Cybersecurity & Privacy

  • November 21, 2025

    Google Ad Tech Judge 'Concerned' By DOJ's Breakup Timing

    A Virginia federal judge expressed concern during oral arguments Friday that breaking up Google's advertising placement technology business could take too long to help the market in the face of the company's anticipated appeal of the monopolization ruling won by the U.S. Department of Justice.

  • November 21, 2025

    Bankers Press Congress To Pass 'Critical' AML Reporting Bill

    The American Bankers Association and 50 state bankers groups are urging congressional leaders to pass proposed legislation to increase dollar thresholds for anti-money laundering reporting, saying it would be a "critical element" of modernizing illicit finance rules for banks.

  • November 21, 2025

    Judge Halts IRS-ICE Info-Sharing Agreement

    A D.C. federal judge temporarily stopped the IRS on Friday from sharing confidential taxpayer addresses with immigration enforcement officials, saying the agency's disclosures of addresses in August under an information-sharing deal were unlawful.

  • November 21, 2025

    Ruger's $1.5M Data Breach Deal Heads For Final OK

    A proposed class of data breach victims has asked a federal judge to issue final approval of a $1.5 million settlement with Connecticut-based gunmaker Sturm, Ruger & Co. and a New Jersey web developer, along with $500,000 in fees to attorneys with four firms including Siri & Glimstad LLP.

  • November 21, 2025

    Rothman Orthopaedics Hit With Pa. Wiretapping Lawsuit

    Rothman Orthopaedics has been hit with a proposed class action in Pennsylvania alleging the company violated state wiretapping laws by intercepting private healthcare information on its website using a third-party tracking pixel.

  • November 21, 2025

    Mich. Atty Fights Defamation Suit From Election Investigator

    A Michigan attorney has said any statements that a cybersecurity firm claims she made to scuttle its president's job prospects with the Pennsylvania Legislature are protected speech on a matter of public concern, urging a federal judge to dismiss a suit the firm brought after it told her it found no evidence of fraud in the 2020 presidential election.

  • November 21, 2025

    Mich. Mortgage Co. Hit With Data Breach Class Actions

    A Michigan mortgage lender was hit with several proposed data breach class actions that alleged in Michigan federal court that the lender failed to do enough to protect consumers' personally identifiable information, such as their Social Security numbers, from a June data breach.

  • November 21, 2025

    DOJ Will Speed Some Classified Discovery In Bolton Case

    Federal prosecutors agreed Friday to accelerate their classified discovery timeline in the prosecution of John Bolton, as a Maryland federal judge pressed them to move faster.

  • November 21, 2025

    SEC, Virtu To Settle Customer Data Suit For $2.5M

    Virtu Financial Inc. has agreed to pay the U.S. Securities and Exchange Commission $2.5 million for allegedly failing to safeguard customer information, according to a Friday proposed final order that would end the regulator's two-year-old suit against the broker-dealer.

  • November 21, 2025

    1st Circ. Clears IT Co. In Suit Over Zoll Patient Data Breach

    An information technology company cannot be held liable for a data breach exposing the health information of patients of a unit of medical device maker Zoll Medical Corp, the First Circuit ruled, because the two companies did not have a business relationship permitting them to hold one responsible for another's conduct.

  • November 20, 2025

    Renewed Federal Push To Block State AI Laws Faces Backlash

    The Trump administration is pushing to revive a failed effort to stop states from regulating artificial intelligence systems, drawing opposition from California's data privacy regulator, consumer advocates and others that argue it's crucial for states to retain their ability to put guardrails on the emerging technology in the wake of continued federal inaction.

  • November 20, 2025

    Meta Will Pay $190M, Change Policies To End $8B Privacy Suit

    Meta Platforms Inc. has agreed to pay $190 million, as well as enhance its whistleblower program and implement a new code of conduct and insider trading policy, as part of a proposed settlement in an $8 billion privacy suit tied to the Cambridge Analytica scandal, according to several new filings Thursday.

  • November 20, 2025

    Roblox Can't Get Teen Grooming Suit Arbitrated

    A California state judge said Roblox couldn't compel a minor to arbitrate his claims that he was targeted and exploited by a sexual predator on the online gaming platform, saying that a recent federal law aimed at ending forced arbitration in sexual assault and harassment cases isn't limited to workplaces.

  • November 20, 2025

    Journalist Jailed For Contempt, Fined For Stealing Court Mug

    A Texas federal judge ordered U.S. marshals Thursday to haul a onetime conservative journalist to a nearby jail for contempt of court and separately fined him $1,000 for stealing a court coffee mug, saying he had had it with the defendant's "shenanigans."

  • November 20, 2025

    1st Circ. Tosses Challenge To Maine Lobster Boat Tracking

    The First Circuit has declined to revive a case brought by several Maine lobstermen who said their privacy rights were violated by the state's tracking of their vessels, ruling that the tracking devices were part of administrative searches of a closely regulated industry and do not violate the Fourth Amendment.

  • November 20, 2025

    Data Breach Suit Against Circle K Franchisee Wraps Up

    A group of ex-workers who sued a franchisee of gas and convenience store chain Circle K over a May 2024 data breach have agreed to end their proposed class action, according to a Georgia federal court filing. 

  • November 20, 2025

    Ill. Justices Back Walgreens In Receipt Class Standing Fight

    A Walgreens customer looking to hold the company liable for allegedly printing too much financial information on consumers' receipts should not have won class certification in her case because she lacked standing to bring her claims, the Illinois Supreme Court said Thursday.

  • November 20, 2025

    Adidas Must Face Claim It Shared Info With Microsoft, TikTok

    A California federal judge has denied a motion from Adidas to toss a proposed class action alleging the apparel company violated a California privacy statute by placing tracking pixels from TikTok Pixel and Microsoft Bing on its website, finding the trackers plausibly constitute a "pen register" under state law. 

  • November 20, 2025

    FCC Rescinds Contested Biden-Era Cybersecurity Ruling

    The Federal Communications Commission on Thursday reversed a ruling made late in the Biden administration that required new steps from telecoms to beef up cybersecurity, even as an FCC Democrat decried the move as gutting the agency's response to the Salt Typhoon cyberattack.

  • November 20, 2025

    Fed. Circ. Shoots Down Bot Patent Claim In Google Challenge

    The Federal Circuit on Thursday reversed the Patent Trial and Appeal Board's finding that upheld one of the claims in a Nobots LLC's bot-detecting patent challenged by Google, finding that the PTAB incorrectly interpreted the claim.

  • November 20, 2025

    SEC Walks Away From SolarWinds Data Breach Case

    The U.S. Securities and Exchange Commission announced Thursday that it was voluntarily dismissing a lawsuit accusing software developer SolarWinds Corp. and its chief information security officer of failing to warn investors about lax cybersecurity standards prior to suffering a massive data breach.

  • November 20, 2025

    Cybersecurity Co. Axonius Names 1st GC From Azra Games

    Cybersecurity company Axonius Inc. has found its first general counsel in a veteran legal leader who has worked at software and technology companies including Azra Games and Iterable as it prepares for an initial public offering.

  • November 20, 2025

    Ex-SDNY Chief Rejects Claim Of Broken FTX Plea Promise

    Former interim Manhattan U.S. Attorney Danielle Sassoon told a federal judge Thursday that she never promised crypto lobbyist Michelle Bond any kind of no-prosecute deal as the government negotiated a guilty plea with Bond's husband, former FTX executive Ryan Salame.

  • November 19, 2025

    29 AGs Want Social Media Addiction Fight Decided In 1 Trial

    A coalition of 29 state attorneys general Wednesday urged a California federal judge presiding over social-media addiction multidistrict litigation to consolidate state law claims into a single jury trial, while Meta's counsel argued that there's no case law precedent for such a single trial and it would be prejudicial.

  • November 19, 2025

    Calif. Privacy Agency Targets Data Brokers With 'Strike Force'

    The California Privacy Protection Agency is stepping up its oversight of the data broker industry, revealing Wednesday that it is establishing a dedicated "strike force" within its enforcement division to monitor whether these companies are meeting registration requirements and properly handling consumers' personal data.

Expert Analysis

  • Justices' Age Verification Ruling May Lead To More State Laws

    Author Photo

    The U.S. Supreme Court’s recent Free Speech Coalition v. Paxton ruling, permitting a Texas law requiring certain websites to verify users’ ages, significantly expands states' ability to regulate minors’ social media access, further complicating the patchwork of internet privacy laws, say attorneys at Troutman.

  • E-Discovery Quarterly: Rulings On Relevance Redactions

    Author Photo

    In recent cases addressing redactions that parties sought to apply based on the relevance of information — as opposed to considerations of privilege — courts have generally limited a party’s ability to withhold nonresponsive or irrelevant material, providing a few lessons for discovery strategy, say attorneys at Sidley.

  • How DOJ's New Data Security Rules Leave HIPAA In The Dust

    Author Photo

    The U.S. Department of Justice's recently effective data security requirements carry profound implications for how healthcare providers collect, store, share and use data — and approach vendor oversight — that go far beyond the Health Insurance Portability and Accountability Act, say attorneys at Nelson Mullins.

  • Opinion

    Section 1983 Has Promise After End Of Nationwide Injunctions

    Author Photo

    After the U.S. Supreme Court recently struck down the practice of nationwide injunctions in Trump v. Casa, Section 1983 civil rights suits can provide a better pathway to hold the government accountable — but this will require reforms to qualified immunity, says Marc Levin at the Council on Criminal Justice.

  • Courts Redefining Software As Product Generates New Risks

    Author Photo

    A recent wave of litigation against social media platforms, chatbot developers and ride-hailing companies has some courts straying from the traditional view of software as a service to redefining software as a product, with significant implications for strict liability exposure, say attorneys at Reed Smith.

  • Now Is The Time To Prep For SEC's New Data Breach Regs

    Author Photo

    Recent remarks from the U.S. Securities and Exchange Commission’s acting director of the Division of Examinations suggest that the commission will support exams for compliance with its new data breach detection and reporting regulations, and a looming deadline means investment advisers and broker-dealers must act now to update their processes, say attorneys at McGuireWoods.

  • How Banks Can Harness New Customer ID Rule's Flexibility

    Author Photo

    Banking regulators' update to the customer identification process, allowing banks to collect some information from third parties rather than directly from customers, helps modernize anti-money laundering compliance and carries advantages for financial institutions that embrace the new approach, say attorneys at Bradley Arant.

  • Series

    Playing Soccer Makes Me A Better Lawyer

    Author Photo

    Soccer has become a key contributor to how I approach my work, and the lessons I’ve learned on the pitch about leadership, adaptability, resilience and communication make me better at what I do every day in my legal career, says Whitney O’Byrne at MoFo.

  • How Trump Cybersecurity EO Narrows Biden-Era Standards

    Author Photo

    President Donald Trump recently signed Executive Order No. 14306, which significantly narrows the scope and ambition of a Biden executive order focused on raising federal cybersecurity standards among federal vendors, say attorneys at Jenner & Block.

  • Opinion

    The SEC Should Embrace Tokenized Equity, Not Strangle It

    Author Photo

    The U.S. Securities and Exchange Commission should grant no-action relief to firms ready to pilot tokenized equity trading, not delay innovation by heeding protectionist industry arguments, says J.W. Verret at George Mason University.

  • And Now A Word From The Panel: Back In Action

    Author Photo

    A lack of new petitions at the May hearing session of the Judicial Panel on Multidistrict Litigation caught many observers' attention — but a rapid uptick in petitions scheduled to be heard at this week's session illustrates how panel activity always ebbs and flows, says Alan Rothman at Sidley.

  • Compliance Changes On Deck For Banks Under Texas AI Law

    Author Photo

    Financial services companies, including banks and fintechs, should evaluate their artificial intelligence usage to prepare for Texas' newly passed law regulating AI governance, noting that the enforcement provisions provide for an affirmative defense to liability, say attorneys at Mitchell Sandler.

  • Series

    Law School's Missed Lessons: Learning From Failure

    Author Photo

    While law school often focuses on the importance of precision, correctness and perfection, mistakes are inevitable in real-world practice — but failure is not the opposite of progress, and real talent comes from the ability to recover, rethink and reshape, says Brooke Pauley at Tucker Ellis.

  • 23andMe Fine Signals ICO's New GDPR Enforcement Focus

    Author Photo

    Many of the cybersecurity failures identified by the Information Commissioner’s Office in its investigation of 23andMe, recently resulting in a £2.3 million fine, were basic lapses, but the ICO's focus on several new U.K. General Data Protection Regulation considerations will likely carry into the future, say lawyers at Womble Bond.

  • Midyear Rewind: How Courts Are Reshaping VPPA Standards

    Author Photo

    The first half of 2025 saw a series of cases interpreting the Video Privacy Protection Act as applied to website tracking technologies, including three appellate rulings deepening circuit splits on what qualifies as personally identifiable information and who qualifies as a consumer under the statute, say attorneys at Perkins Coie.

Want to publish in Law360?


Submit an idea

Have a news tip?


Contact us here
Can't find the article you're looking for? Click here to search the Cybersecurity & Privacy archive.