Cybersecurity & Privacy

  • March 24, 2026

    Meta Tackles Borrowed Underwear Analogy In Privacy Suit

    A California federal judge mulling Meta's argument that its users' consent bars a proposed privacy class action pressed Meta's lawyers Tuesday on whether social expectations affect the bounds of that consent, observing that if she gave a friend permission to borrow her clothes, "I don't expect her to borrow my underwear."

  • March 24, 2026

    Baltimore Takes XAI To Court Over Grok's Sexual Deepfakes

    Baltimore on Tuesday became one of the first municipalities to sue Elon Musk's xAI over the Grok artificial intelligence platform's ability to transform ordinary photographs into nonconsensual sexualized deepfake images, including creating child sexual abuse material, saying it's exposing city residents to degrading content, harassment and psychological harm.

  • March 24, 2026

    BofA Wants Customer Suit Over Post-Jan. 6 Data Sharing Axed

    Bank of America has asked a Florida federal judge to toss a proposed class action accusing it of financial privacy violations tied to the aftermath of the Jan. 6, 2021, U.S. Capitol attack, arguing the U.S. Supreme Court has held that bank customers do not have ownership or expectations of privacy over their bank account records.

  • March 24, 2026

    FINRA CEO Highlights New Clearinghouse For Cyber Threats

    Robert Cook, CEO of the Financial Industry Regulatory Authority, said Tuesday that it will soon be rolling out a clearinghouse for firms to report cybersecurity threats and to promote information sharing across the industry.

  • March 24, 2026

    IT Co. Says Fed. Circ. Ruling Blesses 'Moving Target' Records

    An IT contractor said the Federal Circuit should reconsider a panel ruling upholding the U.S. Department of Commerce's authority to unilaterally take corrective action during litigation over a $1.5 billion procurement, warning it threatens to "devastate the bid protest process."

  • March 24, 2026

    Heritage Bank Client Alleges 'Unsecure' Servers Led To Breach

    A Heritage Bank customer claimed in a putative class action Tuesday that the Washington-based financial institution failed to properly guard users' personal data that was stolen in a March 1 cyberattack, alleging the company used substandard security practices and failed to update its systems on a timely basis.

  • March 24, 2026

    Wash. Mandates AI Content Flags, Suicide Safeguards

    Washington Gov. Bob Ferguson signed a pair of bills on Tuesday requiring large artificial intelligence companies to embed data that distinguishes deepfakes as AI-generated and forcing companion chatbot developers to take steps to protect minor users from suicide and self-harm.

  • March 24, 2026

    Snap Suit Tossed For State Enforcement Action Interference

    A Utah federal judge on Tuesday dismissed Snap Inc.'s suit against two state officials aiming to block a state enforcement action, finding that the court must abstain while that enforcement action is pending.

  • March 24, 2026

    Fiserv, Credit Union Settle Payment Data Security Lawsuit

    Fiserv Solutions LLC and Cencap Federal Credit Union have "tentatively settled" a Connecticut federal lawsuit accusing the payment processor and fintech provider of operating an online banking platform that contained security flaws.

  • March 24, 2026

    Meta Owes $375M In NM Trial Over Harm To Teens

    A New Mexico jury said Tuesday that Meta must pay $375 million over the state attorney general's bellwether claims that the social media giant hid the full scope of mental health harm its apps were causing to underage users.

  • March 24, 2026

    AGs Seek Federal Help To Tackle Chinese App Drug Trade

    North Carolina Attorney General Jeff Jackson announced Monday that he's leading a bipartisan group of state enforcers in asking the federal government to act on drug traffickers' co-opting of Chinese-owned messaging app WeChat and its sister app Weixin to propagate the illegal drug trade. 

  • March 23, 2026

    Meta Ends WhatsApp Security Head's Retaliation Suit For Now

    A California federal judge dismissed, for now, a retaliation claim by a former Meta employee who claimed he was fired after reporting cybersecurity shortfalls concerning WhatsApp, finding the plaintiff's complaints aren't protected under the Sarbanes-Oxley Act since his cybersecurity violation reports don't relate to internal accounting controls.

  • March 23, 2026

    Anthropic Says DOD Security Risk Label Is Unconstitutional

    Anthropic PBC has doubled down on its push for an order blocking the Trump administration from labeling it a supply chain risk to national security, telling a California federal court the executive branch was punishing "a major company for the sin of expressing its views on a matter of profound public significance."

  • March 23, 2026

    SEC Must Give Video Of Elon Musk Interview To Oscar Winner

    The U.S. Securities and Exchange Commission must release a video interview of Elon Musk from its civil fraud investigation of the billionaire to a film company led by Oscar-winner Alex Gibney, a D.C. federal judge ruled Monday, saying the SEC already has publicized the interview's contents through a transcript.

  • March 23, 2026

    Social Media Jurors Say They Are Deadlocked On A Defendant

    A California jury considering claims Meta and Google harm children's mental health through their social media platforms reported Monday that it is deadlocked as to one of the defendants, but it wasn't clear if the jury is stuck on the question of liability or on potential punitive damages.

  • March 23, 2026

    FCC Urges Justices To Reject Repeal Of Penalty Power

    The Federal Communications Commission has urged the U.S. Supreme Court to keep the agency's monetary penalty powers intact, saying the agency's current practice does not deny targets of fines their right to a jury trial and is not binding until a court orders payment.

  • March 23, 2026

    FCC Adds Foreign Routers To Nat'l Security Risk List

    The Federal Communications Commission on Monday added foreign-made routers to a list of consumer electronics gear that cannot be sold on the U.S. market without specific authorization.

  • March 23, 2026

    FINRA Fines Stash Capital For AML, Identity Theft Controls

    The Financial Industry Regulatory Authority fined digital investing platform operator Stash Capital $450,000 for allegedly failing to properly review applications and detect suspicious account activity during a period of sharp customer growth.

  • March 23, 2026

    Novartis Faces Class Suit Over Patient Health Info Disclosure

    Drugmaker Novartis collected patients' personal and health information through pharmaceutical marketing websites and transmitted it to third parties including Google using "surreptitious online tracking tools" without patients' consent, a proposed class action in New Jersey federal court alleges.

  • March 23, 2026

    Md. Judge Rules Written Consent Not Needed Under TCPA

    Echoing a recent Fifth Circuit ruling, a Maryland federal judge has held that written consent to receive telemarketing calls is not required under the Telephone Consumer Protection Act, reversing a decision to certify a class of consumers against a dental plan marketer.

  • March 23, 2026

    Pediatric Data Breach Class Action Can Stay In NC Biz Court

    A consolidated class action alleging a pediatric medical practice failed to protect minor patients' data from hackers can remain in the North Carolina Business Court, a judge ruled in finding the lawsuits were properly designated to the state's specialized superior court for complex business matters.

  • March 23, 2026

    New Wash. Law Cuts Antispam Penalties Amid Multiple Suits

    Statutory penalties for emails sent in violation of Washington state's Commercial Electronic Mail Act, which bars messages with false or misleading subject lines, will fall from $500 per email to $100 under a measure signed into law by Gov. Bob Ferguson on Monday.

  • March 23, 2026

    Duke Health's $3.7M Pixel Privacy Deal Gets Initial OK

    Hundreds of thousands of Duke University Health System Inc. patients are one step closer to securing a share of a $3.7 million settlement stemming from a health data tracking suit involving Meta's Pixel, after a North Carolina federal court granted preliminary approval of the class action settlement.

  • March 23, 2026

    Ex-White Sox Star Thomas Sues Team, Nike Over Jersey Sales

    Former Chicago White Sox player Frank Thomas has sued his ex-team, Nike and Fanatics in Illinois state court, claiming they unlawfully sold jerseys bearing his name and number without his consent and without compensating him in any way.

  • March 23, 2026

    AbbVie Escapes Ill. Genetic Privacy Lawsuit

    An Illinois federal judge on Friday granted AbbVie summary judgment in a lawsuit claiming it violated the state's genetic privacy law, saying there was "no genuine dispute" that AbbVie never conditioned the plaintiff's employment on whether he disclosed genetic information in the physical exam he was required to undergo before starting work.

Expert Analysis

  • Employer Strategies For Limiting Data Breach Litigation Risks

    Excerpt from Practical Guidance
    Author Photo

    Employers must invest in robust cybersecurity and incident response protocols to both prevent data breaches and position themselves favorably in potential litigation, as legal defenses will increasingly rely on demonstrating reasonable security measures, prompt breach notification and transparent response efforts, says Gerald Maatman at Duane Morris.

  • What We Know About DOJ's New FCA Enforcement Priorities

    Author Photo

    Recent remarks from the leader of the Justice Department’s commercial litigation branch provide key insights on how False Claims Act cases — especially healthcare fraud, trade fraud, antidiscrimination and cybersecurity claims — will be evaluated, prioritized and pursued as heightened enforcement becomes the new normal, say attorneys at Latham.

  • The Benefits Of Choosing A Niche Practice In The AI Age

    Author Photo

    As artificial intelligence becomes increasingly accessible, lawyers with a niche practice may stand out as clients seek specialized judgment that automation cannot replicate, but it is important to choose a niche that is durable, engaging and a good personal fit, says Daniel Borneman at Lowenstein Sandler.

  • Google's Scraping Suit Asks How Far DMCA Protections Go

    Author Photo

    A California federal court's decision in Google v. SerpApi will spotlight a long-developing judicial split over how to apply the Digital Millennium Copyright Act’s ban on circumventing a copyright holder’s access controls, an increasingly important point in litigation over web scraping and artificial intelligence training, say attorneys at Jenner & Block.

  • Series

    Podcasting Makes Me A Better Lawyer

    Author Photo

    Podcasting has changed how I ask questions and connect with people, sharpening my ability to listen without interrupting or prejudging, and bringing me closer to what law is meant to be: a human profession grounded in understanding, judgment and trust, says Donna DiMaggio Berger at Becker.

  • Takeaways From Calif. High Court's Public Records Decision

    Author Photo

    The California Supreme Court’s recent City of Gilroy v. Superior Court decision — clarifying the relief available under, and the duties imposed by, the California Public Records Act — expands the strategic significance of CPRA actions and demands greater foresight in public records practice, say attorneys at Hanson Bridgett.

  • Resilience Planning As Nat'l Security Shifts Tech Import Policy

    Author Photo

    In response to a sustained reorientation of U.S. trade policy around national security considerations, businesses reliant on processed critical minerals must closely monitor diplomatic negotiations and the potential expansion of trade measures, incorporating contingency planning into procurement and long-term investment strategies, says attorney Sohan Dasgupta.

  • Character.AI Case Highlights Agentic AI Liability Questions

    Author Photo

    The recently settled litigation against Character Technologies Inc. provides an early case study for exploring salient legal issues related to agentic artificial intelligence, such as tort liability, strict liability, statutory liability and contractual liability, says Samuel Mitchells at Smith Gambrell.

  • Series

    Volunteering With Scouts Makes Me A Better Lawyer

    Author Photo

    Serving as an assistant scoutmaster for my son’s troop reaffirmed several skills and principles crucial to lawyering — from the importance of disconnecting to the value of morality, says Michael Warren at McManis Faulkner.

  • Compliance Takeaways Amid Subscription Practices Scrutiny

    Author Photo

    The Federal Trade Commission's prioritization of enforcement regarding deceptive billing and cancellation practices in recurring subscriptions, and new click-to-cancel rulemaking expected on the horizon, carry key takeaways for companies using recurring subscriptions to sell products or services, say attorneys at Arnold & Porter.

  • Series

    Law School's Missed Lessons: In Court, It's About Storytelling

    Author Photo

    Law school provides doctrine, cases and hypotheticals, but when lawyers step into the courtroom, they must learn the importance of clarity, credibility, memorability and preparation — in other words, how to tell simple, effective stories, say Nicholas Steverson and Danielle Trujillo at Wheeler Trigg, and Lisa DeCaro at Courtroom Performance.

  • Aligning Microsoft Tools With NYC Bar AI Recording Guidance

    Author Photo

    The New York City Bar Association’s recently issued formal opinion, providing ethical guidance on artificial intelligence-assisted recording, transcription and summarization, raises immediate questions about data governance and e-discovery for companies that use Microsoft 365 and Copilot, say Staci Kaliner, Martin Tully and John Collins at Redgrave.

  • Social Media Trial Raises Key Product Safety Questions

    Author Photo

    The trial underway in a California state court against Meta and Google is unprecedented, because it marks the first time a jury has been asked to consider whether social media platforms' engagement-maximizing design can be treated as a product safety issue, or whether it is inseparable from protected expression, says Gary Angiuli at Angiuli & Gentile.

  • Class Actions At The Circuit Courts: March Lessons

    Author Photo

    In this month's review of class action appeals, Mitchell Engel at Shook Hardy discusses four recent rulings from January and identifies practice tips from cases involving allegations of violations of consumer fraud regulations, the Fair Credit Reporting Act, employment law and breach of contract statutes.

  • 5 Different AI Systems Raise Distinct Privilege Issues

    Author Photo

    A New York federal court’s recent U.S. v. Heppner decision, holding that a defendant’s use of Claude was not privileged, only addressed one narrow artificial intelligence system, but lawyers must recognize that the spectrum of AI tools raises different confidentiality and privilege questions, says Heidi Nadel at HP.

Want to publish in Law360?


Submit an idea

Have a news tip?


Contact us here
Can't find the article you're looking for? Click here to search the Cybersecurity & Privacy archive.