The FTC's Updated COPPA Rule: Redefining Children's Digital Privacy Protection

California Governor Newsom has signed Senate Bill 574 into law, establishing the nation's first statutory framework governing how attorneys and arbitrators use generative AI in their professional practice. The legislation creates specific obligations around confidentiality protection, accuracy verification, and disclosure requirements that take effect January 1, 2027.

Although being challenged by an injunction filed on August 20, 2026, by a coalition of 17 states, California’s SB 54 Plastic Pollution Prevention and Packaging Producer Responsibility Act is now in effect, and companies that sell, distribute, import, or ship packaged products into California should be evaluating whether they have compliance obligations.

Connecticut’s Governor has signed into law Public Act No. 26-64, “An Act Concerning Consumer Privacy and Protection,” which introduces substantial new compliance obligations for businesses that operate as data brokers...

California Governor Gavin Newsom has signed several significant privacy bills that will reshape how businesses handle consumer data, including expanded deletion rights under the CCPA, shortened data broker response cycles, and sweeping new insurance sector privacy requirements. While one landmark bill banning the sale of sensitive personal information was vetoed, the approved legislation requires companies to update their deletion workflows...

Four states have adopted laws regulating data brokers, but only one – California – has established a universal deletion mechanism whereby consumers are able to request that all data brokers...

Legal risk intensifies for companies offering online interactive features to minors across Georgia, Florida, and Alabama as the Eleventh Circuit vacates preliminary injunctions against state social media laws. With Florida's HB 3 and Georgia's SB 351 now enforceable and Alabama's HB 161 set to take effect January 1, 2027, businesses face divergent compliance requirements including age verification, parental consent mechanisms, and account deletion protocols.

Scott L. Vernick was quoted in The Legal Intelligencer article, "Did UPMC Data Breach Ruling Lock Plaintiffs Out of State Court?" on January 23, 2017.

California's 2026 legislative session concluded with Governor Newsom signing several landmark privacy and AI bills into law, including comprehensive child safety measures, AI auditor oversight frameworks, and expanded data protection requirements. How will these new regulations reshape digital advertising, workplace AI deployment, and online platform obligations for businesses operating in California?

On September 26, 2025, the California Privacy Protection Agency (CPPA) announced a $1.35 million fine against Tractor Supply Company, resolving allegations that the company violated the California...

In the last few months, California and New Jersey enacted legislation to protect children online: California’s 13-bill package targets risks to children arising from emerging technologies, while New Jersey’s 3-bill package includes an age-appropriate design code. Despite their differences, these laws share a common focus on protecting children as technology evolves.

The U.S. Department of Commerce's Bureau of Industry and Security issued guidance on May 31, 2026, clarifying licensing requirements for advanced computing items and AI technologies. The guidance maintains export restrictions for entities in certain countries while providing limited relief for data center operators, though questions remain about future regulatory direction. Companies must now strengthen their compliance programs and supply-chain due diligence as BIS continues to prioritize national security

The TAKE IT DOWN Act establishes a comprehensive legal framework targeting nonconsensual intimate imagery, including AI-generated content, by creating criminal penalties for knowing publication and imposing strict compliance obligations...

The Federal Circuit affirmed the PTAB's unpatentability finding for a patent related to selectively enabling data paths in memory systems. The court addressed challenges to the Board's reliance on prior art references and claim mapping, while rejecting procedural arguments about the adequacy of the Board's reasoning.

The FTC's amended COPPA Rule took full effect on April 22, 2026, imposing new substantive requirements on operators of child-directed websites and online services.

The Federal Circuit affirmed a district court's validity findings for Exelixis's Salt Patents related to its cancer drug Cabometyx, holding that disclosure of chemical name, formula, and crystalline structure provided adequate written description support. However, the Court dismissed MSN's appeal and vacated the non-obviousness finding for the '349 Patent after Exelixis unilaterally dismissed its cross-appeal, preventing MSN from opposing the adverse judgment.

The Supreme Court will decide whether subscribing to any good or service from a video provider—such as a newsletter—makes someone a "consumer" under the Video Privacy Protection Act, or whether only subscriptions to audiovisual content qualify. The case involves allegations that a website disclosed a user's video-viewing history through Facebook tracking pixels after the user signed up for an online newsletter, creating a circuit split on how broadly the VPPA's consumer protections should apply.

Recent patent litigation orders from the United States District Court for the District of Massachusetts reveal critical claim construction disputes and discovery rulings that shape the boundaries of patent enforcement. How do courts balance claim definiteness requirements with the practical realities of patent scope, and what standards govern third-party discovery in indirect infringement cases?

On May 27, 2026, the Superior Court of California held that subdivision (a) of California Penal Code § 638.51 does not apply to software on commercial websites. Plaintiff Brian Blaker sued Defendant NetScout, Inc., alleging the Defendant had violated § 638.51 of the California Invasion of Privacy Act by implementing a software development kit (SDK) on its website.

A New York federal court ruled that Rebel Creamery intentionally copied Van Leeuwen Ice Cream's distinctive packaging, resulting in a $23.785 million disgorgement order and mandatory redesign. The decision demonstrates how trade dress protection can extend to overall packaging aesthetics when individual elements combine to create a unique commercial impression, even when those elements might be commonplace in isolation.

Recent EU and UK court decisions have reshaped the landscape of data protection compliance, clarifying critical boundaries around consent, data subject rights, cybersecurity obligations, and children's privacy. These rulings demonstrate that organizations must move beyond formal compliance to embed proportionality, accountability, and risk-based decision-making into their data processing activities, even when disclosures are legally required or supported by valid legal bases.