2024, the Federal Trade Commission (FTC) has continued its public data privacy and security enforcement actions. Many of these actions have addressed alleged violations relating to health, location, and biometric data...

On August 28, 2023, the California Privacy Protection Agency (the "Agency") released two sets of draft regulations under the California Consumer Privacy Act (the "CCPA"), one for risk assessments and another...

Our Consumer Protection/FTC and Privacy, Cyber & Data Strategy teams unpack Starwood Hotels' and Marriott International's settlements with the Federal Trade Commission and Marriott's settlement with state attorneys...

Our Securities and Privacy, Cyber & Data Strategy teams unpack the Department of Justice's (DOJ) process for companies seeking to delay Form 8-K disclosures under the Securities...

Boards in the United States, United Kingdom, and European Union face increasing pressure to oversee cybersecurity risks amid evolving regulatory expectations.

On October 27, 2023, the FTC approved an amendment to the Safeguards Rule (the "Amendment") requiring that non-banking financial institutions notify the FTC in the event of a defined...

The availability of vast amounts of operational and consumer data, and advancements in artificial intelligence present opportunities...

California businesses face an ongoing surge of privacy litigation targeting routine website analytics and advertising tools under CIPA, despite court rulings requiring plaintiffs to demonstrate actual harm. With proposed legislation SB 690 offering potential relief by eliminating certain private rights of action, companies must navigate an evolving legal landscape where the scope of decades-old wiretapping statutes applied to modern web technologies remains hotly contested.

Cyber security supply chain risks are growing, and attacks on vendors and other third parties cause severe disruption to businesses.

With an amendment to its Safeguards Rule, the Federal Trade Commission has joined other federal agencies regulating cybersecurity breaches. Our Privacy, Cyber & Data Strategy Team analyzes...

Senator Bill Cassidy's Health Information Privacy Reform Act (HIPRA) has advanced out of the Senate HELP Committee with unanimous bipartisan support, proposing to extend HIPAA-like protections to health data collected by wearables, health apps, and other non-HIPAA entities. The manager's amendment substantially rewrites the original bill, introducing stricter data minimization requirements, expanded geolocation protections, mandatory AI-specific rulemaking, and new restrictions on government access to healt

The compliance deadline for the Securities and Exchange Commission's amended Regulation S-P is fast approaching, requiring financial institutions to meet new safeguards for customer data privacy and incident response.

The European Union's (EU) new Digital Operational Resilience Act (DORA) will go into effect in January 2025. Our Privacy, Cyber & Data Strategy Team digs into DORA...

The European Commission has approved the EU-U.S. Data Privacy Framework (DPF) for transferring data from the EU to the United States. Our Privacy, Cyber & Data Strategy Team discusses what companies...

Artificial intelligence (AI) is transforming hiring practices and increasing risk of legal action and regulatory oversight. Our Privacy, Cyber & Data Strategy and Labor & Employment Groups investigate the lawsuits...

Our Privacy, Cyber & Data Strategy and White Collar, Government & Internal Investigations Teams examine how the GENIUS Act's framework for stablecoin issuers will impact the cryptocurrency sector.

The EU's sweeping Data Act is now in force. In this part of our series highlighting the Data Act's key issues, our Privacy, Cyber & Data Strategy...

Our Privacy, Cyber & Data Strategy Team discusses the new Cyber Resilience Act (CRA) that affects manufacturers and distributors of connected devices...

The Securities and Exchange Commission's cybersecurity-related case against SolarWinds and its CISO was largely dismissed, but a securities fraud claim against the CISO lives on.

Our Securities Litigation, Securities, and Privacy, Cyber & Data Strategy teams outline vital takeaways for public companies...