New York AG Releases Data Security Guide To Help Businesses Protect Consumer Personal Information

California Governor Newsom has signed Senate Bill 574 into law, establishing the nation's first statutory framework governing how attorneys and arbitrators use generative AI in their professional practice. The legislation creates specific obligations around confidentiality protection, accuracy verification, and disclosure requirements that take effect January 1, 2027.

Although being challenged by an injunction filed on August 20, 2026, by a coalition of 17 states, California’s SB 54 Plastic Pollution Prevention and Packaging Producer Responsibility Act is now in effect, and companies that sell, distribute, import, or ship packaged products into California should be evaluating whether they have compliance obligations.

Connecticut’s Governor has signed into law Public Act No. 26-64, “An Act Concerning Consumer Privacy and Protection,” which introduces substantial new compliance obligations for businesses that operate as data brokers...

California Governor Gavin Newsom has signed several significant privacy bills that will reshape how businesses handle consumer data, including expanded deletion rights under the CCPA, shortened data broker response cycles, and sweeping new insurance sector privacy requirements. While one landmark bill banning the sale of sensitive personal information was vetoed, the approved legislation requires companies to update their deletion workflows...

Four states have adopted laws regulating data brokers, but only one – California – has established a universal deletion mechanism whereby consumers are able to request that all data brokers...

Legal risk intensifies for companies offering online interactive features to minors across Georgia, Florida, and Alabama as the Eleventh Circuit vacates preliminary injunctions against state social media laws. With Florida's HB 3 and Georgia's SB 351 now enforceable and Alabama's HB 161 set to take effect January 1, 2027, businesses face divergent compliance requirements including age verification, parental consent mechanisms, and account deletion protocols.

Scott L. Vernick was quoted in The Legal Intelligencer article, "Did UPMC Data Breach Ruling Lock Plaintiffs Out of State Court?" on January 23, 2017.

California's 2026 legislative session concluded with Governor Newsom signing several landmark privacy and AI bills into law, including comprehensive child safety measures, AI auditor oversight frameworks, and expanded data protection requirements. How will these new regulations reshape digital advertising, workplace AI deployment, and online platform obligations for businesses operating in California?

On September 26, 2025, the California Privacy Protection Agency (CPPA) announced a $1.35 million fine against Tractor Supply Company, resolving allegations that the company violated the California...

In the last few months, California and New Jersey enacted legislation to protect children online: California’s 13-bill package targets risks to children arising from emerging technologies, while New Jersey’s 3-bill package includes an age-appropriate design code. Despite their differences, these laws share a common focus on protecting children as technology evolves.

On Friday, July 9, 2021, President Biden issued Executive Order (EO) 14036, "Promoting Competition in the American Economy".

On July 22, 2026, the Federal Communications Commission (FCC or Commission) adopted a Third Report and Order and Third Further Notice of Proposed Rulemaking (covered separately here) in which the Commission advances its ongoing efforts to secure the U.S.

President Trump signed the Lindsey O. Graham Sanctioning Russia and Iran Act of 2026, introducing unprecedented tariff authority that could impose duties up to 100% on goods from countries purchasing Russian energy or facilitating sanctions evasion. The legislation creates a novel framework where tariffs stack on top of existing duties while codifying Russia sanctions into statute...

On September 30, 2026, Senate Environment and Public Works (EPW) Committee Chair Shelley Moore Capito (R-WV), Ranking Member Sheldon Whitehouse (D-RI), Senate Energy and Natural Resources (ENR) Committee Chair Mike Lee (R-UT), and Ranking Member Martin Heinrich (D-NM) unveiled the Bipartisan American Affordability and Jobs Act of 2026 (BAAJA; S. 5653), a comprehensive permitting reform package aimed at accelerating approvals for energy, infrastructure, transmission, mining, manufacturing, and other major projects. The legislation represents the most significant bipartisan permitting reform effort in years and follows months of negotiations between Senate Republicans and Democrats.

The European Union’s (EU) revamped sustainability reporting framework is now final. On September 21, 2026, the revised European Sustainability Reporting Standards (ESRS) and a new Voluntary European Sustainability Reporting Standard (VS) were published in the Official Journal, marking yet another significant step toward more proportionate sustainability reporting in Europe. In addition to previously raising applicable financial thresholds triggering compliance under the Corporate Sustainability Reporting Directive (CSRD), the revised ESRS cut mandatory datapoints for in-scope companies (i.e., undertakings under CSRD) by more than 60% and total datapoints by more than 70%.

On September 16, 2026, President Trump issued a presidential memorandum titled “Restoring Reciprocity in Government Procurement”, directing the Director of the Office of Management and Budget and the United States Trade Representative, in coordination with the Federal Acquisition Regulatory Council, to identify and take legally permitted steps to remove or restrict Canadian-origin items across the federal civil procurement system.

California continues to lead the way in regulating foods and dietary supplements sold within its borders. Two recent developments are worth highlighting: the nation’s first statewide “Non-Ultraprocessed” food certification program, and a second-of-its-kind law restricting sales of certain dietary supplements and over-the-counter products to individuals under 18. Below, we break down both measures and what they may mean for food and supplement companies doing business in the state.

California's Legislature has unanimously passed SB 690, a landmark reform that could eliminate thousands of pending class action lawsuits based on website tracking technologies under the California Invasion of Privacy Act. The bill removes the private right of action for pen register claims arising from routine web analytics tools, potentially reshaping the data privacy litigation landscape while companion bills simultaneously expand substantive privacy obligations.

As prevention obligations expand across the UK, California, New York State, and New York City, employers face heightened duties to prevent workplace sexual harassment before it occurs. With the UK's new "all reasonable steps" standard taking effect in October 2026 and US jurisdictions lowering liability thresholds, how can multinational employers navigate these evolving transatlantic requirements?

The Cybersecurity and Infrastructure Security Agency (CISA), together with other federal partners, issued a joint advisory on April 7, 2026 warning of ongoing Iranian‑affiliated cyber activity targeting U.S. critical infrastructure, including the energy, water, healthcare and manufacturing sectors.