Cybersecurity & Privacy

  • August 29, 2025

    Google Fights Gemini AI Query As App Privacy Trial Wraps

    A multibillion-dollar trial over claims that Google illegally collected app data from 98 million consumers grew contentious Friday when the plaintiff's lawyer asked the tech giant's expert if he considered using Google's AI tool to see if data Google says is scrubbed of personal information could be re-identified.

  • August 29, 2025

    FCC Reminds Rip-And-Replace Recipients To File Updates

    Telecom carriers that received funding from the "rip and replace" program need to provide a status report to the Federal Communications Commission at the end of September, updating the agency on the progress they've made in removing and replacing allegedly insecure foreign-made equipment from their networks, according to a notice issued Friday.

  • August 29, 2025

    Ohio Cannabis Co. Sued Over Exposing Patient Info

    An Ohio company that helps patients secure medical marijuana cards was hit with a new wave of proposed class actions, accusing it of failing to safeguard nearly a million of its customers' sensitive personal records, with the company now facing at least five lawsuits over alleged lax security.

  • August 29, 2025

    SEC Beats FOIA Suit Over Its Internal Breach

    The U.S. Securities and Exchange Commission was not in the wrong for withholding information related to a 2022 internal information breach from a conservative civil rights organization that requested documents on the matter, a Washington, D.C., judge determined, citing the attorney work-product doctrine.

  • August 29, 2025

    OpenAI Denied Discovery On Musk's Buy Offer, Meta's Role

    A California federal magistrate judge blocked further OpenAI discovery into Elon Musk's $97.4 billion offer to buy the ChatGPT maker amid a lawsuit challenging its attempted shift into a for-profit business, finding that discovery on the offer, and any involvement by Meta and CEO Mark Zuckerberg, must wait.

  • August 29, 2025

    Hegseth Creates Joint Task Force To Counter Drone Threats

    Defense Secretary Pete Hegseth has moved to establish a joint Interagency task force aimed at countering foreign drone threats and promoting sovereignty over U.S. airspace. 

  • August 29, 2025

    Colorado Law Firm Faces Class Action Over Data Breach

    A Colorado law firm was hit with a proposed class action in federal court after a Utah woman claimed that the firm didn't take ample measures to protect the personal information of more than 5,000 people, which was stolen in a data breach earlier this year.

  • August 29, 2025

    Apple Must Hand Swiss User's Records To IRS, Judge Rules

    Apple must provide the Internal Revenue Service with a Swiss user's internet and phone records as part of a criminal investigation by Switzerland's taxing authority, a California federal judge ruled, despite the man's protests that the records are unrelated to taxes.

  • August 29, 2025

    UK Litigation Roundup: Here's What You Missed In London

    This past week in London has seen Prosecco DOC Consortium bring an intellectual property claim against a distributor, the Serious Fraud Office bring a civil recovery claim against the ex-wife of a solicitor jailed over a £19.5 million fraud scheme, and law firm Joseph Hage Aaronson & Bremen LLP sue its former client, the bankrupt Indian tycoon Vijay Mallya. Here, Law360 looks at these and other new claims in the U.K.

  • August 29, 2025

    M&A Attys Hand Tasks To 'Machines' In Careful Embrace Of AI

    Artificial intelligence is no longer just a back-office tool in mergers and acquisitions legal work, but is increasingly embedded in core deal processes that help attorneys manage due diligence, draft agreements and assess risk.

  • August 28, 2025

    NSO's Bid To Slash Meta's $168M Win Faces Skeptical Judge

    A California federal judge appeared skeptical Thursday of NSO Group's bid to slash Meta's $168 million jury win in their spyware fight, saying she's having a "hard time" reconciling NSO's argument for $444,000 as a "substantial" award when its lawyer had called that sum "a mere pittance" at trial.

  • August 28, 2025

    'Still A Mess': Colo. Special Session Fails To Deliver AI Clarity

    During its recently concluded special session, the Colorado Legislature extended the implementation deadline for the state's groundbreaking artificial intelligence law but failed to make any substantial changes to the legislation, leaving companies to face continued uncertainty on the scope of liability and other pressing issues.

  • August 28, 2025

    4chan Says UK Online Censorship Law Is Powerless In US

    Controversial online platforms Kiwi Farms and 4chan have slapped the United Kingdom's Office of Communications with a lawsuit in D.C. federal court, saying the foreign agency has no power to make them comply with a British privacy law that violates their rights under the U.S. Constitution.

  • August 28, 2025

    Fed. Circ. Says AI Co. Not 'Interested Party' In Bid Protest

    The en banc Federal Circuit affirmed on Thursday a lower court's dismissal of Percipient.ai's protest challenging its exclusion from consideration to supply computer vision technology under a $376.4 million National Geospatial-Intelligence Agency procurement, holding that the company lacks standing.

  • August 28, 2025

    Salesforce Hit With Suit Over Alleged Breach Affecting 1M

    The personal information of more than 1 million Farmers Insurance customers was accessed by hackers who breached cloud-based software company Salesforce's databases, according to a proposed class action in California federal court.

  • August 28, 2025

    Unions Urge Judgment Blocking DOGE's Agency Access

    Unions and advocacy groups asked a Washington, D.C., federal judge Thursday for a win before trial in their lawsuit claiming agencies unlawfully provided Elon Musk's Department of Government Efficiency access to sensitive data, saying the agencies departed from their usual data access procedures without explanation.

  • August 28, 2025

    SK Telecom Gets Record Fine For Massive Data Breach

    SK Telecom, the largest wireless carrier in South Korea, was fined a record 134.8 billion won (about $97 million) by South Korean regulators Wednesday after a data breach leaked phone numbers and other identifiers of more than 23 million users.

  • August 28, 2025

    Roblox, Discord Accused Of Failing To Protect 11-Year-Old

    Roblox and Discord have been hit with yet another lawsuit alleging the online platforms aren't safe for children and that they allow predators to groom youth, with the latest complaint filed by a Michigan woman who claims she was only 11 years old when she was exploited by an adult predator.

  • August 28, 2025

    Accounting Firm Sued Over Breach Of Easterseals Data

    A North Carolina-based accounting firm was hit with a class action on Thursday alleging it failed to protect personal information and health data of children, veterans and disabled people entrusted to it by Easterseals Inc.

  • August 28, 2025

    Longtime John Hancock Counsel Joins Prince Lobel In Boston

    Prince Lobel Tye LLP announced that a cybersecurity attorney with over 20 years of experience, including over a decade in-house at insurance company John Hancock, has joined the firm's Boston office as a partner.

  • August 27, 2025

    Google Expert Says Its Disclosures Avoid 'Cognitive Overload'

    Google's user-interface expert witness testified Wednesday in a multibillion-dollar data privacy case that Google's decision not to tell users up front that it collected some information despite an activated privacy switch was "good UI design" that protected users from "cognitive overload."

  • August 27, 2025

    US, Others Warn Of China-Backed Cyber Threats To Networks

    U.S. intelligence agencies and their international partners Wednesday put telecoms, transportation operators and other critical infrastructure providers on high alert about persistent efforts by Chinese state-sponsored hackers to gain long-term access to their essential networks worldwide. 

  • August 27, 2025

    47 AGs Push Search, Payment Platforms To Stop 'Deepfakes'

    A bipartisan coalition of 47 attorneys general called on search engine giants Google, Microsoft and Yahoo, as well as PayPal, Apple and other payment platforms, to step up their efforts to stop the spread of computer-generated "deepfake" images and videos, warning about the need to protect young internet users.

  • August 27, 2025

    Millionaire Dating Site Wins Privacy Arbitration Bid At 9th Circ.

    The Ninth Circuit has ruled that an Illinois man must arbitrate his claims that a dating service for millionaires unlawfully stored its users' "face templates," saying in an unpublished opinion that a California federal court did not look at the totality of the circumstances concerning the dating website's service agreement.

  • August 27, 2025

    10 Questions For New FCC Commissioner Olivia Trusty

    It's been a hectic summer for Olivia Trusty, who joined the Federal Communications Commission as its newest Republican in June. She met with Law360 on Tuesday in her first sit-down interview since taking office.

Expert Analysis

  • Series

    Law School's Missed Lessons: Learning From Failure

    Author Photo

    While law school often focuses on the importance of precision, correctness and perfection, mistakes are inevitable in real-world practice — but failure is not the opposite of progress, and real talent comes from the ability to recover, rethink and reshape, says Brooke Pauley at Tucker Ellis.

  • 23andMe Fine Signals ICO's New GDPR Enforcement Focus

    Author Photo

    Many of the cybersecurity failures identified by the Information Commissioner’s Office in its investigation of 23andMe, recently resulting in a £2.3 million fine, were basic lapses, but the ICO's focus on several new U.K. General Data Protection Regulation considerations will likely carry into the future, say lawyers at Womble Bond.

  • Midyear Rewind: How Courts Are Reshaping VPPA Standards

    Author Photo

    The first half of 2025 saw a series of cases interpreting the Video Privacy Protection Act as applied to website tracking technologies, including three appellate rulings deepening circuit splits on what qualifies as personally identifiable information and who qualifies as a consumer under the statute, say attorneys at Perkins Coie.

  • How The Healthline Privacy Settlement Redefines Ad Tech Use

    Author Photo

    The Healthline settlement is the first time California has drawn a clear line in the sand around how website tracking must function in practice, so if your site uses tracking technologies, especially around sensitive content like health or finance, regulators are inspecting your website's back end, not just its banner, say attorneys at Baker Donelson.

  • Series

    Adapting To Private Practice: From ATF Director To BigLaw

    Author Photo

    As a two-time boomerang partner, returning to BigLaw after stints as a U.S. attorney and the director of the Bureau of Alcohol, Tobacco, Firearms and Explosives, people ask me how I know when to move on, but there’s no single answer — just clearly set your priorities, says Steven Dettelbach at BakerHostetler.

  • New DOJ Penalty Policy Could Spell Trouble For Cos.

    Author Photo

    In light of the U.S. Department of Justice’s recently published guidance making victim relief a core condition of coordinated resolution crediting, companies facing parallel investigations must carefully calibrate their negotiation strategies to minimize the risk of duplicative penalties, say attorneys at Debevoise.

  • 5 Consumer Protection Compliance Issues In NY State Budget

    Author Photo

    Companies that engage with New York consumers should promptly familiarize themselves with new state budget provisions that require finance and retail companies to make certain business practices more transparent and easier for customers to execute, say attorneys at Mintz.

  • Balancing The Promises And Perils Of Tokenizing Securities

    Author Photo

    Tokenizing listed securities offers the promise of greater efficiency, accessibility and innovation, but a recent U.S. Securities and Exchange Commission statement makes clear that the federal securities laws continue to apply to tokenized securities, so financial institutions and technology developers must work together to create clear rules, say attorneys at Orrick.

  • High Court Cert Spotlights Varying Tests For Federal Removal

    Author Photo

    A recent decision by the U.S. Supreme Court to review Chevron v. Plaquemines Parish, a case involving the federal officer removal statute, highlights three other recent circuit court decisions raising federal removal questions, and serves as a reminder that defendants are the masters of removal actions, says Varun Aery at Hollingsworth.

  • How Cos. In China Can Tailor Compliance Amid FCPA Shifts

    Author Photo

    The U.S. Department of Justice’s recently updated Foreign Corrupt Practices Act enforcement guidelines create a fluid business environment for companies operating in China that will require a customized compliance approach to navigate both countries’ corporate and legal systems, say attorneys at Dickinson Wright.

  • Open Banking Is On Ice As CFPB Seeks To Toss Its Own Rule

    Author Photo

    Even as the Consumer Financial Protection Bureau's efforts to toss its open banking rule play out in Kentucky federal court, it remains statutorily required to effectuate consumer access to data, raising questions about how it would replace the previously finalized standard, say attorneys at Cooley.

  • Series

    Playing Baseball Makes Me A Better Lawyer

    Author Photo

    Playing baseball in college, and now Wiffle ball in a local league, has taught me that teamwork, mental endurance and emotional intelligence are not only important to success in the sport, but also to success as a trial attorney, says Kevan Dorsey at Swift Currie.

  • How US Cos. Should Prep For Brazil's Int'l Data Transfer Rules

    Author Photo

    Brazil's National Data Protection Authority's new rules concerning the processing and storing of Brazilians' personal data carry significant reputational risks for the e-commerce, financial services, education and health sectors, so U.S. companies with business in Brazil should prepare ahead of the Aug. 23 compliance date, says Juliane Chaves Ferreira at Guimarães & Vieira de Mello.

  • A Deep Dive Into 14 Nixed Gensler-Era SEC Rule Proposals

    Author Photo

    The U.S. Securities and Exchange Commission last month formally withdrew 14 notices of proposed rulemaking, including several significant and widely criticized proposals that had been issued under former Chair Gary Gensler's leadership, signaling a clear and definitive shift away from the previous administration, say attorneys at Dechert.

  • Series

    Law School's Missed Lessons: Skillful Persuasion

    Author Photo

    In many ways, law school teaches us how to argue, but when the ultimate goal is to get your client what they want, being persuasive through preparation and humility is the more likely key to success, says Michael Friedland at Friedland Cianfrani.

Want to publish in Law360?


Submit an idea

Have a news tip?


Contact us here
Can't find the article you're looking for? Click here to search the Cybersecurity & Privacy archive.