Expert Analysis

• Steps To Reduce CIPA Litigation Risks For Companies

  

  As class action claims brought under the California Invasion of Privacy Act continue to advance new theories under an old law to target companies for commonplace website and app activities, there are steps that organizations can take to reduce exposure and strengthen their defenses against such lawsuits, say attorneys at Hintze Law.

• Banks Should Continue To Prep For CFPB Data Rule Rollout

  

  Consumer Financial Protection Bureau-supervised banks should not expect industry pressure to delay the rollout of proposed Section 1033 open banking rules, which regulate how consumer financial information flows between financial institutions, and prepare their required data access portals and compliance procedures now, say attorneys at Troutman Pepper.

• Tips For Orgs Facing AI Data Privacy Compliance Challenges

  

  Regulators around the world are actively seeking to enforce data privacy and consumer protection laws against companies providing artificial intelligence-related services, raising complex compliance questions in areas like transparency, data minimization, lawfulness of processing, data subject rights and higher risk activities, say attorneys at Hogan Lovells.

• BIPA's Statutory Exemptions Post-Healthcare Ruling

  

  The Illinois Supreme Court's November opinion in Mosby v. Ingalls Memorial Hospital, which held that the Biometric Information Privacy Act's healthcare exemption also applies when information is collected from healthcare workers, is a major win for healthcare defendants that resolves an important question of statutory interpretation, say attorneys at Quinn Emanuel.

• Enforcement Risk Amid Increased Consumer Data Use

  

  While no state has introduced a private right of action for noncompliance with a comprehensive consumer privacy law — except for the California Consumer Privacy Act's data breach provision — organizations and retailers face risk from enforcement actions by state attorneys general and privacy regulators, say attorneys at Dentons.

• Business Litigators Have A Source Of Untapped Fulfillment

  

  As increasing numbers of attorneys struggle with stress and mental health issues, business litigators can find protection against burnout by remembering their important role in society — because fulfillment in one’s work isn’t just reserved for public interest lawyers, say Bennett Rawicki and Peter Bigelow at Hilgers Graben.

• Opinion

  The Problems In Calif. Draft Behavioral Ad Privacy Regs

  

  The California Privacy Protection Agency has an opportunity with its automated decision-making technology and profiling rulemaking to harmonize California's regulation of data-driven advertising, but this will be a failure unless several things are changed in its proposed treatment of behavioral advertising, say Alan Friel and Kyle Fath at Squire Patton.

• Series

  Skiing Makes Me A Better Lawyer

  

  A lifetime of skiing has helped me develop important professional skills, and taught me that embracing challenges with a spirit of adventure can allow lawyers to push boundaries, expand their capabilities and ultimately excel in their careers, says Andrea Przybysz at Tucker Ellis.

• How Breach Reporting Is Changing For Financial Institutions

  

  In May, the Federal Trade Commission's amended Safeguards Rule will extend the data protections that apply to information held by banks to information held by nonbanking financial institutions — and sweep even more broadly in some critical aspects, say Evan Yahng and Kurt Hunt at Dinsmore.

• High Court Social Media Speech Ruling Could Implicate AI

  

  In Moody v. NetChoice and NetChoice v. Paxton, the U.S. Supreme Court is considering whether certain state laws can restrict content moderation by social media platforms, but the eventual decision could also provide insight into whether the first amendment protects artificial intelligence speech, say Joseph Meadows and Quyen Dang at GRSM50.

• Assessing Chinese Cross-Border Data Transfers

  

  Jet Deng and Ken Dai at Dacheng unpack the regulatory framework for cross-border data transfers in China, detailing the major systems at play, last year's policy adjustments, and an outlook and practice tips for businesses.

• Think Like A Lawyer: Forget Everything You Know About IRAC

  

  The mode of legal reasoning most students learn in law school, often called “Issue, Rule, Application, Conclusion,” or IRAC, erroneously frames analysis as a separate, discrete step, resulting in disorganized briefs and untold obfuscation — but the fix is pretty simple, says Luke Andrews at Poole Huffman.

• The Corporate Transparency Act Isn't Dead Yet

  

  After an Alabama federal court's ruling last week rendering the Corporate Transparency Act unconstitutional, changes to the law may ultimately be required, but ongoing compliance is still the best course of action for most, says George Singer at Holland & Hart.

• The Pros And Cons Of Protecting AI As Trade Secrets

  

  Despite regulatory trends toward greater transparency of artificial intelligence models, federal policy acknowledges, and perhaps endorses, trade secret protection for AI information, but there are still hurdles in keeping AI information a secret, say Jennifer Maisel and Andrew Stewart at Rothwell Figg.

• Conn. Data Privacy Enforcement Takeaways For Cos.

  

  In light of the Connecticut attorney general's recently released report on its enforcement of the Connecticut Data Privacy Act, which focuses on companies' privacy policies, protections of sensitive data and more, businesses can expect increased enforcement scrutiny — especially in areas that are the subject of consumer complaints, say Paul Pittman and Abdul Hafiz at White & Case.