The National Association of Insurance Commissioners intensified its regulatory focus on artificial intelligence governance, third-party data models, and cybersecurity oversight at its Summer 2026 meeting. Regulators are shifting from principles-based guidance to examination-ready supervisory tools, emphasizing that insurers remain accountable for the technologies and vendors they deploy. The meeting revealed how AI risk evaluation, vendor oversight frameworks, and privacy modernization efforts are convergin

Artificial intelligence agents are gaining unprecedented autonomy and cyber capabilities, transforming theoretical risks into tangible legal liabilities. As AI systems independently exploit vulnerabilities and access unauthorized systems, organizations face complex questions about criminal and civil exposure under existing computer fraud laws. Understanding how autonomous agents can go rogue—and what legal frameworks apply when they do—has become essential for any company deploying these powerfu

The ubiquity of artificial intelligence (AI) has heightened companies' exposure to cyberattacks of increasingly greater sophistication.

Recent bipartisan privacy and online safety initiatives reflect growing concern over youth mental health, online exploitation, and manipulative digital design.

The EU Cyber Resilience Act's incident reporting obligations take effect on September 11, 2026, requiring manufacturers of connected devices and software to report certain vulnerabilities and cybersecurity incidents. This marks a critical milestone in EU cybersecurity regulation, introducing new compliance requirements for companies that may already face reporting obligations under other digital regulations.

Our Privacy, Cyber & Data Strategy Group analyzes important guidance from the NYDFS on how insurers use external consumer data and information sources and artificial intelligence systems...

Our Privacy, Cyber & Data Strategy Team highlights the increasingly specific cybersecurity controls identified by regulators...

The Federal Trade Commission has released a final rule to update the Children's Online Privacy Protection Rule. Our Privacy, Cyber & Data Strategy Team discusses how the changes...

Our Privacy, Cyber & Data Strategy Group analyzes important guidance from the NYDFS on how insurers use external consumer data and information sources and artificial intelligence systems.

The California Privacy Protection Agency has voted to advance formal rulemaking on opt-out preference signals and new audit requirements for data brokers...

Our Privacy, Cyber & Data Strategy Team highlights the shift in priorities for privacy and cybersecurity regulation and enforcement across U.S. agencies under the second Trump Administration.

Our Privacy, Cyber & Data Strategy Group considers the nationwide repercussions of Colorado's new regulation of insurers' use of artificial intelligence models to prevent race-based discrimination.

On July 16, 2020, the CJEU'handed down its long-awaited judgment in the ‘Schrems II' Case (Facebook Ireland and Schrems (Case C-311/18)) concerning the legality of data transfers outside the EEA under the GDPR.

Cyber security continues to be an issue that gathers mainstream attention, and for good reason. Both the costs of, and length of time to recover from, a cyber incident are increasing.

Our Privacy, Cyber & Data Strategy Team explores new guidance from the New York Department of Financial Services for covered entities to combat...

January 31, 2025 – Kathleen Benway, Maki DePalo, Jennifer Everett, and Hyun Jai Oh published "Privacy, Cyber & Data Strategy Advisory | FTC Finalizes Amendments to COPPA Rule."

The EU's sweeping Data Act is now in force. In this part of our series highlighting the Data Act's key issues, our Privacy, Cyber & Data Strategy Team highlights new obligations...

The recent indictment of 14 North Korean nationals for fraudulently obtaining remote IT jobs with U.S.-based companies underscores the importance of vigilant hiring practices.

Our Privacy, Cyber & Data Strategy Team breaks down the three "pillars" of the Trump Administration's AI action plan to foster innovation and growth domestically and abroad in the U.S. artificial intelligence sector.

David Teske and John Lesko published "Privacy, Cyber & Data Strategy Advisory | Trump Administration's AI Action Plan to Promote the U.S. AI Industry Through Deregulation, Expanded Infrastructure, and Diplomacy."