Expert Analysis

• How DOJ's New Data Security Rules Leave HIPAA In The Dust

  

  The U.S. Department of Justice's recently effective data security requirements carry profound implications for how healthcare providers collect, store, share and use data — and approach vendor oversight — that go far beyond the Health Insurance Portability and Accountability Act, say attorneys at Nelson Mullins.

• Opinion

  Section 1983 Has Promise After End Of Nationwide Injunctions

  

  After the U.S. Supreme Court recently struck down the practice of nationwide injunctions in Trump v. Casa, Section 1983 civil rights suits can provide a better pathway to hold the government accountable — but this will require reforms to qualified immunity, says Marc Levin at the Council on Criminal Justice.

• Now Is The Time To Prep For SEC's New Data Breach Regs

  

  Recent remarks from the U.S. Securities and Exchange Commission’s acting director of the Division of Examinations suggest that the commission will support exams for compliance with its new data breach detection and reporting regulations, and a looming deadline means investment advisers and broker-dealers must act now to update their processes, say attorneys at McGuireWoods.

• How Banks Can Harness New Customer ID Rule's Flexibility

  

  Banking regulators' update to the customer identification process, allowing banks to collect some information from third parties rather than directly from customers, helps modernize anti-money laundering compliance and carries advantages for financial institutions that embrace the new approach, say attorneys at Bradley Arant.

• What To Know About NCAA Deal's Arbitration Provisions

  

  Kathryn Hester at Jones Walker discusses the key dispute resolution provisions of the NCAA's recently approved class action settlement that allows for complex revenue sharing with college athletes, breaking down the arbitration stipulations and explaining how the Northern District of California will handle certain enforcement, administration, implementation and interpretation disputes.

• Opinion

  Premerger Settlements Don't Meet Standard For Bribery

  

  Claims that Paramount’s decision to settle a lawsuit with President Donald Trump while it was undergoing a premerger regulatory review amounts to a quid pro quo misconstrue bribery law and ignore how modern legal departments operate, says Ediberto Román at the Florida International University College of Law.

• Texas Med Spas Must Prepare For 2 New State Laws

  

  Two new laws in Texas — regulating elective intravenous therapy and reforming healthcare noncompetes — mark a pivotal shift in the regulatory framework for medical spas in the state, which must proactively adapt their operations and contractual practices, says Brad Cook at Munsch Hardt.

• What EPA Chemical Data Deadline Extension Means For Cos.

  

  The U.S. Environmental Protection Agency's extension for manufacturers and importers of 16 chemical substances to report unpublished health and safety studies under the Toxic Substances Control Act could lead to state regulators stepping into the breach, while creating compliance risks and uncertainty for companies, say attorneys at Holland & Knight.

• Series

  Playing Soccer Makes Me A Better Lawyer

  

  Soccer has become a key contributor to how I approach my work, and the lessons I’ve learned on the pitch about leadership, adaptability, resilience and communication make me better at what I do every day in my legal career, says Whitney O’Byrne at MoFo.

• Compliance Changes On Deck For Banks Under Texas AI Law

  

  Financial services companies, including banks and fintechs, should evaluate their artificial intelligence usage to prepare for Texas' newly passed law regulating AI governance, noting that the enforcement provisions provide for an affirmative defense to liability, say attorneys at Mitchell Sandler.

• Series

  Law School's Missed Lessons: Learning From Failure

  

  While law school often focuses on the importance of precision, correctness and perfection, mistakes are inevitable in real-world practice — but failure is not the opposite of progress, and real talent comes from the ability to recover, rethink and reshape, says Brooke Pauley at Tucker Ellis.

• 23andMe Fine Signals ICO's New GDPR Enforcement Focus

  

  Many of the cybersecurity failures identified by the Information Commissioner’s Office in its investigation of 23andMe, recently resulting in a £2.3 million fine, were basic lapses, but the ICO's focus on several new U.K. General Data Protection Regulation considerations will likely carry into the future, say lawyers at Womble Bond.

• How Courts Are Addressing The Use Of AI In Discovery

  

  In recent months, several courts have issued opinions on handling discovery issues involving artificial intelligence, which collectively offer useful insights on integrating AI into discovery and protecting work product in connection with AI prompts and outputs, says Philip Favro at Favro Law.

• Midyear Rewind: How Courts Are Reshaping VPPA Standards

  

  The first half of 2025 saw a series of cases interpreting the Video Privacy Protection Act as applied to website tracking technologies, including three appellate rulings deepening circuit splits on what qualifies as personally identifiable information and who qualifies as a consumer under the statute, say attorneys at Perkins Coie.

• Tips For Crypto AI Agent Developers Under SEC Watch

  

  With agents powered by artificial intelligence increasingly making decisions in the cryptocurrency world, there's a chance the U.S. Securities and Exchange Commission could use the Investment Advisers Act to regulate this technology in financial services, but there are ways developers can mitigate regulatory risks, say attorneys at Morrison Cohen.