Log in or register
Share on LinkedInShare on LinkedIn

ARTICLE · 28 OCTOBER 2026

Dechert Cyber Bits - Issue 105 - October 22, 2026

Dechert
Dechert
Contributor
Dechert

Dechert

Dechert helps business leaders lead For more than 150 years, we’ve advised the innovators who move...

View firm profile
Explore more from Dechert

This comprehensive legal update examines five critical developments in cybersecurity, data privacy, and artificial intelligence regulation. From a $700,000 HIPAA settlement stemming from a phishing attack to new California legislation curtailing website tracking lawsuits, these cases reveal evolving enforcement priorities and regulatory frameworks. The analysis also covers EU marketing consent requirements, GDPR fining methodologies, and state-level AI safety initiatives that signal intensifying government

United StatesPrivacy
Dechert LLP
Dechert LLP

Happy 5th Anniversary to Dechert's Cyber Bits!

Five years ago, our global Cyber, Privacy and AI team launched Cyber Bits with a simple goal: to keep you informed on what matters most in privacy, cybersecurity and AI. Today, we're proud of how far it's come, and that's thanks to you, our readers.

Behind every issue is a team committed to tracking developments from around the globe and distilling them into clear, actionable guidance. Our focus remains the same as it was on day one: cutting through the noise to tell you what's happening and what it means for you.

UK ICO Marks New Chapter With New Governance Structure and Manchester Office Opening

On September 30, 2026, the UK data protection regulator adopted a new governance structure and new name. The Information Commissioner has been replaced by the Information Commission with the regulator now being led by a Board rather than a single Information Commissioner. The Board's non-executive members are now in place, and the process of

We operate a free-to-view policy, asking only that you register in order to read all of our content. Please login or register to view the rest of this article.

Register for freeORLog in

The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.

View source

Related Articles

Legal Intelligence Newsletters: sign up for the latest legal and regulatory news on your chosen topics

Read more about

Related Comparative Guides

See more popular content from

Article

SB 54 Is In Effect: What California’s New Packaging Law Means For Your Business

Although being challenged by an injunction filed on August 20, 2026, by a coalition of 17 states, California’s SB 54 Plastic Pollution Prevention and Packaging Producer Responsibility Act is now in effect, and companies that sell, distribute, import, or ship packaged products into California should be evaluating whether they have compliance obligations.
United StatesPrivacy
Wilson Elser Moskowitz Edelman & Dicker LLP
Wilson Elser Moskowitz Edelman & Dicker LLP
Article

California’s 2026 Legislative Session Wraps: A Wave Of Privacy And AI Bills Reaches The Governor, With Key Child Safety And AI Measures Signed Into Law

California's 2026 legislative session concluded with Governor Newsom signing several landmark privacy and AI bills into law, including comprehensive child safety measures, AI auditor oversight frameworks, and expanded data protection requirements. How will these new regulations reshape digital advertising, workplace AI deployment, and online platform obligations for businesses operating in California?
United StatesPrivacy
Kelley Drye & Warren LLP
Kelley Drye & Warren LLP
Article

California's Fall 2026 Privacy Roundup: Expanded CCPA Deletion Rights And More

California Governor Gavin Newsom has signed several significant privacy bills that will reshape how businesses handle consumer data, including expanded deletion rights under the CCPA, shortened data broker response cycles, and sweeping new insurance sector privacy requirements. While one landmark bill banning the sale of sensitive personal information was vetoed, the approved legislation requires companies to update their deletion workflows...
United StatesPrivacy
McDermott Will & Schulte
McDermott Will & Schulte
Article

The Data Breach Brief: Week Of September 30th, 2026

Multiple organizations have recently disclosed significant data breaches affecting thousands of individuals, with compromised information ranging from basic contact details to highly sensitive medical records and financial data. The incidents span various sectors including healthcare, insurance, and professional services, raising questions about the scope of exposure and potential remedies for affected individuals.
United StatesPrivacy
Morgan & Morgan
Morgan & Morgan
Article

Emerging Enforcement Trends In Digital Health Data Privacy: Lessons From Washington’s My Health My Data, FTC vs. Hims & Hers And UCHealth Enforcement Actions

Federal and state regulators are intensifying scrutiny of healthcare and digital health companies over tracking technologies that share sensitive patient data with advertising platforms. Recent enforcement actions against major telehealth providers and healthcare systems reveal how common marketing practices can trigger significant legal liability under privacy laws, even for organizations not covered by HIPAA.
United StatesPrivacy
Benesch, Friedlander, Coplan & Aronoff LLP
Benesch, Friedlander, Coplan & Aronoff LLP
Article

California Legislation: End-Of-Session Check-In

California's legislature has sent a comprehensive package of privacy, AI, and advertising bills to Governor Newsom's desk, with decisions due by September 30, 2026. The legislation addresses sensitive personal information protections, data broker obligations, AI-powered chatbot regulations, and digital replica rights, potentially reshaping how businesses handle consumer data and automated decision-making systems. Will these bills become law and set new national standards for technology regulation?
United StatesPrivacy
Frankfurt Kurnit Klein & Selz PC
Frankfurt Kurnit Klein & Selz PC
Article

CLO Equity Fund Market 2026 Update: Clearing Skies

The global CLO equity fund market is experiencing a cautious reopening after a period of tight arbitrage and challenging economics. With U.S. CLO issuance approaching $230 billion in the first half of 2026 and major platforms successfully raising billion-dollar funds, captive and third-party CLO equity fund structures are evolving rapidly as managers deploy sophisticated structuring technologies to provide stable execution capacity and attract institutional capital seeking diversified credit exposure with s
United StatesFinance and Banking
Dechert
Dechert
Article

CFTC Publishes Its 2026 Regulatory Priorities Agenda

The CFTC has released its 2026 regulatory priorities agenda under new Chairman Michael Selig, outlining significant proposed changes to commodity pool operator exemptions, large trader reporting requirements, and foreign exchange product classifications. Asset managers participating in commodities and derivatives markets will need to understand how these regulatory modifications may affect their registration obligations, reporting burdens, and treatment of various financial instruments.
United StatesFinance and Banking
Dechert
Dechert
Article

Preference Given: Preferred Equity's Growing Reach Across Structured Finance

Preferred equity is transforming structured finance by enabling sponsors to attract third-party capital below rated debt without diluting residual positions or triggering additional rating requirements. This analysis examines how CFOs, CLOs, NAV facilities, and other securitization vehicles are deploying bespoke preferred structures to widen investor pools while preserving manager incentives. What contractual mechanics, legal considerations, and market dynamics are driving this shift from niche accommodatio
United StatesFinance and Banking
Dechert
Dechert
Article

Concierge Medicine And Medical Aesthetics: The Private Equity Playbook For A US$590 Billion Opportunity

Private equity investment in concierge medicine, aesthetic dermatology and medispas has surged due to cash-pay economics, recurring revenue models and fragmented markets ripe for consolidation. However, navigating state-by-state corporate practice of medicine prohibitions, licensure requirements and evolving GLP-1 regulations requires sophisticated legal structuring to protect valuations and enable successful exits.
United StatesFood, Drugs, Healthcare, Life Sciences
Dechert
Dechert
Article

SEC Proposes Interval Fund Updates, Extension Of Multi-Class Relief For Closed-End Funds And BDCs

The U.S. Securities and Exchange Commission has proposed significant amendments to modernize interval fund operations and extend multiple share class eligibility to non-traded closed-end funds and business development companies. These changes would eliminate longstanding regulatory barriers by allowing interval funds to defer initial repurchase offers for up to two years, introducing monthly repurchase options, and replacing rigid liquidity requirements with principles-based approaches, while also removing
United StatesFinance and Banking
Dechert
Dechert
Article

Duration Is Not Destiny: The NAIC's Proposal For Multi-Collateral Structured Credit Investments

The NAIC has proposed significant revisions to statutory accounting principles that would restrict bond treatment for multi-collateral structured credit investments deemed to carry "significant embedded asset-liability management risk." This analysis examines the regulatory concerns driving the proposal, evaluates whether the proposed framework appropriately addresses those concerns, and identifies potential unintended consequences for insurance company investors and the broader structured credit markets.
United StatesFinance and Banking
Dechert
Dechert
Article

The IPI: Europe Finally Gains A Reciprocity Tool For Public Procurement

The European Union's International Procurement Instrument has issued its first implementing measure, targeting Chinese medical device suppliers with total exclusion from EU public procurement contracts valued at €5 million or more. The Lyon Administrative Court's landmark ruling establishes that contracting authorities must conduct genuine diligence into bidders' commercial substance, even when registered in the EU, to determine their true origin and eligibility to participate in tenders.
European UnionGovernment, Public Sector
Dechert
Dechert