Cybersecurity & Privacy

  • July 14, 2026

    DOD Halts Cybersecurity Program Phase Over Cost, Alignment

    The Pentagon has suspended the next phase of the Cybersecurity Maturity Model Certification program, which is aimed at boosting cybersecurity standards across the defense industrial base while it reviews whether the program aligns with Secretary of Defense Pete Hegseth's acquisition priorities. 

  • July 14, 2026

    RJ Reynolds Says TCPA Doesn't Apply To Texts, Cellphones

    Tobacco giant R.J. Reynolds is looking to duck a proposed class action accusing it of sending unsolicited text messages, saying a North Carolina federal judge should apply recent U.S. Supreme Court precedent on judicial deference to find the Telephone Consumer Protection Act doesn't apply to cellphones or texts.

  • July 14, 2026

    Insurer Ducks Models' Advertising Claims Against Strip Club

    A Connecticut federal judge has handed Clear Blue Specialty Insurance Co. a win in six professional models' attempts to access a strip club's $1 million policy pursuant to a settlement in an underlying false association and false advertising lawsuit, saying an exclusion for "exhibitions and related marketing" insulates the insurer.

  • July 14, 2026

    News Orgs Need To Show AI Uses More Than Just Facts

    News organizations suing artificial intelligence companies for allegedly infringing their copyrighted content for AI training must show that chatbots are using the organizations' prose as opposed to merely uncopyrightable facts, or that the practice is diluting the market for human-made journalism, experts told Law360.

  • July 14, 2026

    States Will Get $18M From 23andMe Ch. 11 For Data Breach

    A week after a bankruptcy court approved a $46.75 million settlement between the DNA testing company 23andMe and data breach claimants, a coalition of more than 40 states announced Tuesday that they would share in an additional $18 million to resolve claims of unreasonable security practices.

  • July 13, 2026

    NJ Delays Registry Aspect Of Newly Enacted Data Broker Law

    New Jersey regulators won't immediately enforce a sweeping data broker law that took effect in June, announcing Friday covered businesses have to register and pay a potentially hefty registration fee until spring, and it would consider complaints about the law's lack of clarity in policing its sensitive data sales ban.

  • July 13, 2026

    7th Circ. Nixes Clearview AI Privacy Deal Over Class Rift

    The Seventh Circuit has vacated a novel biometric privacy settlement between Clearview AI and classes of individuals who claim the company misused their public photos, saying a nationwide class representative should have signaled their agreement before the district court approved a deal containing such comparatively "meager" benefits.

  • July 13, 2026

    WebAI Says Ex-Engineers Recast Firing As Fraud Claims

    WebAI Inc. has told a North Carolina federal court that a complaint by former engineers alleging an executive's conduct jeopardized huge deals is merely an attempt by disgruntled employees to conjure a multicount lawsuit from a lawful employment separation.

  • July 13, 2026

    4th Circ. Says Manual Cellphone Searches At Border Are Legal

    The Fourth Circuit has ruled that manual searches of a cellphone at the border are legal because they are considered routine and do not require individualized suspicion by a border agent about whether a crime has occurred.

  • July 13, 2026

    Blue Shield Of Calif. Beats Enrollee Data Privacy Suit, For Now

    A California federal judge dismissed a proposed class action accusing Blue Shield of California of violating the federal Wiretap Act by installing Google and Meta tracking tools on its website, saying plaintiffs failed to allege that the health plan provider intercepted their highly sensitive health-related electronic communications.

  • July 13, 2026

    23andMe Bankruptcy Plan Bars Data Breach Suit In Calif.

    A Missouri bankruptcy judge has told attorneys representing California the state can no longer press its data breach lawsuit against the reorganized 23andMe, finding the state court action is barred by the company's confirmed Chapter 11 plan.

  • July 13, 2026

    Casino Co. Moves To Toss Ex-Worker's Data Breach Suit

    A casino and entertainment company moved Monday to dismiss a former employee's proposed class action over a 2024 cyberattack, telling a Colorado federal court she lacks standing to sue and failed to show her alleged injuries were caused by the security incident.

  • July 13, 2026

    Families Cite Geofence Ruling In Newborn Blood Testing Case

    A group of parents suing the state of Michigan over the way newborn blood samples are collected and stored has asked a federal judge to revive its claims by citing recently decided U.S. Supreme Court precedent over the use of bulk cellphone data by police.

  • July 13, 2026

    Mass Tort Firms Hit With Suit Over AI Solicitation Calls

    A Michigan-based mass tort law firm and a pair of affiliate firms are violating federal and Texas state laws through an artificial intelligence-generated telemarketing campaign meant to solicit clients, according to a putative class action filed in Texas federal court.

  • July 13, 2026

    Trump-IRS Settlement Result Of Sham Suit, Judge Rules

    President Donald Trump's $10 billion suit against his own Internal Revenue Service and the resulting settlement deal lacked a legitimate controversy, given Trump's control over both the agency and the U.S. Department of Justice, a Florida district judge said Monday in an order barring Trump or others from citing the deal.

  • July 13, 2026

    Steptoe Adds Crowell & Moring Defense Pro As Cyber Lead

    Steptoe LLP announced Monday that it has hired a former government contracts and cybersecurity partner from Crowell & Moring LLP who has held senior procurement roles at the U.S. Department of Defense and the Department of Homeland Security to lead the firm's cybersecurity practice.

  • July 10, 2026

    Biggest Illinois Decisions Of 2026: Midyear Report

    One of the biggest decisions to come down in Illinois so far this year applies a 2-year-old Biometric Information Privacy Act amendment retroactively in an appellate ruling experts anticipate will deflate settlement values even though it came from a federal court.

  • July 10, 2026

    Healthcare Analytics Co. Beats Data Breach Suit, For Good

    Arbor Associates permanently beat patients' proposed negligence class action alleging their sensitive information was stolen following a 2025 data security incident that resulted in an uptick in spam calls, after a Michigan federal judge ruled those injuries are "nothing more than an 'unadorned, the-defendant-unlawfully-harmed-me accusation.'"

  • July 10, 2026

    WhatsApp Users Must Arbitrate Claims Over Private Messages

    A California federal judge has ordered WhatsApp users suing the messaging platform in a proposed class action over alleged privacy violations to arbitration, rejecting their argument that the underlying arbitration agreements improperly short-circuit certain of state law claims.

  • July 10, 2026

    House Duo Push Agencies To Tackle AI-Related Election Risks

    A bipartisan pair of members of the U.S. House of Representatives is calling on several federal agencies to coordinate efforts to ensure technologies fueled by artificial intelligence aren't operating in a way that undermines voters' ability to access "accurate, neutral and reliable" information about the upcoming midterm elections.

  • July 10, 2026

    Defense Contractor Accuses Rival Of Trade Secret Theft

    A defense technology contractor has accused a former employee of stealing its trade secrets to help a competing business build a similar product that allows the retrieval of data when a reliable internet connection is not available.

  • July 10, 2026

    Patient Says Data Suit Against Medical Pot Co. Should Go On

    A medical marijuana dispensary accused of clandestinely tracking and sharing online user health data with Google shouldn't be allowed to escape a proposed class action, a patient has told a Florida federal court, arguing that a disclaimer within its website's privacy policy doesn't automatically mean users consented to the conduct.

  • July 10, 2026

    DOJ Appeals Order Shielding Trans Youth Medical Records

    The U.S. Department of Justice asked the Ninth Circuit to review a California federal court's order blocking the government from trying to identify individuals who received gender-affirming care from a Stanford Medicine hospital as minors.

  • July 10, 2026

    Medical Device Co. Hit With Action Over Data Breach

    Pennsylvania-based medical device company AdaptHealth Corp. is facing a putative class action in federal court alleging the company was liable for a data breach last month that exposed the sensitive information of its customers.

  • July 10, 2026

    RentGrow To Pay $2.25M To End Fair Reporting Act Claims

    Tenant-screening report provider RentGrow Inc. will pay $2.25 million to settle allegations it violated the Fair Credit Reporting Act by not taking reasonable steps to ensure the accuracy of its reports or following up on disputed reports, according to the Federal Trade Commission.

Expert Analysis

  • Opinion

    USPTO Must Address The Right Question In Sanofi Case

    Author Photo

    The U.S. Patent and Trademark Office Appeals Review Panel's questions in Ex parte Baurin indicate recognition of broader doctrinal issues, but rather than approaching from separate angles, the panel should concentrate on a single fundamental question about obviousness-type double patenting, says Jeremy Lowe at Spencer Fane.

  • DOJ's FCA Data-Miner Focus Raises Compliance Stakes

    Author Photo

    A new U.S. Department of Justice initiative aims to help its Civil Division better vet False Claims Act suits brought by data-mining whistleblowers, signaling that data-driven qui tam enforcement is a priority and making it increasingly important for attorneys and companies to bolster compliance, documentation and internal data monitoring, say attorneys at Wiley.

  • Legal Risks Rise As Construction-Site Drone Use Soars

    Author Photo

    Construction companies using drones face mounting legal risks as Federal Aviation Administration compliance requirements tighten, remote identification capabilities expand and proposed rules move toward organizational accountability, making it crucial to update contracts, schedules, safety protocols and data-governance practices now to avoid future liability, say attorneys at Cozen.

  • 4 Emerging Approaches To AI Protective Order Language

    Author Photo

    Over the last year, at least five federal district courts have issued or analyzed specific protective order provisions restricting the use of generative artificial intelligence platforms with protected materials, establishing that proactive AI-specific provisions are now standard practice and demonstrating that no single model works for every case, says Joel Bush at Kilpatrick.

  • Understanding The Legal Risks Of Fragile Supply Chains

    Author Photo

    To ensure supply chain resilience in times of crisis — such as the recent blockage of the strategically vital Strait of Hormuz — it is important for everyone involved in the chain to understand the distribution arrangements and laws applicable across jurisdictions, say lawyers at Brown Rudnick.

  • 1st Surveillance Pricing Law In Md. Reflects Broader Scrutiny

    Author Photo

    A new law will make Maryland the first state to target data-driven or surveillance-based price manipulation, highlighting increased scrutiny from federal and state enforcement agencies and policymakers as they consider whether new laws are required to regulate dynamic pricing, say attorneys at Pillsbury.

  • Heppner Ruling Left AI Privilege Risk For Lawyers Unresolved

    Author Photo

    While a New York federal judge’s recent ruling in U.S. v. Heppner resolved a privilege question surrounding client-side artificial intelligence use, it did not address how to mitigate the risks that can arise when confidential information enters the operative context of an AI system used by an attorney, says Jianfei Chen at Quarles & Brady​​​​​​​.

  • The Ethics And Practicalities Of Representing AI Agents

    Author Photo

    With autonomous artificial intelligence agents now able to take action without explicit instructions from — or the awareness of — their human owners, the bar must confront whether existing frameworks like informed consent and client privilege will be sufficient on the day an AI agent calls seeking counsel, say attorneys at Morrison Cohen.

  • Notable Q1 Updates In Insurance Class Actions

    Author Photo

    Notable insurance class action decisions from the first quarter of the year included reminders about the statute of limitations as a key defense for claims relating to allegedly deficient forms, the importance of focus on the specific contract at issue and further guidance on the contours of Rule 23, says Kevin Zimmerman at BakerHostetler.

  • How New E-Evidence Rules Will Affect EU-US Data Transfers

    Author Photo

    The forthcoming European Union e-evidence regulation signals the need to preserve digital evidence that is stored outside the issuing jurisdiction, bringing the EU significantly closer to the model employed by the U.S. and reflecting a shift in the legal landscape for cross-border data transfers, say lawyers at MoFo.

  • Arguments Show Justices Vacillating On Geofence Warrants

    Author Photo

    Questions and statements by the justices during recent oral arguments in Chatrie v. U.S., probing the Fourth Amendment limits of geofence warrants, revealed a Supreme Court that is skeptical of the government’s most sweeping claims, uncomfortable with the petitioner’s broadest theories and searching for a narrow off-ramp, say attorneys at Rogers Joseph.

  • Series

    Speed Jigsaw Puzzling Makes Me A Better Lawyer

    Author Photo

    My passion for speed puzzling — I can complete a 500-piece jigsaw puzzle in under 50 minutes — has sharpened my legal skills in more ways than one, with both disciplines requiring patience, precision and the ability to keep the bigger picture in mind while working through the details, says Tazia Statucki at Proskauer.

  • High Court's Cox Ruling Leaves ISP Copyright Rules Intact

    Author Photo

    Though some commentators predicted a cataclysmic impact from the U.S. Supreme Court's recent decision in Cox v. Sony, in actuality the decision correctly maintains the status quo for internet providers' copyright infringement liability, says Courtney Sarnow at CM Law.

  • Opinion

    Congress Should Ax Privacy Bill For Not Shielding Consumers

    Author Photo

    The SECURE Data Act should be rejected because, despite Congress' claims, it would not meaningfully rein in data practices, but instead would weaken enforcement, eliminate stronger protections and prioritize data extraction over consumer protection and accountability, say attorneys at DiCello Levitt.

  • 2 AI Snafus Show Why Attys Can't Outsource Judgment

    Author Photo

    The recent incident involving Sullivan & Cromwell where citations in a filed motion were fabricated by artificial intelligence, as well as a punitive ruling from the Sixth Circuit in U.S. v. Farris, demonstrate that the obligation to supervise AI has belonged and always will belong to lawyers, says John Powell at the Kentucky School Boards Association.

Want to publish in Law360?


Submit an idea

Have a news tip?


Contact us here
Can't find the article you're looking for? Click here to search the Cybersecurity & Privacy archive.