Cybersecurity & Privacy

  • July 14, 2026

    DOD Halts Cybersecurity Program Phase Over Cost, Alignment

    The Pentagon has suspended the next phase of the Cybersecurity Maturity Model Certification program, which is aimed at boosting cybersecurity standards across the defense industrial base while it reviews whether the program aligns with Secretary of Defense Pete Hegseth's acquisition priorities. 

  • July 14, 2026

    RJ Reynolds Says TCPA Doesn't Apply To Texts, Cellphones

    Tobacco giant R.J. Reynolds is looking to duck a proposed class action accusing it of sending unsolicited text messages, saying a North Carolina federal judge should apply recent U.S. Supreme Court precedent on judicial deference to find the Telephone Consumer Protection Act doesn't apply to cellphones or texts.

  • July 14, 2026

    Insurer Ducks Models' Advertising Claims Against Strip Club

    A Connecticut federal judge has handed Clear Blue Specialty Insurance Co. a win in six professional models' attempts to access a strip club's $1 million policy pursuant to a settlement in an underlying false association and false advertising lawsuit, saying an exclusion for "exhibitions and related marketing" insulates the insurer.

  • July 14, 2026

    News Orgs Need To Show AI Uses More Than Just Facts

    News organizations suing artificial intelligence companies for allegedly infringing their copyrighted content for AI training must show that chatbots are using the organizations' prose as opposed to merely uncopyrightable facts, or that the practice is diluting the market for human-made journalism, experts told Law360.

  • July 14, 2026

    States Will Get $18M From 23andMe Ch. 11 For Data Breach

    A week after a bankruptcy court approved a $46.75 million settlement between the DNA testing company 23andMe and data breach claimants, a coalition of more than 40 states announced Tuesday that they would share in an additional $18 million to resolve claims of unreasonable security practices.

  • July 13, 2026

    NJ Delays Registry Aspect Of Newly Enacted Data Broker Law

    New Jersey regulators won't immediately enforce a sweeping data broker law that took effect in June, announcing Friday covered businesses have to register and pay a potentially hefty registration fee until spring, and it would consider complaints about the law's lack of clarity in policing its sensitive data sales ban.

  • July 13, 2026

    7th Circ. Nixes Clearview AI Privacy Deal Over Class Rift

    The Seventh Circuit has vacated a novel biometric privacy settlement between Clearview AI and classes of individuals who claim the company misused their public photos, saying a nationwide class representative should have signaled their agreement before the district court approved a deal containing such comparatively "meager" benefits.

  • July 13, 2026

    WebAI Says Ex-Engineers Recast Firing As Fraud Claims

    WebAI Inc. has told a North Carolina federal court that a complaint by former engineers alleging an executive's conduct jeopardized huge deals is merely an attempt by disgruntled employees to conjure a multicount lawsuit from a lawful employment separation.

  • July 13, 2026

    4th Circ. Says Manual Cellphone Searches At Border Are Legal

    The Fourth Circuit has ruled that manual searches of a cellphone at the border are legal because they are considered routine and do not require individualized suspicion by a border agent about whether a crime has occurred.

  • July 13, 2026

    Blue Shield Of Calif. Beats Enrollee Data Privacy Suit, For Now

    A California federal judge dismissed a proposed class action accusing Blue Shield of California of violating the federal Wiretap Act by installing Google and Meta tracking tools on its website, saying plaintiffs failed to allege that the health plan provider intercepted their highly sensitive health-related electronic communications.

  • July 13, 2026

    23andMe Bankruptcy Plan Bars Data Breach Suit In Calif.

    A Missouri bankruptcy judge has told attorneys representing California the state can no longer press its data breach lawsuit against the reorganized 23andMe, finding the state court action is barred by the company's confirmed Chapter 11 plan.

  • July 13, 2026

    Casino Co. Moves To Toss Ex-Worker's Data Breach Suit

    A casino and entertainment company moved Monday to dismiss a former employee's proposed class action over a 2024 cyberattack, telling a Colorado federal court she lacks standing to sue and failed to show her alleged injuries were caused by the security incident.

  • July 13, 2026

    Families Cite Geofence Ruling In Newborn Blood Testing Case

    A group of parents suing the state of Michigan over the way newborn blood samples are collected and stored has asked a federal judge to revive its claims by citing recently decided U.S. Supreme Court precedent over the use of bulk cellphone data by police.

  • July 13, 2026

    Mass Tort Firms Hit With Suit Over AI Solicitation Calls

    A Michigan-based mass tort law firm and a pair of affiliate firms are violating federal and Texas state laws through an artificial intelligence-generated telemarketing campaign meant to solicit clients, according to a putative class action filed in Texas federal court.

  • July 13, 2026

    Trump-IRS Settlement Result Of Sham Suit, Judge Rules

    President Donald Trump's $10 billion suit against his own Internal Revenue Service and the resulting settlement deal lacked a legitimate controversy, given Trump's control over both the agency and the U.S. Department of Justice, a Florida district judge said Monday in an order barring Trump or others from citing the deal.

  • July 13, 2026

    Steptoe Adds Crowell & Moring Defense Pro As Cyber Lead

    Steptoe LLP announced Monday that it has hired a former government contracts and cybersecurity partner from Crowell & Moring LLP who has held senior procurement roles at the U.S. Department of Defense and the Department of Homeland Security to lead the firm's cybersecurity practice.

  • July 10, 2026

    Biggest Illinois Decisions Of 2026: Midyear Report

    One of the biggest decisions to come down in Illinois so far this year applies a 2-year-old Biometric Information Privacy Act amendment retroactively in an appellate ruling experts anticipate will deflate settlement values even though it came from a federal court.

  • July 10, 2026

    Healthcare Analytics Co. Beats Data Breach Suit, For Good

    Arbor Associates permanently beat patients' proposed negligence class action alleging their sensitive information was stolen following a 2025 data security incident that resulted in an uptick in spam calls, after a Michigan federal judge ruled those injuries are "nothing more than an 'unadorned, the-defendant-unlawfully-harmed-me accusation.'"

  • July 10, 2026

    WhatsApp Users Must Arbitrate Claims Over Private Messages

    A California federal judge has ordered WhatsApp users suing the messaging platform in a proposed class action over alleged privacy violations to arbitration, rejecting their argument that the underlying arbitration agreements improperly short-circuit certain of state law claims.

  • July 10, 2026

    House Duo Push Agencies To Tackle AI-Related Election Risks

    A bipartisan pair of members of the U.S. House of Representatives is calling on several federal agencies to coordinate efforts to ensure technologies fueled by artificial intelligence aren't operating in a way that undermines voters' ability to access "accurate, neutral and reliable" information about the upcoming midterm elections.

  • July 10, 2026

    Defense Contractor Accuses Rival Of Trade Secret Theft

    A defense technology contractor has accused a former employee of stealing its trade secrets to help a competing business build a similar product that allows the retrieval of data when a reliable internet connection is not available.

  • July 10, 2026

    Patient Says Data Suit Against Medical Pot Co. Should Go On

    A medical marijuana dispensary accused of clandestinely tracking and sharing online user health data with Google shouldn't be allowed to escape a proposed class action, a patient has told a Florida federal court, arguing that a disclaimer within its website's privacy policy doesn't automatically mean users consented to the conduct.

  • July 10, 2026

    DOJ Appeals Order Shielding Trans Youth Medical Records

    The U.S. Department of Justice asked the Ninth Circuit to review a California federal court's order blocking the government from trying to identify individuals who received gender-affirming care from a Stanford Medicine hospital as minors.

  • July 10, 2026

    Medical Device Co. Hit With Action Over Data Breach

    Pennsylvania-based medical device company AdaptHealth Corp. is facing a putative class action in federal court alleging the company was liable for a data breach last month that exposed the sensitive information of its customers.

  • July 10, 2026

    RentGrow To Pay $2.25M To End Fair Reporting Act Claims

    Tenant-screening report provider RentGrow Inc. will pay $2.25 million to settle allegations it violated the Fair Credit Reporting Act by not taking reasonable steps to ensure the accuracy of its reports or following up on disputed reports, according to the Federal Trade Commission.

Expert Analysis

  • 2nd Circ.'s Embedded Video Ruling May Protect Publishers

    Author Photo

    The Second Circuit's recent decision in Richardson v. Townsquare, dismissing an infringement claim arising from an embedding of a YouTube-hosted interview, reaffirms a potent defense for publishers who regularly use social media platforms' embed functionality, says Amanda Harris at Jassy Vick.

  • Data Collection Push Signals New Era For Bank Compliance

    Author Photo

    An executive order pushing for broad bank collection of beneficiary data and a Financial Crimes Enforcement Network geographic targeting order in Minnesota should prompt financial institutions to run checks on customer diligence and privacy controls, as these directives may be part of a wider compliance shift, say attorneys at Faegre Drinker.

  • Series

    Competing At Poker Makes Me A Better Lawyer

    Author Photo

    Playing poker in male-dominated rooms taught me to treat skepticism as background noise when my opponents seem to underestimate me, to apply pressure when it matters and to adapt without losing strategic discipline — skills that are all indispensable in restructuring and insolvency matters, says Alexis Gambale at Pashman Stein.

  • Revisiting TransUnion's Underused Standing Rule, 5 Years On

    Author Photo

    The Ninth Circuit Court of Appeals' recent use of the U.S. Supreme Court’s now five-year-old TransUnion v. Ramirez rule specifying that the "mere risk of future harm" isn't concrete enough to support a damages claim presents an opportunity to revisit this underutilized standing rule, say attorneys at Horvitz & Levy.

  • 5 Things Associates Must Ask About Their Firm's Merger Plan

    Author Photo

    The associates who navigate law firm mergers best ask the right questions early, such as inquiring about partners' plans, to assess how the merger could affect their workflow and career path, says Jackie Bokser-LeFebvre at Major Lindsey.

  • Brain Computer Interfaces Boot Up Multipronged Legal Issues

    Author Photo

    As neurotechnology companies begin to conduct human clinical trials for brain computer interfaces, attorneys should prepare for legal ramifications across a broad range of practice areas, including intellectual property, privacy and product liability, say attorneys at ArentFox Schiff.

  • Columbia Software IP Ruling Tests Royalty Damages Model

    Author Photo

    The Federal Circuit's recent decision in Columbia University v. Gen Digital, vacating a damages verdict involving foreign software sales, provides guidance on ambiguities surrounding the worldwide royalty damages model established by the court's decision in Brumfield v. IBG two years ago, say attorneys at Munger Tolles.

  • FinCEN World Cup Warning Raises Trafficking Risks For Cos.

    Author Photo

    The Financial Crimes Enforcement Network's recent warning of human trafficking risks during the World Cup games signals heightened scrutiny ahead of the upcoming tournament, and suggests regulators increasingly expect businesses beyond financial institutions to maintain effective trafficking-risk controls, say attorneys at Morgan Lewis.

  • 2 'Rocket Dockets' And The Rules That Propel Them

    Author Photo

    The fastest civil trial courts in the country are currently in the Eastern District of Virginia and the Southern District of Florida, and their chief judges provide insights into the court rules that keep them ahead, says Robert Tata at Hunton.

  • Calif. Ruling Lowers Bar For Health Data Breach Claims

    Author Photo

    The California Supreme Court's ruling in J.M. v. Illuminate Education offers protection for non-healthcare companies that maintain health-related data but also adopts a new and more plaintiff-favorable standard for breach of confidentiality that companies maintaining any health-related data should address, say attorneys at Cooley.

  • AI Practices To Protect Trade Secrets Amid Unstable Case Law

    Author Photo

    Amid recent diverging district court approaches to whether inputting proprietary information into artificial intelligence tools could constitute a failure to take reasonable measures to safeguard secrets, trade secret owners must adapt their confidentiality practices to keep trade secrets secure, says Fitz Collings at MoFo.

  • Recent Actions Signal Increased NYDFS Health Cyber Focus

    Author Photo

    The New York Department of Financial Services' recent $2.25 million settlement with Delta Dental indicates that it views cybersecurity enforcement in the healthcare and insurance sectors as an ongoing priority, and serves as a road map for the compliance gaps regulators are most likely to target, say attorneys at Crowell & Moring.

  • Your Next Litigation Hold Should Cover AI Chat Logs

    Author Photo

    The Delaware Chancery Court’s recent decision in Fortis Advisors v. Krafton to treat a CEO’s artificial intelligence chats as substantive evidence is being read as a discovery warning to litigators, but there is a second duty-to-preserve lesson that is especially pertinent to in-house counsel, say attorneys at Faegre Drinker.

  • 'Operation Hard Money' Marks New Phase In Synthetic ID Fraud

    Author Photo

    A recent California mortgage fraud case dubbed "Operation Hard Money" shows synthetic identities are increasingly key to mortgage and money laundering schemes, so lenders would be wise to integrate verification and behavioral monitoring as fraud powered by artificial intelligence creates larger losses and recovery challenges, says Neal Levin at Rimon.

  • New Connecticut Law On Employers' AI Use Is Inventive

    Author Photo

    A recently passed Connecticut law regulating the use of artificial intelligence in employment decisions innovates by using third-party risk assessments to vet and certify AI models, and by recognizing a division of responsibility between developers and deployers, potentially influencing pending legislation in other states, say attorneys at Littler.

Want to publish in Law360?


Submit an idea

Have a news tip?


Contact us here
Can't find the article you're looking for? Click here to search the Cybersecurity & Privacy archive.