On March 26, 2025, the U.S. Department of Justice (DOJ) announced that it had reached an agreement with MORSECORP Inc. to settle alleged violations of the False Claims Act...

California's new CPPA regulations impose mandatory annual cybersecurity audits and privacy risk assessments on businesses meeting specific thresholds under the CCPA. With the first compliance deadlines approaching in 2027 and 2028, businesses must act now to map data flows, engage qualified auditors, and document high-risk processing activities before certification and submission requirements take effect.

Alston & Bird's quarterly Digital Download examines the rapidly evolving intersection of privacy, cybersecurity, and data strategy, highlighting how AI-driven threats are reshaping breach costs, regulatory frameworks, and organizational defense strategies. From IBM's 2026 breach report showing record-high costs to new government initiatives like the White House's Gold Eagle clearinghouse, the landscape demands heightened vigilance and sophisticated governance approaches.

Last month, the European Union's new Data Governance Act (DGA) came into effect. Our Privacy, Cyber & Data Strategy Group provides an overview of the key features of the DGA and discusses...

Corporate legal departments are increasingly receiving requests from business clients to use ChatGPT or similar "generative AI" tools in their operations. These requests can be urgent, with business clients demanding enablement from Legal.

July 25, 2024 – Cara Peterman, Sierra Shear, and Madeleine Davidson published "Securities Litigation / Privacy, Cyber & Data Strategy / Securities Law Advisory | First of Its Kind: Federal Court

November 13, 2023 – Kathleen Benway, Kate Hanniford, Amy Mushahwar, Kim Peretti, and Lance Taubin published "Privacy, Cyber & Data Strategy Advisory: FTC Approved New Data Breach Notification...

Artificial intelligence (AI) is expanding into more industries (often in surprising ways) and has inevitably caught the attention of federal and state regulators.

The California Privacy Protection Agency (CPPA) has finalized sweeping new California Consumer Privacy Act (CCPA) regulations on automated decisionmaking technology (ADMT), cybersecurity audits, and privacy risk assessments.

November 2024 – Kathleen Benway, Jennifer Everett, Alysa Austin, and Kristen Bartolotta published "Federal Trade Commission's Updated Health Breach Notification Rule Is Now in Effect" in Employee Benefit Plan Review.

Cybersecurity Comparative Guide for the jurisdiction of European Union, check out our comparative guides section to compare across multiple countries