Cybersecurity & Privacy

  • September 11, 2025

    Disney Flouts Privacy Law By Exploiting User Data, Suit Says

    The Walt Disney Co. is flouting privacy laws by illegally gathering and sharing with Google personal information of individuals who visit its website for data monetization and advertising purposes, without their knowledge or consent, according to a proposed class action filed in California federal court.

  • September 11, 2025

    Google, Apple Fight Proposed UK App Ranking, Pay Mandates

    Apple and Google both pushed back on proposals by United Kingdom antitrust authorities to stop the companies from boosting their own apps and using commission-based payment systems but took slightly different approaches, according to separate responses made public Thursday.

  • September 11, 2025

    Roblox, Discord Again Accused Of Ignoring Teen Exploitation

    The mother of a 14-year-old girl allegedly groomed by a predator on Roblox and Discord recently joined the slew of parents suing the online platforms for failing to safeguard children from being sexually exploited, saying in a suit filed in California federal court that she wrongly believed Roblox in particular was safe for children.

  • September 11, 2025

    23 States Back High Court Stay Of FTC Dem's Reinstatement

    Florida and 22 other states have urged the U.S. Supreme Court to grant the Trump administration's request to block a Democratic member of the Federal Trade Commission from serving on the commission while she challenges her firing.

  • September 11, 2025

    Yale New Haven Offers $18M To Settle Data Breach Claims

    Yale New Haven Health Services Corp. has offered to create an $18 million global fund to settle what were once multiple lawsuits surrounding a March 8 data breach that affected more than 5 million individuals, according to a motion seeking a Connecticut federal judge's preliminary approval.

  • September 11, 2025

    2nd Circ. Says Kik Scans Don't Violate Fourth Amendment

    Messaging applications like Kik are allowed to search users' conversations as part of due diligence into suspected cases of child sexual abuse material without violating users' Fourth Amendment rights, the Second Circuit has found.

  • September 11, 2025

    Vet's Wells Fargo Credit Ding Didn't Break Law, Jury Finds

    Wells Fargo didn't violate the federal Fair Credit Reporting Act by failing to recognize fraud affecting the account of a customer who described himself as a veteran of the U.S. military's special forces, a federal jury in Washington state has concluded.

  • September 10, 2025

    FTC Urged To Probe Microsoft Over Ascension Data Breach

    U.S. Sen. Ron Wyden, D-Ore., is calling on the Federal Trade Commission to open an investigation into Microsoft's "gross cybersecurity negligence" that has allegedly contributed to cyberattacks against critical infrastructure providers, including a 2024 ransomware hack that targeted hospital system Ascension.

  • September 10, 2025

    2nd Circ. OKs Verizon's $47M FCC Fine, Splitting With 5th Circ.

    The Second Circuit upheld Wednesday the Federal Communications Commission's $46.9 million fine against Verizon Communications Inc. for misuse of device-location data, rejecting Verizon's arguments that the data falls outside federal privacy protections and that such a penalty without a jury trial was unconstitutional, creating a split with the Fifth Circuit.

  • September 10, 2025

    SEC Says Adviser Startup Broke Investor Data Privacy Rule

    An investment adviser representative and his firm were hit with a suit from the U.S. Securities and Exchange Commission on Wednesday over claims that the adviser, among other things, emailed himself confidential client information from his former employer as a step in creating his own investment firm.

  • September 10, 2025

    Teen's Estate Says Grindr Death Suit Can't Be Arbitrated

    The estate of a teenager who was killed by a 35-year-old man she matched with on Grindr LLC's dating platform is urging a Florida federal court not to send the case to arbitration or Los Angeles, saying federal law blocks arbitration, and Florida law require that the suit be heard in the state where she was killed.

  • September 10, 2025

    OpenAI Can't Keep For-Profit Shift Docs From Musk

    A California federal magistrate judge has said that OpenAI must produce key planning documents in Elon Musk's lawsuit challenging its attempted shift into a for-profit business, rejecting arguments that the information is protected because it could influence future takeover bids by the billionaire or future investments by Microsoft.

  • September 10, 2025

    $5.9M Fidelity National Data Breach Settlement Gets Final OK

    A Florida federal court officially signed off on a $5.9 million settlement of a proposed class action against title insurer Fidelity National Financial over a November 2023 data breach that allegedly impacted roughly 1.3 million individuals, noting the court was notified of a settlement just seven months after the litigation commenced. 

  • September 10, 2025

    3rd Circ. Seeks Standing Specifics In Website Tracking MDL

    The Third Circuit on Wednesday challenged both retailers and consumers over so-called session replay software capturing online shoppers' data, wanting to know if a proposed class could be more specific about what "sensitive" information was actually shared by Bass Pro Shops and Cabela's and if their stores had any limits on connecting private searches with specific people.

  • September 10, 2025

    AT&T Gave Prosecutor's Data To Trump-Tied Attys, Suit Says

    Nathan Wade, the special prosecutor who exited the Georgia election interference case against President Donald Trump after his romantic relationship with Fulton County District Attorney Fani Willis was revealed, has accused AT&T of unlawfully releasing "breathtaking" amounts of his personal cellphone data to defendants in the case.

  • September 10, 2025

    Kirkland Adds Fintech Regulatory Partner From McDermott

    Kirkland & Ellis LLP has enhanced its fintech regulatory compliance capabilities in New York with the addition of an experienced corporate partner who joins the firm from McDermott Will & Schulte.

  • September 10, 2025

    Baker McKenzie Adds New National Security Group Co-Head

    Baker McKenzie welcomed a former Federal Bureau of Investigation senior counselor to its Washington, D.C., office who joins as a partner and co-chair of its national security practice, the firm announced Wednesday.

  • September 09, 2025

    Block Beats Investor Action Over 2021 Customer Data Breach

    A Manhattan federal judge Tuesday knocked out consolidated litigation alleging Block's stock price plummeted after the financial technology company dilly-dallied disclosing a 2021 data breach stemming from a former employee's alleged theft of customer information, saying the complaint doesn't allege Block made misleading statements or knew it was misleading investors.

  • September 09, 2025

    DOD's Cybersecurity Rule May Help Fend Off FCA Claims

    The U.S. Department of Defense's requirement for certain contractors to have a third-party assessor review their cybersecurity compliance, implemented in a final rule Tuesday, could help contractors protect themselves from False Claims Act enforcement.

  • September 09, 2025

    State Privacy Enforcers Set Sights On Data Use Opt-Outs

    California's data privacy agency and attorney general are teaming up with regulators in Colorado and Connecticut on an investigative sweep focused on whether companies are honoring consumers' requests to stop the sale and sharing of their personal information to third parties, the enforcers announced Tuesday. 

  • September 09, 2025

    FCC OKs Waivers For Smart House Locks

    The Federal Communications Commission agreed Tuesday to make some exceptions to its rules for ultra-wideband devices — specifically a requirement that they be handheld — so a pair of companies can ensure their smart locks have the agency's seal of approval.

  • September 09, 2025

    Medical Marijuana Cyberbreach Cases Eye Consolidation

    Consumers who say their personal information was exposed in a data breach caused by the failures of an Ohio company that helps people secure medical marijuana cards have asked a federal court to combine the growing number of proposed class actions.

  • September 09, 2025

    7th Circ. Questions Decertifying Amazon Makeup Try-On Class

    Two judges on a Seventh Circuit panel seemed skeptical Tuesday that individual location questions or the risk of a substantial damages award require reversing a district court decision certifying a 160,000-member class in a biometric privacy suit targeting a virtual makeup try-on feature in Amazon's app.

  • September 09, 2025

    IRS Ordered To Notify Court Of ICE Info-Sharing Requests

    A D.C. federal judge in a series of orders Friday and Tuesday said the IRS must notify the court within 24 hours of receiving a request from immigration authorities for taxpayer information and hand over administrative records while the court considers a request to stop the intergovernmental data sharing.

  • September 09, 2025

    TransUnion Faces Suit Over Data Breach Affecting 4.4M

    TransUnion LLC is under fire in Illinois federal court after a woman filed a proposed class action Monday against the credit bureau claiming approximately 4.4 million customers had their personal information stolen in a cyberattack against the company earlier this year.

Expert Analysis

  • How Cos. In China Can Tailor Compliance Amid FCPA Shifts

    Author Photo

    The U.S. Department of Justice’s recently updated Foreign Corrupt Practices Act enforcement guidelines create a fluid business environment for companies operating in China that will require a customized compliance approach to navigate both countries’ corporate and legal systems, say attorneys at Dickinson Wright.

  • Open Banking Is On Ice As CFPB Seeks To Toss Its Own Rule

    Author Photo

    Even as the Consumer Financial Protection Bureau's efforts to toss its open banking rule play out in Kentucky federal court, it remains statutorily required to effectuate consumer access to data, raising questions about how it would replace the previously finalized standard, say attorneys at Cooley.

  • Series

    Playing Baseball Makes Me A Better Lawyer

    Author Photo

    Playing baseball in college, and now Wiffle ball in a local league, has taught me that teamwork, mental endurance and emotional intelligence are not only important to success in the sport, but also to success as a trial attorney, says Kevan Dorsey at Swift Currie.

  • How US Cos. Should Prep For Brazil's Int'l Data Transfer Rules

    Author Photo

    Brazil's National Data Protection Authority's new rules concerning the processing and storing of Brazilians' personal data carry significant reputational risks for the e-commerce, financial services, education and health sectors, so U.S. companies with business in Brazil should prepare ahead of the Aug. 23 compliance date, says Juliane Chaves Ferreira at Guimarães & Vieira de Mello.

  • A Deep Dive Into 14 Nixed Gensler-Era SEC Rule Proposals

    Author Photo

    The U.S. Securities and Exchange Commission last month formally withdrew 14 notices of proposed rulemaking, including several significant and widely criticized proposals that had been issued under former Chair Gary Gensler's leadership, signaling a clear and definitive shift away from the previous administration, say attorneys at Dechert.

  • Series

    Law School's Missed Lessons: Skillful Persuasion

    Author Photo

    In many ways, law school teaches us how to argue, but when the ultimate goal is to get your client what they want, being persuasive through preparation and humility is the more likely key to success, says Michael Friedland at Friedland Cianfrani.

  • Breaking Down Novel Va. Social Media Law For Minors

    Author Photo

    While a Virginia bill passed in May is notable for setting a one-hour daily limit on minors' use of social media, other provisions create compliance burdens for social media operators and app store providers, and increase privacy and security risks associated with the collection of sensitive information to prove identity, says Jenna Rode at Hunton.

  • Litigation Inspiration: How To Respond After A Loss

    Author Photo

    Every litigator loses a case now and then, and the sting of that loss can become a medicine that strengthens or a poison that corrodes, depending on how the attorney responds, says Bennett Rawicki at Hilgers Graben.

  • DOJ Crypto Enforcement Is Shifting To Target Willfulness

    Author Photo

    Three pending criminal prosecutions could be an indication of how the U.S. Department of Justice's recent digital assets memo is shaping enforcement of the area, and show a growing focus on executives who knowingly allow their platforms to be used for criminal conduct involving sanctions offenses, say attorneys at Gibson Dunn.

  • How NJ's Proposed Privacy Rules Could Reshape AI Data Use

    Author Photo

    Although not revolutionary, New Jersey's proposed privacy rules would create obligations around the management and processing of consumer personal data that will require careful planning before they can be successfully implemented, say attorneys at Norton Rose.

  • The Metamorphosis Of The Major Questions Doctrine

    Author Photo

    The so-called major questions doctrine arose as a counterweight to Chevron deference over the past few decades, but invocations of the doctrine have persisted in the year since Chevron was overturned, suggesting it still has a role to play in reining in agency overreach, say attorneys at Crowell & Moring.

  • Business Takeaways Following CCPA Enforcement Actions

    Author Photo

    Advisories and recent enforcement activity by the California Privacy Protection Agency against Honda and Todd Snyder underscore the agency's enforcement interest in the intersection of data minimization and consumer rights, and could make it more challenging for a business to provide a streamlined consumer rights process, say attorneys at Covington.

  • EU Space Act Could Stifle US Commercial Operators

    Author Photo

    The EU Space Act, proposed last month, has the potential to raise global standards for safety and sustainability in space, but the U.S. and EU need to harmonize their regulatory approaches to avoid imposing regulatory burdens that undermine commercial innovation and agility, say Jessica Noble and Adriane Mandakunis at Aegis Space Law.

  • Unpacking Enforcement Challenges Of DOJ's Bulk Data Rule

    Author Photo

    Now fully effective, the U.S. Department of Justice's new data security program represents the U.S.' first data localization requirement ripe for enforcement, but its implementation faces substantial practical challenges that may hinder the DOJ's ability for wide-ranging or swift action, say attorneys at Cleary.

  • Nuclear Stakeholders Must Prepare For Cyber Threats

    Author Photo

    As the White House signals its support for a revival of nuclear power to supply the power needs of data centers and the artificial intelligence industry, investors and operators must keep in mind that safeguarding nuclear infrastructure from evolving cyber threats will be essential, say attorneys at A&O Shearman.

Want to publish in Law360?


Submit an idea

Have a news tip?


Contact us here
Can't find the article you're looking for? Click here to search the Cybersecurity & Privacy archive.