Expert Analysis

• 3 Steps To Mitigate The Cyber Risks From Employee AI Use

  

  Recent data showing a doubling in breaches tied to employee use of unapproved AI tools demonstrates a convergence of cybersecurity risk, data privacy exposure and legal liability that workplace policies don't often address, but business leaders can get ahead of these risks, say attorneys at Ogletree.

• AG Watch: Minnesota Takes Action To Secure Child Safety

  

  Minnesota Attorney General Keith Ellison has built one of the most aggressive and structurally coherent child protection enforcement programs in the country, targeting consumer-facing sectors that his office has concluded prey on minors, such as tobacco and nicotine, social media platforms, and artificial intelligence, say attorneys at Crowell & Moring.

• Series

  Being In The Peace Corps Made Me A Better Lawyer

  

  When I served in the Peace Corps, the people of the West African village where I was stationed helped me acclimate to my new surroundings and enabled me to develop problem-solving, teamwork and empathy skills that have bolstered my legal practice far beyond the ability to offer technical advice, says Brian Bewley at McGuireWoods.

• Immunity May Not Protect Gov't-Backed Cyber Operators

  

  Companies considering participation in a National Coordination Center program that authorizes private actors to conduct offensive cyber operations on the government’s behalf should understand the limits of sovereign immunity and the operational and legal risks lurking in the details and undefined parameters of the program, say attorneys at Steptoe.

• White House AI Accord Could Reshape Reasonable Care

  

  President Donald Trump's recent joint commitment on frontier responsibilities — signed by leaders of Google, Anthropic, Meta and more — may pose legal risks for nonsignatories, as businesses using artificial intelligence may find the accord's safeguards cited against them as evidence of what reasonable care requires, says Peter Schildkraut at Arnold & Porter.

• OCC Plan May Bring Data Sharing Flexibility, Diligence Issues

  

  The Office of the Comptroller of the Currency's recent proposal to overhaul its supervisory information sharing regime for the first time in decades would provide important flexibility to banks, but it could create new issues around confidentiality agreements, disclosure controls and diligence processes, say attorneys at Simpson Thacher.

• Protecting Trade Secrets When AI Agents Go Rogue

  

  In light of a recent incident in which artificial intelligence agents compromised parts of Hugging Face's production systems, and the uncertain court guidance surrounding liability in such situations, companies looking to update their trade secret protections should carefully examine agents' permissions and technical limitations, says Matt Nealon at Marshall Gerstein.

• Planning For D&O Exclusions As Risks Mount For Banks

  

  Banks should scrutinize directors and officers exclusions for artificial intelligence, disclosure and cybersecurity risks during policy renewal negotiations to preserve coverage amid the current uptick in insurer scrutiny and related shareholder litigation, say attorneys at Jones Walker.

• CFIUS Annual Report Reveals Enforcement Trends

  

  The Committee on Foreign Investment in the United States' recently published annual report to Congress shows that it is increasingly focused on nonnotified transactions, mandatory filing compliance, critical technologies and postclosing mitigation enforcement across the full life cycle transactions, say attorneys at Bass Berry.

• Series

  Fintech Regulator Outlook: Collaboration In North Dakota

  

  The recent speed of new digital asset products entering the market continues to introduce compliance challenges, so regulators and companies alike must examine the intersection of artificial intelligence, cybersecurity, collaboration and modernization to navigate regulatory complexity, says Lise Kruse at the North Dakota Department of Financial Institutions.

• Terminix Deal Shows Risks Of Calif. Aggregating Local Lapses

  

  California district attorneys’ novel use of an unfair competition law to merge unrelated local enforcement matters against pest control providers Rentokil and Terminix into one recently settled statewide case demonstrates that lack of adequate communication between facilities and corporate compliance managers may cause isolated regulatory violations to snowball into larger challenges, say attorneys at Kazmarek Mowrey.

• What Lawyers Should Know Before Accepting Crypto Payment

  

  As clients increasingly request to pay legal fees, retainers and escrow funds using cryptocurrency, lawyers should consider how only a handful of state bar authorities have addressed the issue with varying ethics opinions, as well as the related questions that no authority has yet answered, says attorney Felix Shipkevich.

• What To Know As State 'Neural Data' Privacy Laws Emerge

  

  Attorneys at Goodwin discuss new state laws aimed at regulating consumer data generated from nervous system activity, explain why neurotechnology is attracting state and federal legislators’ attention, and highlight the compliance obligations that industry players should address now.

• Data Sale In Spirit Bankruptcy Raises Novel Privacy Risks

  

  Spirit Airlines' planned sale of deidentified business data to Google for artificial intelligence training exposes gaps in the Bankruptcy Code's privacy guardrails, particularly for employee information, say attorneys at Patterson Belknap.

• Fighting Class Cert. In Wash. False Email Promo Cases

  

  Retailers facing a recent wave of class actions alleging their email promotions violated the Washington Commercial Electronic Mail Act may be able to demonstrate that sending individualized, customer-specific messages produced experiences too diverse to be adjudicated on a classwide basis, say attorneys at Benesch.