Cybersecurity & Privacy

  • October 28, 2026

    Product Liability's Regulatory & Legislative Recap So Far

    Over the summer and early fall, lawmakers proposed measures aimed at putting safeguards around the rapidly growing industry of artificial intelligence, as public concerns over its safety climb in tandem. The new nominee to head the U.S. Food and Drug Administration also faced sharp queries over her views on vaccines and birth control.

  • October 28, 2026

    CFPB Audit Flags Cybersecurity Gaps Amid Staff Departures

    The Consumer Financial Protection Bureau has failed to promptly fix serious cyber weaknesses and consistently track data in its possession as staffing losses have hampered the agency's ability to safeguard its systems, according to a federal watchdog audit released Wednesday.

  • October 28, 2026

    Patients Seek OK Of Connecticut Rehab Data Breach Deal

    Patients accusing a Connecticut medical rehab network of waiting almost a year to disclose a cyberattack have asked a state court judge to preliminarily bless a deal that would provide about 61,000 people up to $2,500 in cash, plus $1 million in identity theft insurance.

  • October 28, 2026

    Jury Selection Starts In 2nd Social Media Bellwether In LA

    Jury selection began Wednesday in a California courtroom for the second bellwether trial focused on allegations that major social media companies are harming the mental health of children, with Meta Platforms Inc. returning to the defense table next to Snap Inc., which is facing jurors on the claims for the first time.

  • October 28, 2026

    Proskauer, Reddit Attys Called To Testify In Data-Scraping Suit

    A New York federal judge on Wednesday called for live testimony from two Proskauer Rose LLP attorneys and Reddit's deputy general counsel as he weighs the law firm's bid to represent Perplexity AI in a lawsuit from Reddit, the firm's former client, over alleged data scraping.

  • October 28, 2026

    Denver Law Firm Sued Over Delayed Data Breach Notice

    A Denver law firm was hit with a proposed class action in Colorado federal court Tuesday from an Oklahoma man accusing it of allowing his and thousands of others' personally identifiable information to be stolen in a cyberattack.

  • October 28, 2026

    FTC Probes Delta, Uber, Others Over Data-Driven Pricing

    The Federal Trade Commission is pressing Delta, Uber, Target and a half-dozen other companies to detail how they're using personal data to set individualized pricing for consumers and compensation for workers, marking the latest escalation of the agency's growing scrutiny of the increasingly prominent business practice.

  • October 28, 2026

    DOD Contractor Owes $1.2M In Whistleblower Suit, Jury Says

    An ex-employee of a U.S. Department of Defense contractor won a $1.2 million award after a Colorado federal jury found the contractor liable for wrongful discharge and violations of the Defense Contractor Whistleblower Protection Act, according to the final judgment, entered Wednesday. 

  • October 28, 2026

    Watchdog Seeks Privacy Guardian In Character.AI Ch. 11 Sale

    The U.S. Trustee's Office said a Delaware bankruptcy judge must appoint a consumer privacy ombudsman to review the sale of artificial intelligence entertainment platform Character Technologies' assets, saying its Character.AI platform includes identifiable information from users' chats.

  • October 28, 2026

    4th Circ. Judge Sees 'Big Brother' In Va. Social Media Limits

    A Fourth Circuit judge Wednesday expressed concern with a Virginia law limiting children's access to social media, telling counsel for the commonwealth that the provision has a "Big Brother atmosphere" to it and suggesting he'd back the district court's injunction halting enforcement of the regulation.

  • October 28, 2026

    Meta Wants Ex-WhatsApp Security Head's Suit Axed For Good

    Meta has urged a California federal judge to permanently dismiss a whistleblower retaliation suit from a former cybersecurity head for WhatsApp, saying the fourth version of his complaint repleads theories the court has tossed and still doesn't show the managers responsible for the alleged retaliation knew about his claimed protected activity.

  • October 28, 2026

    Texan Claims Austin Firm Hasn't Alerted Him To Data Breach

    Linebarger Goggan Blair & Sampson LLP, an Austin, Texas-based law firm focused on collecting debts and taxes for public-sector clients, failed to protect its clients' personal information from a data breach, the plaintiff in a proposed class action claimed in Texas federal court Tuesday.

  • October 27, 2026

    Mass. Hospitals Sue Lilly Over 340B Discount Data 'Extortion'

    A group of Massachusetts hospitals claim drugmaker Eli Lilly & Co. unlawfully holds hostage medication discounts meant to benefit low-income patients by demanding that hospitals hand over sensitive patient claims data or pay "exorbitant" inflated prices, according to a lawsuit filed Tuesday in Boston federal court.

  • October 27, 2026

    Anthropic's 'Existential Risks' Warning Sets Stage For AI IPOs

    Anthropic PBC's registration statement includes more than 90 pages of risk disclosures for prospective investors ahead of the Claude developer's planned public offering, including "existential risks to humanity" posed by advanced artificial intelligence and a corporate governance structure the company warns may make it difficult for voting shareholders to replace directors and managers.

  • October 27, 2026

    Google Class Attys Get $2M In $8.25M Kids' App Tracking Deal

    A California federal judge has awarded class counsel just over $2 million in fees and expenses as part of an $8.25 million deal to resolve a proposed class action accusing Google of surreptitiously tracking children's online activity, despite expressing "some concern" that the rates and hours billed by one plaintiffs' firm was "excessive" and rejecting some of the firm's travel expenses. 

  • October 27, 2026

    Milliman Reaches $15.5M Deal In Life Insurance FCRA Suit

    Risk management firm Milliman Inc. is set to pay $15.5 million to resolve a consumer class action accusing the company of peddling flawed information to life insurance companies, according to a proposed settlement that the plaintiffs filed for preliminary court approval in Washington federal court on Monday.

  • October 27, 2026

    Google Can't Dodge Ex-NPR Host's AI Voice Misuse Suit

    Google cannot escape former NPR "Morning Edition" co-host David Greene's lawsuit alleging the tech giant misappropriated his voice in an artificial intelligence podcasting product, a California judge ruled.

  • October 27, 2026

    Snapchat Accused Of Letting Predators Exploit Kids

    The company behind the popular app Snapchat has been sued in Philadelphia court by a group of parents alleging that the platform allowed predators to sexually exploit their children while at the same time holding itself out to be a safe place for kids.

  • October 27, 2026

    CrowdStrike Wants Fed. Circ. To Ship Patent Case To Calif.

    Cybersecurity company CrowdStrike wants the Federal Circuit to force a Texas federal judge to send a suit accusing it of infringing a series of patents owned by an arm of Arizona State University to California.

  • October 27, 2026

    AI Users Say SpaceXAI Can't Split, Arbitrate Slowdown Suit

    Artificial intelligence users urged a California federal judge Tuesday not to let SpaceXAI separate itself from their proposed class action accusing it, Anthropic, OpenAI and Google of violating antitrust law through their "pace the frontier" collaboration slowing down AI development, attacking the Elon Musk-owned company's efforts to invoke arbitration.

  • October 27, 2026

    Daily Mail, Publishers Fight Google's 'Multi-Year Delay'

    Gannett, the Daily Mail and a certified class of website publishers urged a New York federal judge Monday not to let Google pause a scheduled advertising placement technology trial, arguing in twin briefs that the U.S. Department of Justice's antitrust win is strong and Google's appeal won't disrupt the multidistrict litigation.

  • October 27, 2026

    GSA's Google Drive Left Sensitive Files Exposed, Report Says

    The U.S. General Services Administration is falling short in protecting controlled unclassified information stored in its Google Drive, prompting unauthorized exposure to agency employees and contractors, a watchdog said in a Tuesday report.

  • October 27, 2026

    4th Circ. Says W.Va. Daniel's Law Is Unconstitutional

    The Fourth Circuit on Tuesday affirmed a district court determination striking down as unconstitutional West Virginia's law restricting the publication of the home addresses and phone numbers of law enforcement and judicial officials, saying the district court applied "well-established" First Amendment principles.

  • October 27, 2026

    AGs Sue To Block Treasury Rule Ending Shell Co. Reporting

    Nearly two dozen states sued the Trump administration Tuesday over its rollback of ownership reporting requirements for corporate entities, arguing the move constitutes an illegal, unilateral repeal of an anti-financial crime law that Congress enacted.

  • October 26, 2026

    DOJ Tries For Third Case Against Comey, Alleging Doc Leak

    For the third time, the Trump administration has lobbed criminal charges against James Comey, this time accusing the former FBI director of disclosing sensitive national defense information in 2016, according to a criminal information unsealed Monday in D.C. federal court.

Expert Analysis

  • 2nd Circ. EFAA Ruling Shifts Employer Litigation Strategy

    Author Photo

    In Diaz-Roa v. Hermes Law, the Second Circuit recently held that, under the Ending Forced Arbitration of Sexual Assault and Sexual Harassment Act, employers can't carve out nonharassment claims and send them to arbitration, which has implications for discovery, litigation costs and resolution strategy in EFAA-covered disputes, say attorneys at Krevolin Horst.

  • Tort Liability When AI Goes Rogue: Negligence Theory

    Author Photo

    If reasonable care in the use of artificial intelligence agents cannot eliminate the risk of third-party harm, then AI companies and users of AI agents must consider whether negligence theory provides an adequate framework for assessing harm caused by agents that go rogue, says Donald Hawthorne at Carter Ledyard.

  • Digging Into Dems' Letter On Subpoena Secrecy Demands

    Author Photo

    Lawmakers’ recent letter arguing that federal agencies’ use of boilerplate nondisclosure language in subpoenas pressures recipients into silence may lead to a significant overhaul of the current framework, but in the meantime, companies should review their rights and options, say attorneys at Crowell & Moring.

  • 3 Steps To Mitigate The Cyber Risks From Employee AI Use

    Author Photo

    Recent data showing a doubling in breaches tied to employee use of unapproved AI tools demonstrates a convergence of cybersecurity risk, data privacy exposure and legal liability that workplace policies don't often address, but business leaders can get ahead of these risks, say attorneys at Ogletree.

  • AG Watch: Minnesota Takes Action To Secure Child Safety

    Author Photo

    Minnesota Attorney General Keith Ellison has built one of the most aggressive and structurally coherent child protection enforcement programs in the country, targeting consumer-facing sectors that his office has concluded prey on minors, such as tobacco and nicotine, social media platforms, and artificial intelligence, say attorneys at Crowell & Moring.

  • Series

    Being In The Peace Corps Made Me A Better Lawyer

    Author Photo

    When I served in the Peace Corps, the people of the West African village where I was stationed helped me acclimate to my new surroundings and enabled me to develop problem-solving, teamwork and empathy skills that have bolstered my legal practice far beyond the ability to offer technical advice, says Brian Bewley at McGuireWoods.

  • Immunity May Not Protect Gov't-Backed Cyber Operators

    Author Photo

    Companies considering participation in a National Coordination Center program that authorizes private actors to conduct offensive cyber operations on the government’s behalf should understand the limits of sovereign immunity and the operational and legal risks lurking in the details and undefined parameters of the program, say attorneys at Steptoe.

  • White House AI Accord Could Reshape Reasonable Care

    Author Photo

    President Donald Trump's recent joint commitment on frontier responsibilities — signed by leaders of Google, Anthropic, Meta and more — may pose legal risks for nonsignatories, as businesses using artificial intelligence may find the accord's safeguards cited against them as evidence of what reasonable care requires, says Peter Schildkraut at Arnold & Porter.

  • OCC Plan May Bring Data Sharing Flexibility, Diligence Issues

    Author Photo

    The Office of the Comptroller of the Currency's recent proposal to overhaul its supervisory information sharing regime for the first time in decades would provide important flexibility to banks, but it could create new issues around confidentiality agreements, disclosure controls and diligence processes, say attorneys at Simpson Thacher.

  • Protecting Trade Secrets When AI Agents Go Rogue

    Author Photo

    In light of a recent incident in which artificial intelligence agents compromised parts of Hugging Face's production systems, and the uncertain court guidance surrounding liability in such situations, companies looking to update their trade secret protections should carefully examine agents' permissions and technical limitations, says Matt Nealon at Marshall Gerstein.

  • Planning For D&O Exclusions As Risks Mount For Banks

    Author Photo

    Banks should scrutinize directors and officers exclusions for artificial intelligence, disclosure and cybersecurity risks during policy renewal negotiations to preserve coverage amid the current uptick in insurer scrutiny and related shareholder litigation, say attorneys at Jones Walker.

  • CFIUS Annual Report Reveals Enforcement Trends

    Author Photo

    The Committee on Foreign Investment in the United States' recently published annual report to Congress shows that it is increasingly focused on nonnotified transactions, mandatory filing compliance, critical technologies and postclosing mitigation enforcement across the full life cycle transactions, say attorneys at Bass Berry.

  • Series

    Fintech Regulator Outlook: Collaboration In North Dakota

    Author Photo

    The recent speed of new digital asset products entering the market continues to introduce compliance challenges, so regulators and companies alike must examine the intersection of artificial intelligence, cybersecurity, collaboration and modernization to navigate regulatory complexity, says Lise Kruse at the North Dakota Department of Financial Institutions.

  • Terminix Deal Shows Risks Of Calif. Aggregating Local Lapses

    Author Photo

    California district attorneys’ novel use of an unfair competition law to merge unrelated local enforcement matters against pest control providers Rentokil and Terminix into one recently settled statewide case demonstrates that lack of adequate communication between facilities and corporate compliance managers may cause isolated regulatory violations to snowball into larger challenges, say attorneys at Kazmarek Mowrey.

  • What Lawyers Should Know Before Accepting Crypto Payment

    Author Photo

    As clients increasingly request to pay legal fees, retainers and escrow funds using cryptocurrency, lawyers should consider how only a handful of state bar authorities have addressed the issue with varying ethics opinions, as well as the related questions that no authority has yet answered, says attorney Felix Shipkevich.

Want to publish in Law360?


Submit an idea

Have a news tip?


Contact us here
Can't find the article you're looking for? Click here to search the Cybersecurity & Privacy archive.