Cybersecurity & Privacy

  • July 30, 2025

    Sens. Step Up Push For Data Privacy Law Amid AI's Rise

    The leaders of a Senate data privacy subcommittee Wednesday put the spotlight back on longstanding efforts to craft a nationwide framework for how companies use and disclose consumers' personal information, arguing that a growing state law patchwork and the rise of artificial intelligence accelerated the need for such protections.

  • July 30, 2025

    Tornado Was A One-Stop Crypto Laundering Shop, Jury Told

    Manhattan federal prosecutors Wednesday made their final arguments in the money laundering and sanctions trial of Tornado Cash co-founder Roman Storm, claiming the cryptocurrency tumbler's privacy-focused ethos was just a fig leaf for dirty money that flowed through its "fancy online laundromat."

  • July 30, 2025

    Flo Likely To Get Health Privacy Claim Tossed In Meta Case

    The California federal judge overseeing a trial on allegations that Flo Health and Meta Platforms Inc. violated the privacy of millions of women who used Flo's period tracker app said Wednesday he'd likely toss the California Confidentiality of Medical Information Act claim, saying the lack of evidence is an "unsurmountable" problem.

  • July 30, 2025

    Illumina To Pay $9.8M To Resolve Cybersecurity Qui Tam Case

    Biotechnology company Illumina Inc. has agreed to pay $9.8 million in a settlement with the U.S. Department of Justice to put to rest a first-of-its-kind False Claims Act suit alleging the company violated cybersecurity regulations for medical devices, according to an announcement Wednesday.

  • July 30, 2025

    E-Commerce Firms To Pay $15M To End FTC's AI Scam Claims

    A New Jersey-based network of e-commerce coaching firms will pay more than $15 million to end a Federal Trade Commission suit accusing it of duping consumers out of nearly $16 million through false promises of AI-driven success on e-commerce platforms, according to a federal court order filed Wednesday.

  • July 30, 2025

    Cash App Parent's $12.5M Spam Text Settlement Gets 1st OK

    A Washington federal judge has granted preliminary approval to Cash App parent Block Inc.'s $12.5 million class action settlement with customers who alleged they were bombarded with "annoying and harassing spam texts" from the company. 

  • July 30, 2025

    TMX Customers Seek Final OK Of $42M Data Breach Suit Deal

    Customers of the title loan and payday lender TMX Finance have asked a Georgia federal judge to grant final approval of their $42 million settlement of claims arising from a data breach that affected an estimated 4.8 million people.

  • July 30, 2025

    AMC's Status As Movie Theater Sinks Video Data Privacy Suit

    A Kansas federal judge has tossed a proposed class action accusing AMC Entertainment Holdings Inc. of unlawfully sharing website visitors' data with Facebook, agreeing with the Ninth Circuit and several district courts that have found that movie theaters aren't covered by the Video Privacy Protection Act. 

  • July 30, 2025

    'Scattershot' Privacy Suit Over Gap Email Tracking Gets Nixed

    A California federal judge has tossed a proposed class action alleging that Gap Inc. invaded consumers' privacy by using third-party tracking technology in its marketing emails, criticizing the plaintiff's "continuously shapeshifting" theories of liability and saying he "expects more from counsel than the scattershot and vague assertions presented here."

  • July 30, 2025

    US Adds 40% Tariff On Brazil, Sanctions Top Court Justice

    President Donald Trump imposed a 40% tariff on Brazil on Wednesday, alleging in an executive order that the country's Supreme Court is "politically persecuting" former President Jair Bolsonaro, while the U.S. Treasury Department sanctioned one of the court's justices.

  • July 30, 2025

    11th Circ. Considers If TCPA's Fax Provisions Are 'Procedural'

    A doctor who sued two medical providers for allegedly sending more than 14,000 unsolicited fax advertisements in 2022 urged the Eleventh Circuit to overturn a district court's denial of class certification, arguing the lower court wrongly found users of online fax services lack standing to sue under the Telephone Consumer Protection Act. 

  • July 30, 2025

    Gov't Contracting Policies To Watch In The 2nd Half Of 2025

    A planned overhaul of the Federal Acquisition Regulation and the implementation of a fee-shifting provision for unsuccessful U.S. Government Accountability Office bid protests headline a slate of policy initiatives for government contractors to watch for during the second half of this year.

  • July 30, 2025

    4 Firms Steer Palo Alto Networks' $25B CyberArk Buy

    Cybersecurity giant Palo Alto Networks revealed plans Wednesday to acquire identity security company CyberArk in a cash-and-stock megadeal valued at $25 billion and built by four law firms.

  • July 30, 2025

    Samourai Wallet Execs Cop To Money-Transmitting Charges

    Two Samourai Wallet executives told a Manhattan federal judge Wednesday that they facilitated bitcoin transfers derived from criminal activity, pleading guilty to scheming to use their crypto-mixer as an unlicensed money transmitter but avoiding a more serious money-laundering conspiracy count.

  • July 30, 2025

    Former NASCAR Employee Sues Over Data Breach

    A former NASCAR employee is spearheading a proposed class action against the racing organization in Florida federal court over its failure to prevent a data breach that saw the theft of sensitive user information.

  • July 29, 2025

    States Sue To Block Feds' Demand For Benefit Recipient Data

    Nearly two dozen state attorneys general are fighting the USDA's directive for states to turn over private information about millions of food assistance benefit recipients, arguing in a new lawsuit filed in California federal court that this demand violates multiple privacy laws and the U.S. Constitution.

  • July 29, 2025

    Tornado Founder Rests Case In $1B Crypto Laundering Trial

    Tornado Cash co-founder Roman Storm on Tuesday rested his defense case, without taking the stand, in a trial over allegations that he and others facilitated the laundering of more than $1 billion via the cryptocurrency tumbler and ran afoul of U.S. sanctions on North Korea.

  • July 29, 2025

    SEC Greenlights 'In-Kind' Redemptions For Crypto ETPs

    The U.S. Securities and Exchange Commission voted Tuesday to approve orders to allow cryptocurrency-based exchange-traded products to use in-kind creations and redemptions, aligning with more traditional ETPs.

  • July 29, 2025

    Email Hack Info Dooms Coverage Bid For Fraudulent Payment

    A trial court that excused a construction management company's insurer from covering a $673,000 reimbursement claim otherwise characterized as a negligent contract breach was right to let a company representative's unreferenced summary about an email hack factor into its decision, a split Illinois appellate panel said Monday.

  • July 29, 2025

    Crypto Mixer Execs To Change Plea In Samourai Wallet Case

    The two co-founders of crypto mixer Samourai Wallet told a New York federal judge on Tuesday that they intend to change their not guilty pleas after initially fighting charges that they facilitated over $2 billion in unlawful transactions.

  • July 29, 2025

    Senate Dem Presses Musk On Starlink Use In Scams

    Elon Musk is facing questions from a Democratic U.S. senator concerning the possible use of Starlink by South Asian criminal organizations to run sweeping scams against Americans.

  • July 29, 2025

    Limited Run Games Customers Seek OK Of $2.7M VPPA Deal

    Limited Run Games inked a $2.72 million settlement in a proposed class action alleging it illegally shared customers' personally identifiable information and video-viewing history with Meta Platforms Inc. through a tracking pixel embedded on its website, according to a preliminary approval motion filed in New York federal court.

  • July 29, 2025

    Some OpenAI Defenses Nixed In 'Over-Litigated' Musk Suit

    A California federal judge briefly took Elon Musk and OpenAI to task on Tuesday, in an order summarily nixing some of the ChatGPT-maker's affirmative defenses against the billionaire's lawsuit challenging plans to change its corporate structure.

  • July 29, 2025

    7th Circ. Backs Ex-CTA Worker's Sanction Over Deleted Chats

    The Seventh Circuit has affirmed a lower court's dismissal of a former Chicago Transit Authority employee's retaliation lawsuit as a sanction for spoiling evidence, saying his explanation about how electronic phone messages were deleted changed over time and concluding that he wasn't entitled to an evidentiary hearing or jury review.

  • July 29, 2025

    Calif. Privacy Agency Fines Data Broker For Skirting Registry

    The California Privacy Protection Agency on Tuesday announced its latest enforcement action under a groundbreaking state data deletion law, imposing a more than $55,000 fine on a Washington-based data broker on allegations it failed to fulfill its registration obligations last year. 

Expert Analysis

  • How Trump Cybersecurity EO Narrows Biden-Era Standards

    Author Photo

    President Donald Trump recently signed Executive Order No. 14306, which significantly narrows the scope and ambition of a Biden executive order focused on raising federal cybersecurity standards among federal vendors, say attorneys at Jenner & Block.

  • Opinion

    The SEC Should Embrace Tokenized Equity, Not Strangle It

    Author Photo

    The U.S. Securities and Exchange Commission should grant no-action relief to firms ready to pilot tokenized equity trading, not delay innovation by heeding protectionist industry arguments, says J.W. Verret at George Mason University.

  • And Now A Word From The Panel: Back In Action

    Author Photo

    A lack of new petitions at the May hearing session of the Judicial Panel on Multidistrict Litigation caught many observers' attention — but a rapid uptick in petitions scheduled to be heard at this week's session illustrates how panel activity always ebbs and flows, says Alan Rothman at Sidley.

  • Compliance Changes On Deck For Banks Under Texas AI Law

    Author Photo

    Financial services companies, including banks and fintechs, should evaluate their artificial intelligence usage to prepare for Texas' newly passed law regulating AI governance, noting that the enforcement provisions provide for an affirmative defense to liability, say attorneys at Mitchell Sandler.

  • Series

    Law School's Missed Lessons: Learning From Failure

    Author Photo

    While law school often focuses on the importance of precision, correctness and perfection, mistakes are inevitable in real-world practice — but failure is not the opposite of progress, and real talent comes from the ability to recover, rethink and reshape, says Brooke Pauley at Tucker Ellis.

  • 23andMe Fine Signals ICO's New GDPR Enforcement Focus

    Author Photo

    Many of the cybersecurity failures identified by the Information Commissioner’s Office in its investigation of 23andMe, recently resulting in a £2.3 million fine, were basic lapses, but the ICO's focus on several new U.K. General Data Protection Regulation considerations will likely carry into the future, say lawyers at Womble Bond.

  • Midyear Rewind: How Courts Are Reshaping VPPA Standards

    Author Photo

    The first half of 2025 saw a series of cases interpreting the Video Privacy Protection Act as applied to website tracking technologies, including three appellate rulings deepening circuit splits on what qualifies as personally identifiable information and who qualifies as a consumer under the statute, say attorneys at Perkins Coie.

  • How The Healthline Privacy Settlement Redefines Ad Tech Use

    Author Photo

    The Healthline settlement is the first time California has drawn a clear line in the sand around how website tracking must function in practice, so if your site uses tracking technologies, especially around sensitive content like health or finance, regulators are inspecting your website's back end, not just its banner, say attorneys at Baker Donelson.

  • Series

    Adapting To Private Practice: From ATF Director To BigLaw

    Author Photo

    As a two-time boomerang partner, returning to BigLaw after stints as a U.S. attorney and the director of the Bureau of Alcohol, Tobacco, Firearms and Explosives, people ask me how I know when to move on, but there’s no single answer — just clearly set your priorities, says Steven Dettelbach at BakerHostetler.

  • New DOJ Penalty Policy Could Spell Trouble For Cos.

    Author Photo

    In light of the U.S. Department of Justice’s recently published guidance making victim relief a core condition of coordinated resolution crediting, companies facing parallel investigations must carefully calibrate their negotiation strategies to minimize the risk of duplicative penalties, say attorneys at Debevoise.

  • 5 Consumer Protection Compliance Issues In NY State Budget

    Author Photo

    Companies that engage with New York consumers should promptly familiarize themselves with new state budget provisions that require finance and retail companies to make certain business practices more transparent and easier for customers to execute, say attorneys at Mintz.

  • Balancing The Promises And Perils Of Tokenizing Securities

    Author Photo

    Tokenizing listed securities offers the promise of greater efficiency, accessibility and innovation, but a recent U.S. Securities and Exchange Commission statement makes clear that the federal securities laws continue to apply to tokenized securities, so financial institutions and technology developers must work together to create clear rules, say attorneys at Orrick.

  • High Court Cert Spotlights Varying Tests For Federal Removal

    Author Photo

    A recent decision by the U.S. Supreme Court to review Chevron v. Plaquemines Parish, a case involving the federal officer removal statute, highlights three other recent circuit court decisions raising federal removal questions, and serves as a reminder that defendants are the masters of removal actions, says Varun Aery at Hollingsworth.

  • How Cos. In China Can Tailor Compliance Amid FCPA Shifts

    Author Photo

    The U.S. Department of Justice’s recently updated Foreign Corrupt Practices Act enforcement guidelines create a fluid business environment for companies operating in China that will require a customized compliance approach to navigate both countries’ corporate and legal systems, say attorneys at Dickinson Wright.

  • Open Banking Is On Ice As CFPB Seeks To Toss Its Own Rule

    Author Photo

    Even as the Consumer Financial Protection Bureau's efforts to toss its open banking rule play out in Kentucky federal court, it remains statutorily required to effectuate consumer access to data, raising questions about how it would replace the previously finalized standard, say attorneys at Cooley.

Want to publish in Law360?


Submit an idea

Have a news tip?


Contact us here