Expert Analysis

• Tort Liability When AI Goes Rogue: Product Liability

  

  The recent Hugging Face cyberattack led by artificial intelligence agents, as well as reports from AI companies themselves, suggest that sometimes there may be no reasonable way to predict or prevent harm by rogue agentic AI — but product liability law could provide a remedy in some cases, says Donald Hawthorne at Carter Ledyard.

• Right-To-Repair Laws Create Manufacturer Compliance Maze

  

  Without existing precedent to help interpret new right-to-repair laws, original equipment manufacturers must make careful judgments about how best to comply with conflicting state statutes — but several principles related to documentation, replacement products and more emerge from the patchwork, say attorneys at Faegre Drinker.

• 3 Strategies To Reduce AI Sycophancy In Legal Work

  

  The tendency of generative artificial intelligence models to tell users what they want to hear can reinforce attorneys’ confirmation bias when testing the strength of arguments, and it can’t simply be prompted away — but a few practices can help mitigate it, says Michael Ott at Ice Miller.

• AI Risks May Recalibrate 'Reasonable Security' Standards

  

  A definitive answer to what constitutes reasonable vulnerability management in the age of artificial intelligence is still emerging, but the answer is likely less a reset of the standard than a recalibration of how organizations meet it, say Scott Loughlin at Hogan Lovells and Mike Priest at Globe Life.

• Key Risk Assessment Gaps To Note From NY Cyber Guidance

  

  Covered entities should take a fresh look at the compliance gaps flagged in recent New York State Department of Financial Services guidance on "deficient cybersecurity programs," particularly around scope, asset inventories and documentation, say attorneys at Mayer Brown.

• Tort Liability When AI Goes Rogue: Strict Liability

  

  If artificial intelligence agents misbehave in unpredictable ways, and no reasonable precaution can prevent resulting harms, then a negligence regime may not provide sufficient remedy, and strict liability might be adapted to cover agents' misconduct — but the common notion of strict liability fits this situation imperfectly, says Donald Hawthorne at Carter Ledyard.

• Why Inter Partes Reviews May Be On The Rebound

  

  Recent inter partes review data shows that rates of referrals and institution rates at the U.S. Patent and Trademark Office are increasing, potentially indicating, among other reasons, that patent challengers are adjusting to the USPTO's policy changes, say attorneys at Sterne Kessler.

• 2nd Circ. EFAA Ruling Shifts Employer Litigation Strategy

  

  In Diaz-Roa v. Hermes Law, the Second Circuit recently held that, under the Ending Forced Arbitration of Sexual Assault and Sexual Harassment Act, employers can't carve out nonharassment claims and send them to arbitration, which has implications for discovery, litigation costs and resolution strategy in EFAA-covered disputes, say attorneys at Krevolin Horst.

• Tort Liability When AI Goes Rogue: Negligence Theory

  

  If reasonable care in the use of artificial intelligence agents cannot eliminate the risk of third-party harm, then AI companies and users of AI agents must consider whether negligence theory provides an adequate framework for assessing harm caused by agents that go rogue, says Donald Hawthorne at Carter Ledyard.

• 3 Steps To Mitigate The Cyber Risks From Employee AI Use

  

  Recent data showing a doubling in breaches tied to employee use of unapproved AI tools demonstrates a convergence of cybersecurity risk, data privacy exposure and legal liability that workplace policies don't often address, but business leaders can get ahead of these risks, say attorneys at Ogletree.

• 4 Steps For Cos. Amid Russia Sanctions Law Uncertainty

  

  Russian companies, their U.S. subsidiaries and businesses with Russian commercial relationships should take concrete steps to determine their exposure under ambiguous provisions of legislation that recently expanded the scope of U.S. sanctions, notwithstanding an Oct. 16 executive order waiving most of its restrictions, say attorneys at Wilk Auslander.

• How FCC Robocall Rules Reshape TCPA Opt-Out Compliance

  

  The Federal Communications Commission's recent changes to its Telephone Consumer Protection Act rules may simplify how businesses process consumer opt outs for robocalls and robotexts, but they also introduce nuances to the opt-out process that may be challenging to operationalize, say attorneys at Hunton.

• How NRC's New Rules Alter Foreign-Financed Reactor Deals

  

  New Nuclear Regulatory Commission rules for reactor licensing open U.S. nuclear projects to foreign capital, presenting new considerations for structuring governance, diligence and approvals to secure and maintain eligibility, says J. Brin Gibson at Spencer Fane.

• Managing Employer Risk Under Calif.'s No Robo Bosses Law

  

  California's No Robo Bosses Act marks the state's first statutory limit on using artificial intelligence in employee discipline and termination decisions, creating exposure for employers through its corroboration and notice requirements, burden-shifting framework, and potential reach under the Private Attorneys General Act, say attorneys at Reed Smith.

• AG Watch: Minnesota Takes Action To Secure Child Safety

  

  Minnesota Attorney General Keith Ellison has built one of the most aggressive and structurally coherent child protection enforcement programs in the country, targeting consumer-facing sectors that his office has concluded prey on minors, such as tobacco and nicotine, social media platforms, and artificial intelligence, say attorneys at Crowell & Moring.