Cybersecurity & Privacy

  • March 24, 2026

    Fiserv, Credit Union Settle Payment Data Security Lawsuit

    Fiserv Solutions LLC and Cencap Federal Credit Union have "tentatively settled" a Connecticut federal lawsuit accusing the payment processor and fintech provider of operating an online banking platform that contained security flaws.

  • March 24, 2026

    Meta Owes $375M In NM Trial Over Harm To Teens

    A New Mexico jury said Tuesday that Meta must pay $375 million over the state attorney general's bellwether claims that the social media giant hid the full scope of mental health harm its apps were causing to underage users.

  • March 24, 2026

    AGs Seek Federal Help To Tackle Chinese App Drug Trade

    North Carolina Attorney General Jeff Jackson announced Monday that he's leading a bipartisan group of state enforcers in asking the federal government to act on drug traffickers' co-opting of Chinese-owned messaging app WeChat and its sister app Weixin to propagate the illegal drug trade. 

  • March 23, 2026

    Meta Ends WhatsApp Security Head's Retaliation Suit For Now

    A California federal judge dismissed, for now, a retaliation claim by a former Meta employee who claimed he was fired after reporting cybersecurity shortfalls concerning WhatsApp, finding the plaintiff's complaints aren't protected under the Sarbanes-Oxley Act since his cybersecurity violation reports don't relate to internal accounting controls.

  • March 23, 2026

    Anthropic Says DOD Security Risk Label Is Unconstitutional

    Anthropic PBC has doubled down on its push for an order blocking the Trump administration from labeling it a supply chain risk to national security, telling a California federal court the executive branch was punishing "a major company for the sin of expressing its views on a matter of profound public significance."

  • March 23, 2026

    SEC Must Give Video Of Elon Musk Interview To Oscar Winner

    The U.S. Securities and Exchange Commission must release a video interview of Elon Musk from its civil fraud investigation of the billionaire to a film company led by Oscar-winner Alex Gibney, a D.C. federal judge ruled Monday, saying the SEC already has publicized the interview's contents through a transcript.

  • March 23, 2026

    Social Media Jurors Say They Are Deadlocked On A Defendant

    A California jury considering claims Meta and Google harm children's mental health through their social media platforms reported Monday that it is deadlocked as to one of the defendants, but it wasn't clear if the jury is stuck on the question of liability or on potential punitive damages.

  • March 23, 2026

    FCC Urges Justices To Reject Repeal Of Penalty Power

    The Federal Communications Commission has urged the U.S. Supreme Court to keep the agency's monetary penalty powers intact, saying the agency's current practice does not deny targets of fines their right to a jury trial and is not binding until a court orders payment.

  • March 23, 2026

    FCC Adds Foreign Routers To Nat'l Security Risk List

    The Federal Communications Commission on Monday added foreign-made routers to a list of consumer electronics gear that cannot be sold on the U.S. market without specific authorization.

  • March 23, 2026

    FINRA Fines Stash Capital For AML, Identity Theft Controls

    The Financial Industry Regulatory Authority fined digital investing platform operator Stash Capital $450,000 for allegedly failing to properly review applications and detect suspicious account activity during a period of sharp customer growth.

  • March 23, 2026

    Novartis Faces Class Suit Over Patient Health Info Disclosure

    Drugmaker Novartis collected patients' personal and health information through pharmaceutical marketing websites and transmitted it to third parties including Google using "surreptitious online tracking tools" without patients' consent, a proposed class action in New Jersey federal court alleges.

  • March 23, 2026

    Md. Judge Rules Written Consent Not Needed Under TCPA

    Echoing a recent Fifth Circuit ruling, a Maryland federal judge has held that written consent to receive telemarketing calls is not required under the Telephone Consumer Protection Act, reversing a decision to certify a class of consumers against a dental plan marketer.

  • March 23, 2026

    Pediatric Data Breach Class Action Can Stay In NC Biz Court

    A consolidated class action alleging a pediatric medical practice failed to protect minor patients' data from hackers can remain in the North Carolina Business Court, a judge ruled in finding the lawsuits were properly designated to the state's specialized superior court for complex business matters.

  • March 23, 2026

    New Wash. Law Cuts Antispam Penalties Amid Multiple Suits

    Statutory penalties for emails sent in violation of Washington state's Commercial Electronic Mail Act, which bars messages with false or misleading subject lines, will fall from $500 per email to $100 under a measure signed into law by Gov. Bob Ferguson on Monday.

  • March 23, 2026

    Duke Health's $3.7M Pixel Privacy Deal Gets Initial OK

    Hundreds of thousands of Duke University Health System Inc. patients are one step closer to securing a share of a $3.7 million settlement stemming from a health data tracking suit involving Meta's Pixel, after a North Carolina federal court granted preliminary approval of the class action settlement.

  • March 23, 2026

    Ex-White Sox Star Thomas Sues Team, Nike Over Jersey Sales

    Former Chicago White Sox player Frank Thomas has sued his ex-team, Nike and Fanatics in Illinois state court, claiming they unlawfully sold jerseys bearing his name and number without his consent and without compensating him in any way.

  • March 23, 2026

    AbbVie Escapes Ill. Genetic Privacy Lawsuit

    An Illinois federal judge on Friday granted AbbVie summary judgment in a lawsuit claiming it violated the state's genetic privacy law, saying there was "no genuine dispute" that AbbVie never conditioned the plaintiff's employment on whether he disclosed genetic information in the physical exam he was required to undergo before starting work.

  • March 23, 2026

    Social Media Atty Sanctioned For 'Most Shameful Moment'

    A California judge on Monday sanctioned an attorney for the plaintiff in a bellwether trial alleging Meta Platforms and Google's social media platforms harm children's mental health, fining him $1,100 and keeping him off the plaintiffs' steering committee for violating court rules by twice filming inside the courthouse.

  • March 23, 2026

    Research Org. Seeks $530K In Fees After DOD Cap Ruling

    The Association of American Universities has asked a Massachusetts federal court for $530,000 in attorney fees after a judge ruled that the U.S. Department of Defense unlawfully capped the reimbursement for the institution's indirect research costs.

  • March 23, 2026

    Justices Reject Case Alleging Google-Apple Search Pact

    The U.S. Supreme Court refused Monday to review rulings from a California federal judge and the Ninth Circuit dismissing a lawsuit accusing Google of anticompetitively paying Apple not to produce its own search engine.

  • March 23, 2026

    Justices Won't Hear Fight Over 2020 Election Voting Machines

    The U.S. Supreme Court said Monday that it won't decide if two Pennsylvania county leaders had standing to sue Dominion Voting Systems over allegations that voting machines used during the 2020 election weren't secure.

  • March 20, 2026

    5th Circ. Wipes Out FTC's TurboTax 'Deceptive' Ad Ruling

    The Fifth Circuit on Friday vacated the Federal Trade Commission's cease-and-desist order imposed on Intuit Inc. for its TurboTax advertising that regulators say duped customers into thinking they could file their tax returns for free, saying the agency's in-house decision is unconstitutional, and the dispute must go to federal court.

  • March 20, 2026

    PowerSchool, Bain Can't Skirt MDL Over Student Data Breach

    A California federal judge has refused to toss multidistrict litigation seeking to hold PowerSchool and its majority stakeholder Bain Capital liable for a data breach that exposed roughly 50 million individuals' personal data, finding that Bain's involvement in the education technology provider's cybersecurity operations "went beyond what an ordinary investor would do."

  • March 20, 2026

    Feds Rip Ex-NFL Player's New Trial Bid Over Medicare Scheme

    The federal government opposed a new trial bid by Keith Gray, a former NFL player and Texas laboratory owner convicted in a $328 million scheme involving billing for unnecessary cardiovascular genetic testing for Medicare beneficiaries, arguing Thursday he lacks any valid basis to "disturb the jury's sound verdict."

  • March 20, 2026

    Jury Finds Tech Co. Data Analyst Guilty Of Extortion Scheme

    A data analyst contracted to work for a Washington, D.C.-based technology company was hit with a federal jury verdict finding him guilty of conducting a cyber extortion scheme that threatened to disclose employees and executives' personal information if they didn't pay him $2.5 million.

Expert Analysis

  • Compliance Takeaways Amid Subscription Practices Scrutiny

    Author Photo

    The Federal Trade Commission's prioritization of enforcement regarding deceptive billing and cancellation practices in recurring subscriptions, and new click-to-cancel rulemaking expected on the horizon, carry key takeaways for companies using recurring subscriptions to sell products or services, say attorneys at Arnold & Porter.

  • Series

    Law School's Missed Lessons: In Court, It's About Storytelling

    Author Photo

    Law school provides doctrine, cases and hypotheticals, but when lawyers step into the courtroom, they must learn the importance of clarity, credibility, memorability and preparation — in other words, how to tell simple, effective stories, say Nicholas Steverson and Danielle Trujillo at Wheeler Trigg, and Lisa DeCaro at Courtroom Performance.

  • Aligning Microsoft Tools With NYC Bar AI Recording Guidance

    Author Photo

    The New York City Bar Association’s recently issued formal opinion, providing ethical guidance on artificial intelligence-assisted recording, transcription and summarization, raises immediate questions about data governance and e-discovery for companies that use Microsoft 365 and Copilot, say Staci Kaliner, Martin Tully and John Collins at Redgrave.

  • Social Media Trial Raises Key Product Safety Questions

    Author Photo

    The trial underway in a California state court against Meta and Google is unprecedented, because it marks the first time a jury has been asked to consider whether social media platforms' engagement-maximizing design can be treated as a product safety issue, or whether it is inseparable from protected expression, says Gary Angiuli at Angiuli & Gentile.

  • Class Actions At The Circuit Courts: March Lessons

    Author Photo

    In this month's review of class action appeals, Mitchell Engel at Shook Hardy discusses four recent rulings from January and identifies practice tips from cases involving allegations of violations of consumer fraud regulations, the Fair Credit Reporting Act, employment law and breach of contract statutes.

  • 5 Different AI Systems Raise Distinct Privilege Issues

    Author Photo

    A New York federal court’s recent U.S. v. Heppner decision, holding that a defendant’s use of Claude was not privileged, only addressed one narrow artificial intelligence system, but lawyers must recognize that the spectrum of AI tools raises different confidentiality and privilege questions, says Heidi Nadel at HP.

  • Making Effective Use Of DOD's 'Patent Holiday' Program

    Author Photo

    The U.S. Department of Defense's new defense patent holiday program, designed to let companies experiment with otherwise latent technology without paying typical up-front fees, can help contractors enter new technical domains and markets, but requires careful attention to export controls and patent infringement risks, say attorneys at Sterne Kessler.

  • Health Co.'s 'Success Story' Misstep Holds HIPAA Lessons

    Author Photo

    Cadia Healthcare Facilities' fall settlement with the U.S. Department of Health and Human Services for improperly disclosing patients' protected health information in online success stories is an instructive example of Health Insurance Portability and Accountability Act risks that can arise from digital marketing efforts, say attorneys at Woods Rogers.

  • Opinion

    AI-Assisted Arbitration Needs Safeguards To Ensure Fairness

    Author Photo

    As tribunals and arbitral institutions increasingly use artificial intelligence tools in their decision-making processes, ​​​​​​​clear disclosure standards and procedural safeguards are necessary to ensure that efficiency gains do not erode the fairness principles on which arbitration depends, says Alexander Lima at Wesco International.

  • Series

    Playing Piano Makes Me A Better Lawyer

    Author Photo

    Playing piano and practicing law share many parallels relating to managing complexity: Just as hearing an entire musical passage in my head allows me to reliably deliver the message, thinking about the audience's impression helps me create a legal narrative that keeps the reader engaged, says Michael Shepherd at Fish & Richardson.

  • AI Trade Secret Conviction Highlights Espionage Risks

    Author Photo

    A California federal court's conviction last month of an ex-Google engineer who stole artificial intelligence trade secrets for the benefit of China is the latest in a series of foreign economic espionage cases and illustrates the urgent need for U.S. companies to implement robust security measures, says attorney Peter Toren.

  • NY RAISE Act Raises The Bar For Frontier AI Developers

    Author Photo

    For organizations developing or substantially modifying highly capable artificial intelligence models, the New York Responsible AI Safety and Education Act represents a meaningful escalation beyond California's S.B. 53, even though it applies to a narrower group of developers, so companies should expect additional obligations, particularly around accelerated incident reporting, say attorneys at Kilpatrick.

  • AI-Generated Doc Ruling Guides Attys On Privilege Risks

    Author Photo

    A New York federal court's ruling, in U.S. v. Heppner, that documents created by a defendant using an artificial intelligence tool were not privileged, can serve as a guide to attorneys for retaining attorney-client or work-product privilege over client documents created with AI, say attorneys at Sher Tremonte.

  • The Law Firm Merger Diaries: Leadership Strategy After Day 1

    Author Photo

    For law firm leaders, ensuring a newly combined law firm lives up to its promise, both in its first days of operation and well after, includes tough decisions, clear and specific communication, and cheerleading, says Peter Michaud at Ballard Spahr.

  • How US Liability Law Is Becoming The Primary Regulator Of AI

    Author Photo

    Comprehensive federal AI regulation remains fragmented and uncertain — but U.S. courts, applying long-standing doctrines of liability and responsibility, are actively shaping how AI systems are designed, deployed and governed, and companies are aligning their AI practices because courts may hold them accountable if they do not, says Alexander Lima at Wesco International.

Want to publish in Law360?


Submit an idea

Have a news tip?


Contact us here
Can't find the article you're looking for? Click here to search the Cybersecurity & Privacy archive.