Cybersecurity & Privacy

  • September 10, 2025

    OpenAI Can't Keep For-Profit Shift Docs From Musk

    A California federal magistrate judge has said that OpenAI must produce key planning documents in Elon Musk's lawsuit challenging its attempted shift into a for-profit business, rejecting arguments that the information is protected because it could influence future takeover bids by the billionaire or future investments by Microsoft.

  • September 10, 2025

    $5.9M Fidelity National Data Breach Settlement Gets Final OK

    A Florida federal court officially signed off on a $5.9 million settlement of a proposed class action against title insurer Fidelity National Financial over a November 2023 data breach that allegedly impacted roughly 1.3 million individuals, noting the court was notified of a settlement just seven months after the litigation commenced. 

  • September 10, 2025

    3rd Circ. Seeks Standing Specifics In Website Tracking MDL

    The Third Circuit on Wednesday challenged both retailers and consumers over so-called session replay software capturing online shoppers' data, wanting to know if a proposed class could be more specific about what "sensitive" information was actually shared by Bass Pro Shops and Cabela's and if their stores had any limits on connecting private searches with specific people.

  • September 10, 2025

    AT&T Gave Prosecutor's Data To Trump-Tied Attys, Suit Says

    Nathan Wade, the special prosecutor who exited the Georgia election interference case against President Donald Trump after his romantic relationship with Fulton County District Attorney Fani Willis was revealed, has accused AT&T of unlawfully releasing "breathtaking" amounts of his personal cellphone data to defendants in the case.

  • September 10, 2025

    Kirkland Adds Fintech Regulatory Partner From McDermott

    Kirkland & Ellis LLP has enhanced its fintech regulatory compliance capabilities in New York with the addition of an experienced corporate partner who joins the firm from McDermott Will & Schulte.

  • September 10, 2025

    Baker McKenzie Adds New National Security Group Co-Head

    Baker McKenzie welcomed a former Federal Bureau of Investigation senior counselor to its Washington, D.C., office who joins as a partner and co-chair of its national security practice, the firm announced Wednesday.

  • September 09, 2025

    Block Beats Investor Action Over 2021 Customer Data Breach

    A Manhattan federal judge Tuesday knocked out consolidated litigation alleging Block's stock price plummeted after the financial technology company dilly-dallied disclosing a 2021 data breach stemming from a former employee's alleged theft of customer information, saying the complaint doesn't allege Block made misleading statements or knew it was misleading investors.

  • September 09, 2025

    DOD's Cybersecurity Rule May Help Fend Off FCA Claims

    The U.S. Department of Defense's requirement for certain contractors to have a third-party assessor review their cybersecurity compliance, implemented in a final rule Tuesday, could help contractors protect themselves from False Claims Act enforcement.

  • September 09, 2025

    State Privacy Enforcers Set Sights On Data Use Opt-Outs

    California's data privacy agency and attorney general are teaming up with regulators in Colorado and Connecticut on an investigative sweep focused on whether companies are honoring consumers' requests to stop the sale and sharing of their personal information to third parties, the enforcers announced Tuesday. 

  • September 09, 2025

    FCC OKs Waivers For Smart House Locks

    The Federal Communications Commission agreed Tuesday to make some exceptions to its rules for ultra-wideband devices — specifically a requirement that they be handheld — so a pair of companies can ensure their smart locks have the agency's seal of approval.

  • September 09, 2025

    Medical Marijuana Cyberbreach Cases Eye Consolidation

    Consumers who say their personal information was exposed in a data breach caused by the failures of an Ohio company that helps people secure medical marijuana cards have asked a federal court to combine the growing number of proposed class actions.

  • September 09, 2025

    7th Circ. Questions Decertifying Amazon Makeup Try-On Class

    Two judges on a Seventh Circuit panel seemed skeptical Tuesday that individual location questions or the risk of a substantial damages award require reversing a district court decision certifying a 160,000-member class in a biometric privacy suit targeting a virtual makeup try-on feature in Amazon's app.

  • September 09, 2025

    IRS Ordered To Notify Court Of ICE Info-Sharing Requests

    A D.C. federal judge in a series of orders Friday and Tuesday said the IRS must notify the court within 24 hours of receiving a request from immigration authorities for taxpayer information and hand over administrative records while the court considers a request to stop the intergovernmental data sharing.

  • September 09, 2025

    TransUnion Faces Suit Over Data Breach Affecting 4.4M

    TransUnion LLC is under fire in Illinois federal court after a woman filed a proposed class action Monday against the credit bureau claiming approximately 4.4 million customers had their personal information stolen in a cyberattack against the company earlier this year.

  • September 09, 2025

    DC Says Crypto ATM Operator Profits Off Senior Scams

    Athena Bitcoin, one of the country's largest operators of so-called bitcoin automated teller machines, has been sued by the D.C. attorney general for allegedly charging undisclosed fees on deposits it knew were often the result of scams, for failing to implement adequate anti-fraud measures, and for refusing to refund scam victims.

  • September 09, 2025

    Gilgo Beach DNA Evidence Ruling May Propel New Methods

    A recent ruling from the New York judge overseeing the Gilgo Beach serial killer case finding that the newer DNA testing method known as whole genome sequencing clears rigorous admissibility standards is a laudable decision that could help solve cold cases, according to proponents of the technology.

  • September 09, 2025

    Particle's Antitrust Battle With Epic: 3 Things To Know

    Epic Systems Corp. must face allegations it violated federal law by attempting to monopolize a segment of the electronic health records market to the exclusion of competitor Particle Health Inc. Here's what you need to know about the case.

  • September 09, 2025

    9th Circ. Declines To Block Most Of Social Media Addiction Law

    The Ninth Circuit on Tuesday largely rejected a tech trade group's effort to block California from enforcing a law barring online platforms from using algorithms to deliver addictive feeds to children, saying a requirement to hide "likes" and share counts must be enjoined but challenges to other provisions are either unripe or fact-intensive.

  • September 09, 2025

    FinCEN Chief Signals Slimmer Bank Reporting On The Way

    A top U.S. financial crime watchdog told lawmakers Tuesday that federal officials could soon move to narrow transaction reporting requirements for financial institutions as part of a broader effort to ease anti-money laundering compliance burdens for industry.

  • September 09, 2025

    Coinbase Vendor Called 'Major' Cog In 'Insider Bribery' MDL

    A Manhattan federal judge said Tuesday that a Texas-based Coinbase vendor called TaskUs will be a "major participant" in multidistrict litigation centralized in New York over allegations that thousands of Coinbase customers were victimized in a bribery-fueled data compromise.

  • September 09, 2025

    VC Firm's Top Atty Rejoins Skadden To Lead Tech Policy Team

    The former chief legal and policy officer at California-based Sequoia Capital is returning to Skadden Arps Slate Meagher & Flom LLP to lead the firm's tech policy practice, advising clients on related regulation and enforcement matters, the firm announced Tuesday.

  • September 09, 2025

    Pentagon Finalizes Cybersecurity Rule For Contractors

    The U.S. Department of Defense released its long-anticipated final rule on Tuesday detailing how the agency will incorporate its Cybersecurity Maturity Model Certification program, aimed at boosting cybersecurity standards across the defense industrial base, into defense contracts.

  • September 08, 2025

    Claims Against UMich Trimmed In Ex-Coach Hacking Suit

    Former student-athletes on Monday agreed to drop the majority of their claims against the University of Michigan in sprawling federal litigation alleging its former co-offensive coordinator hacked personal information of thousands of students across the country as part of an agreement to pursue the claims in state court. 

  • September 08, 2025

    Burger King Can't Force Arbitration Of Website Tracking Row

    A California federal judge has refused to send to arbitration a proposed class action accusing Burger King's parent company of illegally tracking website visitors who had opted out of the practice, finding that the plaintiff had neither affirmatively agreed to arbitrate nor waived his right to challenge the existence of such a pact.

  • September 08, 2025

    9th Circ. Affirms Toss Of Illuminate Education Data Breach Suit

    A Ninth Circuit panel affirmed a lower court's dismissal of a proposed class action Monday filed against Illuminate Education Inc. by parents of children whose personal information may have been exposed in a massive data breach, holding the plaintiffs did not demonstrate that any harms were suffered. 

Expert Analysis

  • Cybersecurity Risks Can Lurk In Gov't Contractor Acquisitions

    Author Photo

    The Justice Department’s recent False Claims Act enforcement activity against Raytheon and Nightwing-related defense contractors demonstrates the importance of identifying and mitigating potential cybersecurity compliance risks when acquiring a company that contracts with the federal government, say attorneys at Foley & Lardner.

  • Associates Can Earn Credibility By Investing In Relationships

    Author Photo

    As the class of 2025 prepares to join law firms this fall, new associates must adapt to office dynamics and establish credible reputations — which require quiet, consistent relationship-building skills as much as legal acumen, says Kyle Forges at Bast Amron.

  • New Colo. Teen Privacy Rules Signal National Regulatory Shift

    Author Photo

    Recently released proposed rule amendments to the Colorado Privacy Act that would create some of the most robust protections for minors' online data in the U.S. reflect an ongoing trend of states taking steps to extend privacy protection for their residents, complicating the compliance burden for companies, say attorneys at Morgan Lewis.

  • A Look At New Calif. Cybersecurity, Risk Assessment Rules

    Author Photo

    The California Privacy Protection Agency Board recently finalized regulations related to automated decision-making technology, cybersecurity audits and risk assessments that establish additional requirements on businesses operating in California, and although these new rules are less onerous than some of the draft rules, compliance may still require substantial planning and updates, say attorneys at Morgan Lewis.

  • Lessons From 7th Circ.'s Deleted Chat Sanctions Ruling

    Author Photo

    The Seventh Circuit’s recent decision in Pable v. Chicago Transit Authority, affirming the dismissal of an ex-employee’s retaliation claims, highlights the importance of properly handling the preservation of ephemeral messages and clarifies key sanctions issues, says Philip Favro at Favro Law.

  • Divest Order Shows How Security Fears Extend CFIUS Scope

    Author Photo

    A recent White House order forcing a Chinese company to divest its 2020 acquisition of a U.S. audiovisual supplier demonstrates the Committee on Foreign Investment in the United States’ growing power to sink foreign transactions over national security concerns — and the enormous risks to U.S. companies from such reviews, say attorneys at Bass Berry.

  • Series

    Quilting Makes Me A Better Lawyer

    Author Photo

    Turning intricate patterns of fabric and thread into quilts has taught me that craftsmanship, creative problem-solving and dedication to incremental progress are essential to creating something lasting that will help another person — just like in law, says Veronica McMillan at Kramon & Graham.

  • Lessons Learned 3 Years After First CCPA Enforcement Action

    Author Photo

    Three years after the first public enforcement action under the California Consumer Privacy Act, Attorney General Rob Bonta has pursued a steady stream of enforcement actions across industries, providing a clearer picture of how the law is being interpreted and enforced, says Tatum Andres at Kilpatrick.

  • 2 Appellate Rulings Offer Clickwrap Enforcement Road Map

    Author Photo

    Two recent decisions from the Fourth and Eleventh Circuits in cases involving Experian signal that federal appellate courts are recognizing clickwrap agreements' power in spite of their simplicity, and offer practical advice on how companies can sufficiently demonstrate notice and assent when attempting to enforce contractual terms, says Brian Willett at Saul Ewing.

  • What 2 Profs Noticed As Transactional Law Students Used AI

    Author Photo

    After a semester using generative artificial intelligence tools with students in an entrepreneurship law clinic, we came away with numerous observations about the opportunities and challenges such tools present to new transactional lawyers, say professors at Cornell Law School.

  • Crypto Custody Guidelines Buoy Both Banks And Funds

    Author Photo

    A statement released last month by banking regulators — highlighting risks that the agencies expect banks holding crypto-assets to mitigate — may encourage more traditional institutions to offer crypto-asset safekeeping and thereby offer asset managers more options for qualified custodians to custody crypto-assets for their clients, say attorneys at Dechert.

  • Top Takeaways From Trump's AI Action Plan

    Author Photo

    President Donald Trump's AI Action Plan represents some notable evolution in U.S. policy, including affirmation of the administration's trend toward prioritizing artificial intelligence innovation over guardrails and toward supporting greater U.S. private sector reach overseas, say attorneys at WilmerHale.

  • Reel Justice: 'Eddington' Spotlights Social Media Evidence

    Author Photo

    In the neo-Western black comedy “Eddington” released last month, social media is a character unto itself, highlighting how the boundaries between digital and real-world conduct can become blurred, thereby posing evidentiary challenges in criminal prosecutions, says Veronica Finkelstein at Wilmington University School of Law.

  • Rebuttal

    BigLaw Settlements Should Not Spur Ethics Deregulation

    Author Photo

    A recent Law360 op-ed argued that loosening law firm funding restrictions would make BigLaw firms less inclined to settle with the Trump administration, but deregulating legal financing ethics may well prove to be not merely ineffective, but counterproductive, says Laurel Kilgour at the American Economic Liberties Project.

  • 9th Circ. Leaves Scope Of CIPA Applicability Unclear

    Author Photo

    Three recent Ninth Circuit decisions declined to directly address whether all of the California Invasion of Privacy Act's provisions actually apply to internet activity, and given this uncertainty, companies should heed five recommendations when seeking to minimize CIPA litigation risk, say attorneys at Skadden.

Want to publish in Law360?


Submit an idea

Have a news tip?


Contact us here
Can't find the article you're looking for? Click here to search the Cybersecurity & Privacy archive.