Cybersecurity & Privacy

  • August 01, 2025

    Taxation With Representation: Skadden, Wachtell, Latham

    In this week's Taxation With Representation, Union Pacific Corp. and Norfolk Southern Corp. announce megamerger plans, Palo Alto Networks acquires identity security company CyberArk, Brookfield buys British life insurer Just Group, and Duke Energy sells its Piedmont Natural Gas Tennessee local distribution business to Spire Inc.

  • August 01, 2025

    Hyundai, Kia Can't Get Rehearing On Cities' Car Theft MDL

    The Ninth Circuit won't hold an en banc rehearing on an appeal from Hyundai Motors America Inc. and Kia America Inc. seeking to dismiss negligence claims by cities in three of seven states in multidistrict litigation over their alleged failure to install anti-theft technology in millions of vehicles.

  • July 31, 2025

    Appeals Court Resurrects DC's Privacy Suit Against Facebook

    A Washington, D.C., appeals court Thursday revived a lawsuit from the district's attorney general accusing Facebook of misleading users about how their data could be shared with Cambridge Analytica and other third-party apps, finding the lower court relied on too high an evidence standard in axing the claims.

  • July 31, 2025

    Yahoo Says Chubb Unit Must Cover Potential EU Privacy Fines

    Yahoo says a Chubb subsidiary is obligated to cover regulatory fines that might be leveled against one of the tech company's subsidiaries for violating the European Union's data privacy law, but the insurer has refused to honor the policy, according to a lawsuit filed this week in Delaware.

  • July 31, 2025

    Flo Settles Privacy Fight Midtrial, Leaving Meta To Face Jury

    Flo Health Inc. told a California federal judge Thursday it had reached an agreement to settle claims that its popular menstrual-tracking app illegally shared sensitive health data of millions of women with Meta Platforms Inc. and Google, partially resolving a sweeping privacy case midtrial, and leaving Meta as the sole remaining defendant.

  • July 31, 2025

    Fed Joins In Letting Banks Use Third-Party Customer ID Info

    The Federal Reserve on Thursday relaxed a post-Sept. 11 identity check rule for banks under its oversight, joining other federal financial regulators in allowing the use of certain information provided by third-party sources.

  • July 31, 2025

    Microsoft Says Russian Hackers Spying On Moscow Embassies

    Microsoft Corp. has found evidence Russia has been targeting embassies within its borders with malware since at least last year, according to a new warning from the tech titan's threat intelligence team.

  • July 31, 2025

    DOJ Says Defense Co., PE Firm To Pay $1.75M For FCA Claims

    A defense contractor and private equity firm in California will pay $1.75 million to settle allegations that they failed to meet the cybersecurity requirements of a U.S. Air Force contract, federal prosecutors said Thursday.

  • July 31, 2025

    Colo. Court Affirms Stalking Conviction In 'True Threat' Case

    The Colorado Court of Appeals on Thursday declined to overturn the stalking and harassment convictions of a man who claimed his threatening emails to a police officer were protected First Amendment speech.

  • July 31, 2025

    Zoom Investor Gets Final OK For Derivative Suit Settlement

    A Delaware federal judge granted final approval on Thursday to a settlement reached in a shareholder derivative suit accusing the top brass of Zoom of pulling in $172.9 million via insider sales after its 2019 initial public offering and before shares fell during the early days of the COVID-19 pandemic.

  • July 31, 2025

    Troutman Adds Husch Blackwell Cyber Co-Leader

    Troutman Pepper Locke LLP announced Thursday the hiring of a former Husch Blackwell partner for its privacy and cyber practice group in Philadelphia.

  • July 31, 2025

    9th Circ. Upholds Google's Play Store Antitrust Trial Loss

    A Ninth Circuit panel Thursday affirmed Epic Games' 2023 antitrust jury trial win, along with an injunction requiring Google to open its Google Play Store to rivals, backing a landmark finding that Google monopolized the Android app-distribution market.

  • July 31, 2025

    Fintech, BofA, JPMorgan Face Class Suit Over Cyberattack

    Financial software company Finastra Technology Inc., Bank of America and JPMorgan Chase Bank NA face a proposed class action alleging they failed to properly safeguard customers' personal information that was exposed by a data breach.

  • July 30, 2025

    Sens. Step Up Push For Data Privacy Law Amid AI's Rise

    The leaders of a Senate data privacy subcommittee Wednesday put the spotlight back on longstanding efforts to craft a nationwide framework for how companies use and disclose consumers' personal information, arguing that a growing state law patchwork and the rise of artificial intelligence accelerated the need for such protections.

  • July 30, 2025

    Tornado Was A One-Stop Crypto Laundering Shop, Jury Told

    Manhattan federal prosecutors Wednesday made their final arguments in the money laundering and sanctions trial of Tornado Cash co-founder Roman Storm, claiming the cryptocurrency tumbler's privacy-focused ethos was just a fig leaf for dirty money that flowed through its "fancy online laundromat."

  • July 30, 2025

    Flo Likely To Get Health Privacy Claim Tossed In Meta Case

    The California federal judge overseeing a trial on allegations that Flo Health and Meta Platforms Inc. violated the privacy of millions of women who used Flo's period tracker app said Wednesday he'd likely toss the California Confidentiality of Medical Information Act claim, saying the lack of evidence is an "unsurmountable" problem.

  • July 30, 2025

    Illumina To Pay $9.8M To Resolve Cybersecurity Qui Tam Case

    Biotechnology company Illumina Inc. has agreed to pay $9.8 million in a settlement with the U.S. Department of Justice to put to rest a first-of-its-kind False Claims Act suit alleging the company violated cybersecurity regulations for medical devices, according to an announcement Wednesday.

  • July 30, 2025

    E-Commerce Firms To Pay $15M To End FTC's AI Scam Claims

    A New Jersey-based network of e-commerce coaching firms will pay more than $15 million to end a Federal Trade Commission suit accusing it of duping consumers out of nearly $16 million through false promises of AI-driven success on e-commerce platforms, according to a federal court order filed Wednesday.

  • July 30, 2025

    Cash App Parent's $12.5M Spam Text Settlement Gets 1st OK

    A Washington federal judge has granted preliminary approval to Cash App parent Block Inc.'s $12.5 million class action settlement with customers who alleged they were bombarded with "annoying and harassing spam texts" from the company. 

  • July 30, 2025

    TMX Customers Seek Final OK Of $42M Data Breach Suit Deal

    Customers of the title loan and payday lender TMX Finance have asked a Georgia federal judge to grant final approval of their $42 million settlement of claims arising from a data breach that affected an estimated 4.8 million people.

  • July 30, 2025

    AMC's Status As Movie Theater Sinks Video Data Privacy Suit

    A Kansas federal judge has tossed a proposed class action accusing AMC Entertainment Holdings Inc. of unlawfully sharing website visitors' data with Facebook, agreeing with the Ninth Circuit and several district courts that have found that movie theaters aren't covered by the Video Privacy Protection Act. 

  • July 30, 2025

    'Scattershot' Privacy Suit Over Gap Email Tracking Gets Nixed

    A California federal judge has tossed a proposed class action alleging that Gap Inc. invaded consumers' privacy by using third-party tracking technology in its marketing emails, criticizing the plaintiff's "continuously shapeshifting" theories of liability and saying he "expects more from counsel than the scattershot and vague assertions presented here."

  • July 30, 2025

    US Adds 40% Tariff On Brazil, Sanctions Top Court Justice

    President Donald Trump imposed a 40% tariff on Brazil on Wednesday, alleging in an executive order that the country's Supreme Court is "politically persecuting" former President Jair Bolsonaro, while the U.S. Treasury Department sanctioned one of the court's justices.

  • July 30, 2025

    11th Circ. Considers If TCPA's Fax Provisions Are 'Procedural'

    A doctor who sued two medical providers for allegedly sending more than 14,000 unsolicited fax advertisements in 2022 urged the Eleventh Circuit to overturn a district court's denial of class certification, arguing the lower court wrongly found users of online fax services lack standing to sue under the Telephone Consumer Protection Act. 

  • July 30, 2025

    Gov't Contracting Policies To Watch In The 2nd Half Of 2025

    A planned overhaul of the Federal Acquisition Regulation and the implementation of a fee-shifting provision for unsuccessful U.S. Government Accountability Office bid protests headline a slate of policy initiatives for government contractors to watch for during the second half of this year.

Expert Analysis

  • Now Is The Time To Prep For SEC's New Data Breach Regs

    Author Photo

    Recent remarks from the U.S. Securities and Exchange Commission’s acting director of the Division of Examinations suggest that the commission will support exams for compliance with its new data breach detection and reporting regulations, and a looming deadline means investment advisers and broker-dealers must act now to update their processes, say attorneys at McGuireWoods.

  • How Banks Can Harness New Customer ID Rule's Flexibility

    Author Photo

    Banking regulators' update to the customer identification process, allowing banks to collect some information from third parties rather than directly from customers, helps modernize anti-money laundering compliance and carries advantages for financial institutions that embrace the new approach, say attorneys at Bradley Arant.

  • Series

    Playing Soccer Makes Me A Better Lawyer

    Author Photo

    Soccer has become a key contributor to how I approach my work, and the lessons I’ve learned on the pitch about leadership, adaptability, resilience and communication make me better at what I do every day in my legal career, says Whitney O’Byrne at MoFo.

  • How Trump Cybersecurity EO Narrows Biden-Era Standards

    Author Photo

    President Donald Trump recently signed Executive Order No. 14306, which significantly narrows the scope and ambition of a Biden executive order focused on raising federal cybersecurity standards among federal vendors, say attorneys at Jenner & Block.

  • Opinion

    The SEC Should Embrace Tokenized Equity, Not Strangle It

    Author Photo

    The U.S. Securities and Exchange Commission should grant no-action relief to firms ready to pilot tokenized equity trading, not delay innovation by heeding protectionist industry arguments, says J.W. Verret at George Mason University.

  • And Now A Word From The Panel: Back In Action

    Author Photo

    A lack of new petitions at the May hearing session of the Judicial Panel on Multidistrict Litigation caught many observers' attention — but a rapid uptick in petitions scheduled to be heard at this week's session illustrates how panel activity always ebbs and flows, says Alan Rothman at Sidley.

  • Compliance Changes On Deck For Banks Under Texas AI Law

    Author Photo

    Financial services companies, including banks and fintechs, should evaluate their artificial intelligence usage to prepare for Texas' newly passed law regulating AI governance, noting that the enforcement provisions provide for an affirmative defense to liability, say attorneys at Mitchell Sandler.

  • Series

    Law School's Missed Lessons: Learning From Failure

    Author Photo

    While law school often focuses on the importance of precision, correctness and perfection, mistakes are inevitable in real-world practice — but failure is not the opposite of progress, and real talent comes from the ability to recover, rethink and reshape, says Brooke Pauley at Tucker Ellis.

  • 23andMe Fine Signals ICO's New GDPR Enforcement Focus

    Author Photo

    Many of the cybersecurity failures identified by the Information Commissioner’s Office in its investigation of 23andMe, recently resulting in a £2.3 million fine, were basic lapses, but the ICO's focus on several new U.K. General Data Protection Regulation considerations will likely carry into the future, say lawyers at Womble Bond.

  • Midyear Rewind: How Courts Are Reshaping VPPA Standards

    Author Photo

    The first half of 2025 saw a series of cases interpreting the Video Privacy Protection Act as applied to website tracking technologies, including three appellate rulings deepening circuit splits on what qualifies as personally identifiable information and who qualifies as a consumer under the statute, say attorneys at Perkins Coie.

  • How The Healthline Privacy Settlement Redefines Ad Tech Use

    Author Photo

    The Healthline settlement is the first time California has drawn a clear line in the sand around how website tracking must function in practice, so if your site uses tracking technologies, especially around sensitive content like health or finance, regulators are inspecting your website's back end, not just its banner, say attorneys at Baker Donelson.

  • Series

    Adapting To Private Practice: From ATF Director To BigLaw

    Author Photo

    As a two-time boomerang partner, returning to BigLaw after stints as a U.S. attorney and the director of the Bureau of Alcohol, Tobacco, Firearms and Explosives, people ask me how I know when to move on, but there’s no single answer — just clearly set your priorities, says Steven Dettelbach at BakerHostetler.

  • New DOJ Penalty Policy Could Spell Trouble For Cos.

    Author Photo

    In light of the U.S. Department of Justice’s recently published guidance making victim relief a core condition of coordinated resolution crediting, companies facing parallel investigations must carefully calibrate their negotiation strategies to minimize the risk of duplicative penalties, say attorneys at Debevoise.

  • 5 Consumer Protection Compliance Issues In NY State Budget

    Author Photo

    Companies that engage with New York consumers should promptly familiarize themselves with new state budget provisions that require finance and retail companies to make certain business practices more transparent and easier for customers to execute, say attorneys at Mintz.

  • Balancing The Promises And Perils Of Tokenizing Securities

    Author Photo

    Tokenizing listed securities offers the promise of greater efficiency, accessibility and innovation, but a recent U.S. Securities and Exchange Commission statement makes clear that the federal securities laws continue to apply to tokenized securities, so financial institutions and technology developers must work together to create clear rules, say attorneys at Orrick.

Want to publish in Law360?


Submit an idea

Have a news tip?


Contact us here