SEC, FTC Headline A Rise In U.S. Privacy And Cybersecurity Efforts

California Governor Newsom has signed Senate Bill 574 into law, establishing the nation's first statutory framework governing how attorneys and arbitrators use generative AI in their professional practice. The legislation creates specific obligations around confidentiality protection, accuracy verification, and disclosure requirements that take effect January 1, 2027.

Although being challenged by an injunction filed on August 20, 2026, by a coalition of 17 states, California’s SB 54 Plastic Pollution Prevention and Packaging Producer Responsibility Act is now in effect, and companies that sell, distribute, import, or ship packaged products into California should be evaluating whether they have compliance obligations.

Scott L. Vernick was quoted in The Legal Intelligencer article, "Did UPMC Data Breach Ruling Lock Plaintiffs Out of State Court?" on January 23, 2017.

Connecticut’s Governor has signed into law Public Act No. 26-64, “An Act Concerning Consumer Privacy and Protection,” which introduces substantial new compliance obligations for businesses that operate as data brokers...

California's 2026 legislative session concluded with Governor Newsom signing several landmark privacy and AI bills into law, including comprehensive child safety measures, AI auditor oversight frameworks, and expanded data protection requirements. How will these new regulations reshape digital advertising, workplace AI deployment, and online platform obligations for businesses operating in California?

In the last few months, California and New Jersey enacted legislation to protect children online: California’s 13-bill package targets risks to children arising from emerging technologies, while New Jersey’s 3-bill package includes an age-appropriate design code. Despite their differences, these laws share a common focus on protecting children as technology evolves.

California Governor Gavin Newsom has signed several significant privacy bills that will reshape how businesses handle consumer data, including expanded deletion rights under the CCPA, shortened data broker response cycles, and sweeping new insurance sector privacy requirements. While one landmark bill banning the sale of sensitive personal information was vetoed, the approved legislation requires companies to update their deletion workflows...

Legal risk intensifies for companies offering online interactive features to minors across Georgia, Florida, and Alabama as the Eleventh Circuit vacates preliminary injunctions against state social media laws. With Florida's HB 3 and Georgia's SB 351 now enforceable and Alabama's HB 161 set to take effect January 1, 2027, businesses face divergent compliance requirements including age verification, parental consent mechanisms, and account deletion protocols.

Meta Platforms has agreed to pay $17 billion over ten years to resolve multistate litigation alleging the company engineered Facebook and Instagram to addict minors while concealing the risks. Beyond the historic financial penalty, the settlement mandates sweeping platform changes including default usage limits, overnight lockouts, and parental controls for users under eighteen.

Multiple organizations have recently disclosed significant data breaches affecting thousands of individuals, with compromised information ranging from basic contact details to highly sensitive medical records and financial data. The incidents span various sectors including healthcare, insurance, and professional services, raising questions about the scope of exposure and potential remedies for affected individuals.

On September 3, the Government of Canada published amendments removing seven types of energy projects from the Physical Activities Regulations (the Project List) under the Impact Assessment Act (IAA). As a result, these types of projects will no longer be subject to the IAA but will continue to be regulated by the Canada Energy Regulator Act (CER Act) or applicable provincial environmental assessment regimes.

On March 19, 2015, the United States District Court in the District of Minnesota gave preliminary approval to a proposed settlement for the December 2013 data breach suffered by Target Corporation.

The Institutional Limited Partners Association (ILPA) recently released the third version of its principles (Principles 3.0), as well as a form of limited partnership agreement (model LPA, and...

Ontario has launched its first call for expressions of interest in carbon capture and storage licences under the new Geologic Carbon Storage Act, targeting Crown-owned pore space beneath lakebeds surrounding the Ontario Peninsula. The detailed submission requirements reveal expectations that proponents have advanced well beyond initial planning stages, with the process serving as a critical test of Ontario's emerging CCS framework and its attractiveness to industry.

Since Canada's anti-spam legislation (CASL) was enacted in 2014, businesses have been faced with the challenge of keeping adequate records of their authority to send commercial electronic messages under CASL's various categories of express and implied consent.

The Government of Canada has proposed a permanent Productivity Mega Deduction that would allow immediate expensing for most depreciable property and Canadian development expenses acquired or incurred on or after September 15, 2026. This significant tax policy change aims to reduce the marginal effective tax rate on business investment from 13% to 6.4%, though certain exclusions and restrictions apply to specific asset categories.

Canada has announced plans to attract private investment through long-term concessions to operate its four largest airports: Toronto-Pearson, Vancouver International, Montréal-Trudeau, and Calgary International. The federal government will retain ownership of the underlying airport land and assets while seeking tens of billions of dollars in private capital to be reinvested in regional airports and local transport infrastructure. Key details regarding the scope of private operational involvement, award

President Trump has announced a 25% tariff on all imports of steel and aluminum entering the United States, including from Canada, "without exceptions or exemptions".

The Ontario government recently amended the Personal Health Information Protection Act (PHIPA) to include mandatory breach reporting.

Canada's National Artificial Intelligence Strategy targets healthcare as a priority sector for AI investment, proposing $500 million in growth capital and dedicated resources to keep talent and innovation within Canadian borders. The federal government outlines specific healthcare missions, data infrastructure investments, and venture capital initiatives designed to transform Canada from an AI research leader into a commercialization powerhouse.