Cybersecurity & Privacy

  • October 29, 2026

    Judge 'Put Off' By Atty Fee Bid In $59.5M Menstrual App Deal

    A California federal judge said Thursday that he'll give final approval to a $59.5 million settlement resolving class claims over a menstrual tracking app sharing sensitive health data with Google, but he cut the $19 million attorney fee request by 5%, saying counsel is "taking money out of consumers' pockets."

  • October 29, 2026

    Meta Faces Senate Inquiry Over AI Glasses Privacy Risks

    Two Democratic senators on Thursday launched an investigation into allegations that Meta Platforms' "smart" glasses capture sensitive images of users and bystanders without their consent and use the data to train the tech giant's artificial intelligence models.

  • October 29, 2026

    NY Bars AI Chatbots From Using Emotional Tactics With Kids

    New York Gov. Kathy Hochul signed a law Wednesday that creates a regulatory framework restricting artificial intelligence chatbots' emotional interactions with minors, spurring swift pushback from business groups, which criticized the legislation for allegedly being unconstitutionally vague and overly broad.

  • October 29, 2026

    Binance Says It's Not Liable For Alleged Crypto Laundering

    Binance has asked a Florida federal judge to dismiss a consolidated suit accusing it of failing to prevent stolen funds from being moved through its platform, saying that even if it identified the suspicious transactions and reported them, that wouldn't have stopped criminals from stealing the crypto.

  • October 29, 2026

    Wash. Panel Says Man Didn't Possess Cached Abuse Image

    A Washington appeals court has reversed a man's conviction on one of four counts related to images of child sexual abuse, ruling he was incorrectly found to be in knowing possession of an image that was automatically saved to his computer's hard drive without his knowledge.

  • October 29, 2026

    FCC Agrees To Rules Targeting Some Foreign Test Labs

    The Federal Communications Commission voted Thursday to block recognition of equipment testing labs in countries that do not similarly recognize U.S.-based labs.

  • October 29, 2026

    Fed. Circ. Upholds Decision Wiping Out Cybersecurity Patent

    The Federal Circuit on Thursday affirmed a Patent Trial and Appeal Board decision holding that a patent covering methods of monitoring a system for cyberattack detection was invalid as obvious.

  • October 29, 2026

    Troutman, Baker McKenzie Report Data Breaches

    Troutman Pepper Locke LLP and Baker McKenzie experienced data breaches last month as a result of social engineering attacks, according to notices submitted this week to the attorneys general offices in California and Texas.

  • October 29, 2026

    Google Cut Worker's Duties After Military Leave, Feds Say

    Google failed to reinstate a former employee to a similar role after he returned from a yearlong stint in the U.S. Army's Cyber Command unit and eventually laid him off, according to a lawsuit the U.S. Department of Justice filed Thursday in Manhattan.

  • October 29, 2026

    US Bankruptcy Noticing System Back Up After Cyber Event

    A BAE Systems Inc. spokesperson said in a statement Thursday the nationwide Bankruptcy Noticing Center has resumed operations following a cybersecurity incident that had brought the system to a halt earlier this month.

  • October 29, 2026

    States Say GM Will Pay $220M To Settle Driver Privacy Claims

    Attorneys general said Thursday that General Motors will pay $220 million to three dozen states to settle claims that it illegally sold nearly 10.3 million drivers' behavior data and location information to third parties, including data brokers that passed it on to insurers.

  • October 29, 2026

    5th Circ. Will Review Texas Content-Filtering Law Ruling

    The Fifth Circuit has granted Texas' request for an en banc rehearing of a July panel opinion that partly upheld a block on the state's new law requiring companies to filter content for underage users.

  • October 28, 2026

    CFTC's Selig Vows 'Grounded' Oversight Of Agentic Finance

    U.S. Commodity Futures Trading Commission Chairman Michael Selig said Wednesday that his agency plans to take a "grounded" approach to agentic finance that's also mindful of the risks it poses and courted industry feedback on how to address the rise of artificial intelligence in derivative markets.

  • October 28, 2026

    Product Liability's Regulatory & Legislative Recap So Far

    Over the summer and early fall, lawmakers proposed measures aimed at putting safeguards around the rapidly growing industry of artificial intelligence, as public concerns over its safety climb in tandem. The new nominee to head the U.S. Food and Drug Administration also faced sharp queries over her views on vaccines and birth control.

  • October 28, 2026

    CFPB Audit Flags Cybersecurity Gaps Amid Staff Departures

    The Consumer Financial Protection Bureau has failed to promptly fix serious cyber weaknesses and consistently track data in its possession as staffing losses have hampered the agency's ability to safeguard its systems, according to a federal watchdog audit released Wednesday.

  • October 28, 2026

    Patients Seek OK Of Connecticut Rehab Data Breach Deal

    Patients accusing a Connecticut medical rehab network of waiting almost a year to disclose a cyberattack have asked a state court judge to preliminarily bless a deal that would provide about 61,000 people up to $2,500 in cash, plus $1 million in identity theft insurance.

  • October 28, 2026

    Jury Selection Starts In 2nd Social Media Bellwether In LA

    Jury selection began Wednesday in a California courtroom for the second bellwether trial focused on allegations that major social media companies are harming the mental health of children, with Meta Platforms Inc. returning to the defense table next to Snap Inc., which is facing jurors on the claims for the first time.

  • October 28, 2026

    Proskauer, Reddit Attys Called To Testify In Data-Scraping Suit

    A New York federal judge on Wednesday called for live testimony from two Proskauer Rose LLP attorneys and Reddit's deputy general counsel as he weighs the law firm's bid to represent Perplexity AI in a lawsuit from Reddit, the firm's former client, over alleged data scraping.

  • October 28, 2026

    Denver Law Firm Sued Over Delayed Data Breach Notice

    A Denver law firm was hit with a proposed class action in Colorado federal court Tuesday from an Oklahoma man accusing it of allowing his and thousands of others' personally identifiable information to be stolen in a cyberattack.

  • October 28, 2026

    FTC Probes Delta, Uber, Others Over Data-Driven Pricing

    The Federal Trade Commission is pressing Delta, Uber, Target and a half-dozen other companies to detail how they're using personal data to set individualized pricing for consumers and compensation for workers, marking the latest escalation of the agency's growing scrutiny of the increasingly prominent business practice.

  • October 28, 2026

    DOD Contractor Owes $1.2M In Whistleblower Suit, Jury Says

    An ex-employee of a U.S. Department of Defense contractor won a $1.2 million award after a Colorado federal jury found the contractor liable for wrongful discharge and violations of the Defense Contractor Whistleblower Protection Act, according to the final judgment, entered Wednesday. 

  • October 28, 2026

    Watchdog Seeks Privacy Guardian In Character.AI Ch. 11 Sale

    The U.S. Trustee's Office said a Delaware bankruptcy judge must appoint a consumer privacy ombudsman to review the sale of artificial intelligence entertainment platform Character Technologies' assets, saying its Character.AI platform includes identifiable information from users' chats.

  • October 28, 2026

    4th Circ. Judge Sees 'Big Brother' In Va. Social Media Limits

    A Fourth Circuit judge Wednesday expressed concern with a Virginia law limiting children's access to social media, telling counsel for the commonwealth that the provision has a "Big Brother atmosphere" to it and suggesting he'd back the district court's injunction halting enforcement of the regulation.

  • October 28, 2026

    Meta Wants Ex-WhatsApp Security Head's Suit Axed For Good

    Meta has urged a California federal judge to permanently dismiss a whistleblower retaliation suit from a former cybersecurity head for WhatsApp, saying the fourth version of his complaint repleads theories the court has tossed and still doesn't show the managers responsible for the alleged retaliation knew about his claimed protected activity.

  • October 28, 2026

    Texan Claims Austin Firm Hasn't Alerted Him To Data Breach

    Linebarger Goggan Blair & Sampson LLP, an Austin, Texas-based law firm focused on collecting debts and taxes for public-sector clients, failed to protect its clients' personal information from a data breach, the plaintiff in a proposed class action claimed in Texas federal court Tuesday.

Expert Analysis

  • Tort Liability When AI Goes Rogue: Strict Liability

    Author Photo

    If artificial intelligence agents misbehave in unpredictable ways, and no reasonable precaution can prevent resulting harms, then a negligence regime may not provide sufficient remedy, and strict liability might be adapted to cover agents' misconduct — but the common notion of strict liability fits this situation imperfectly, says Donald Hawthorne at Carter Ledyard.

  • Open Issues After 2nd Circ.'s Airport Phone Search Ruling

    Author Photo

    While the Second Circuit’s recent U.S. v. Alisigwe decision confirms border agents' broad authority to conduct routine manual cellphone searches at ports of entry, significant questions remain about more wide-ranging forensic searches at the border, say attorneys at Baker Botts.

  • FTC's Changing Model Raises Questions About Its Mission

    Author Photo

    Federal Trade Commission leaders have recently sketched a vision of an agency that continues an enforcement role distinct from the U.S. Department of Justice's, even as a shift toward greater presidential control makes enforcement more responsive to changes in administrations, say attorneys at Wiley.

  • 2nd Circ. EFAA Ruling Shifts Employer Litigation Strategy

    Author Photo

    In Diaz-Roa v. Hermes Law, the Second Circuit recently held that, under the Ending Forced Arbitration of Sexual Assault and Sexual Harassment Act, employers can't carve out nonharassment claims and send them to arbitration, which has implications for discovery, litigation costs and resolution strategy in EFAA-covered disputes, say attorneys at Krevolin Horst.

  • Tort Liability When AI Goes Rogue: Negligence Theory

    Author Photo

    If reasonable care in the use of artificial intelligence agents cannot eliminate the risk of third-party harm, then AI companies and users of AI agents must consider whether negligence theory provides an adequate framework for assessing harm caused by agents that go rogue, says Donald Hawthorne at Carter Ledyard.

  • Digging Into Dems' Letter On Subpoena Secrecy Demands

    Author Photo

    Lawmakers’ recent letter arguing that federal agencies’ use of boilerplate nondisclosure language in subpoenas pressures recipients into silence may lead to a significant overhaul of the current framework, but in the meantime, companies should review their rights and options, say attorneys at Crowell & Moring.

  • 3 Steps To Mitigate The Cyber Risks From Employee AI Use

    Author Photo

    Recent data showing a doubling in breaches tied to employee use of unapproved AI tools demonstrates a convergence of cybersecurity risk, data privacy exposure and legal liability that workplace policies don't often address, but business leaders can get ahead of these risks, say attorneys at Ogletree.

  • AG Watch: Minnesota Takes Action To Secure Child Safety

    Author Photo

    Minnesota Attorney General Keith Ellison has built one of the most aggressive and structurally coherent child protection enforcement programs in the country, targeting consumer-facing sectors that his office has concluded prey on minors, such as tobacco and nicotine, social media platforms, and artificial intelligence, say attorneys at Crowell & Moring.

  • Series

    Being In The Peace Corps Made Me A Better Lawyer

    Author Photo

    When I served in the Peace Corps, the people of the West African village where I was stationed helped me acclimate to my new surroundings and enabled me to develop problem-solving, teamwork and empathy skills that have bolstered my legal practice far beyond the ability to offer technical advice, says Brian Bewley at McGuireWoods.

  • Immunity May Not Protect Gov't-Backed Cyber Operators

    Author Photo

    Companies considering participation in a National Coordination Center program that authorizes private actors to conduct offensive cyber operations on the government’s behalf should understand the limits of sovereign immunity and the operational and legal risks lurking in the details and undefined parameters of the program, say attorneys at Steptoe.

  • White House AI Accord Could Reshape Reasonable Care

    Author Photo

    President Donald Trump's recent joint commitment on frontier responsibilities — signed by leaders of Google, Anthropic, Meta and more — may pose legal risks for nonsignatories, as businesses using artificial intelligence may find the accord's safeguards cited against them as evidence of what reasonable care requires, says Peter Schildkraut at Arnold & Porter.

  • OCC Plan May Bring Data Sharing Flexibility, Diligence Issues

    Author Photo

    The Office of the Comptroller of the Currency's recent proposal to overhaul its supervisory information sharing regime for the first time in decades would provide important flexibility to banks, but it could create new issues around confidentiality agreements, disclosure controls and diligence processes, say attorneys at Simpson Thacher.

  • Protecting Trade Secrets When AI Agents Go Rogue

    Author Photo

    In light of a recent incident in which artificial intelligence agents compromised parts of Hugging Face's production systems, and the uncertain court guidance surrounding liability in such situations, companies looking to update their trade secret protections should carefully examine agents' permissions and technical limitations, says Matt Nealon at Marshall Gerstein.

  • Planning For D&O Exclusions As Risks Mount For Banks

    Author Photo

    Banks should scrutinize directors and officers exclusions for artificial intelligence, disclosure and cybersecurity risks during policy renewal negotiations to preserve coverage amid the current uptick in insurer scrutiny and related shareholder litigation, say attorneys at Jones Walker.

  • CFIUS Annual Report Reveals Enforcement Trends

    Author Photo

    The Committee on Foreign Investment in the United States' recently published annual report to Congress shows that it is increasingly focused on nonnotified transactions, mandatory filing compliance, critical technologies and postclosing mitigation enforcement across the full life cycle transactions, say attorneys at Bass Berry.

Want to publish in Law360?


Submit an idea

Have a news tip?


Contact us here
Can't find the article you're looking for? Click here to search the Cybersecurity & Privacy archive.