Expert Analysis

• Now Is The Time To Prep For SEC's New Data Breach Regs

  

  Recent remarks from the U.S. Securities and Exchange Commission’s acting director of the Division of Examinations suggest that the commission will support exams for compliance with its new data breach detection and reporting regulations, and a looming deadline means investment advisers and broker-dealers must act now to update their processes, say attorneys at McGuireWoods.

• Corp. Human Rights Regulatory Landscape Is Fragmented

  

  Given the complexity of compliance with nations' overlapping human rights laws, multinational companies need to be cognizant of the evolving approaches to modern slavery transparency, and proposals that could reduce mandatory due diligence and reporting requirements, say attorneys at Simpson Thacher.

• Impending Quality Control Standards Pose Risks For Auditors

  

  Public accounting firms will need to comply with new standards aimed at strengthening their quality control systems by the end of this year, a significant challenge sure to increase costs, individual liability and regulatory scrutiny, say Kelly Bossard at FTI Consulting and Mike Plotnick at King & Spalding.

• Opinion

  Premerger Settlements Don't Meet Standard For Bribery

  

  Claims that Paramount’s decision to settle a lawsuit with President Donald Trump while it was undergoing a premerger regulatory review amounts to a quid pro quo misconstrue bribery law and ignore how modern legal departments operate, says Ediberto Román at the Florida International University College of Law.

• Texas Med Spas Must Prepare For 2 New State Laws

  

  Two new laws in Texas — regulating elective intravenous therapy and reforming healthcare noncompetes — mark a pivotal shift in the regulatory framework for medical spas in the state, which must proactively adapt their operations and contractual practices, says Brad Cook at Munsch Hardt.

• Series

  Playing Soccer Makes Me A Better Lawyer

  

  Soccer has become a key contributor to how I approach my work, and the lessons I’ve learned on the pitch about leadership, adaptability, resilience and communication make me better at what I do every day in my legal career, says Whitney O’Byrne at MoFo.

• Forced Labor Bans Hold Steady Amid Shifts In Global Trade

  

  As businesses try to navigate shifting regulatory trends affecting human rights and sustainability, forced labor import bans present a zone of relative stability, notwithstanding outstanding questions about the future of enforcement, say attorneys at Simpson Thacher.

• Grappling With Workforce-Related Immigration Enforcement

  

  To withstand the tightening of workforce-related immigration rules and the enforcement uptick we are seeing in the U.S. and elsewhere, companies must strike a balance between responding quickly to regulatory changes, and developing proactive strategies that minimize risk, say attorneys at Fragomen.

• Opinion

  The SEC Should Embrace Tokenized Equity, Not Strangle It

  

  The U.S. Securities and Exchange Commission should grant no-action relief to firms ready to pilot tokenized equity trading, not delay innovation by heeding protectionist industry arguments, says J.W. Verret at George Mason University.

• What To Do When Congress And DOJ Both Come Knocking

  

  As recently seen in the news, clients may find themselves facing parallel U.S. Department of Justice and congressional investigations, requiring a comprehensive response that considers the different challenges posed by each, say attorneys at Friedman Kaplan.

• Series

  Law School's Missed Lessons: Learning From Failure

  

  While law school often focuses on the importance of precision, correctness and perfection, mistakes are inevitable in real-world practice — but failure is not the opposite of progress, and real talent comes from the ability to recover, rethink and reshape, says Brooke Pauley at Tucker Ellis.

• 23andMe Fine Signals ICO's New GDPR Enforcement Focus

  

  Many of the cybersecurity failures identified by the Information Commissioner’s Office in its investigation of 23andMe, recently resulting in a £2.3 million fine, were basic lapses, but the ICO's focus on several new U.K. General Data Protection Regulation considerations will likely carry into the future, say lawyers at Womble Bond.

• Midyear Rewind: How Courts Are Reshaping VPPA Standards

  

  The first half of 2025 saw a series of cases interpreting the Video Privacy Protection Act as applied to website tracking technologies, including three appellate rulings deepening circuit splits on what qualifies as personally identifiable information and who qualifies as a consumer under the statute, say attorneys at Perkins Coie.

• Lessons On Parallel Settlements From Vanguard Class Action

  

  A Pennsylvania federal judge’s unexpected denial of a proposed $40 million settlement of an investor class action against Vanguard highlights key factors parties should consider when settlement involves both regulators and civil plaintiffs, say attorneys at Ropes & Gray.

• How The Healthline Privacy Settlement Redefines Ad Tech Use

  

  The Healthline settlement is the first time California has drawn a clear line in the sand around how website tracking must function in practice, so if your site uses tracking technologies, especially around sensitive content like health or finance, regulators are inspecting your website's back end, not just its banner, say attorneys at Baker Donelson.