Expert Analysis

• How DOJ's New Data Security Rules Leave HIPAA In The Dust

  

  The U.S. Department of Justice's recently effective data security requirements carry profound implications for how healthcare providers collect, store, share and use data — and approach vendor oversight — that go far beyond the Health Insurance Portability and Accountability Act, say attorneys at Nelson Mullins.

• Opinion

  Section 1983 Has Promise After End Of Nationwide Injunctions

  

  After the U.S. Supreme Court recently struck down the practice of nationwide injunctions in Trump v. Casa, Section 1983 civil rights suits can provide a better pathway to hold the government accountable — but this will require reforms to qualified immunity, says Marc Levin at the Council on Criminal Justice.

• Courts Redefining Software As Product Generates New Risks

  

  A recent wave of litigation against social media platforms, chatbot developers and ride-hailing companies has some courts straying from the traditional view of software as a service to redefining software as a product, with significant implications for strict liability exposure, say attorneys at Reed Smith.

• Trump's 2nd Term Puts Merger Remedies Back On The Table

  

  In contrast with the Biden administration, the second Trump administration has signaled a renewed willingness to resolve merger enforcement concerns through remedies from the outset, particularly when the proposed fix is structural, clearly addresses the harm and does not require burdensome oversight, say attorneys at Cooley.

• Patent Ambiguity Persists After Justices Nix Eligibility Appeal

  

  The Supreme Court recently declined to revisit the contentious framework governing patent eligibility by denying certiorari in Audio Evolution Diagnostics v. U.S., suggesting a necessary recalibration of both patent application and litigation strategies, say attorneys at Skadden.

• How Banks Can Harness New Customer ID Rule's Flexibility

  

  Banking regulators' update to the customer identification process, allowing banks to collect some information from third parties rather than directly from customers, helps modernize anti-money laundering compliance and carries advantages for financial institutions that embrace the new approach, say attorneys at Bradley Arant.

• Series

  Playing Soccer Makes Me A Better Lawyer

  

  Soccer has become a key contributor to how I approach my work, and the lessons I’ve learned on the pitch about leadership, adaptability, resilience and communication make me better at what I do every day in my legal career, says Whitney O’Byrne at MoFo.

• How Trump Cybersecurity EO Narrows Biden-Era Standards

  

  President Donald Trump recently signed Executive Order No. 14306, which significantly narrows the scope and ambition of a Biden executive order focused on raising federal cybersecurity standards among federal vendors, say attorneys at Jenner & Block.

• Opinion

  The SEC Should Embrace Tokenized Equity, Not Strangle It

  

  The U.S. Securities and Exchange Commission should grant no-action relief to firms ready to pilot tokenized equity trading, not delay innovation by heeding protectionist industry arguments, says J.W. Verret at George Mason University.

• Compliance Changes On Deck For Banks Under Texas AI Law

  

  Financial services companies, including banks and fintechs, should evaluate their artificial intelligence usage to prepare for Texas' newly passed law regulating AI governance, noting that the enforcement provisions provide for an affirmative defense to liability, say attorneys at Mitchell Sandler.

• Series

  Law School's Missed Lessons: Learning From Failure

  

  While law school often focuses on the importance of precision, correctness and perfection, mistakes are inevitable in real-world practice — but failure is not the opposite of progress, and real talent comes from the ability to recover, rethink and reshape, says Brooke Pauley at Tucker Ellis.

• 23andMe Fine Signals ICO's New GDPR Enforcement Focus

  

  Many of the cybersecurity failures identified by the Information Commissioner’s Office in its investigation of 23andMe, recently resulting in a £2.3 million fine, were basic lapses, but the ICO's focus on several new U.K. General Data Protection Regulation considerations will likely carry into the future, say lawyers at Womble Bond.

• Midyear Rewind: How Courts Are Reshaping VPPA Standards

  

  The first half of 2025 saw a series of cases interpreting the Video Privacy Protection Act as applied to website tracking technologies, including three appellate rulings deepening circuit splits on what qualifies as personally identifiable information and who qualifies as a consumer under the statute, say attorneys at Perkins Coie.

• Tips For Crypto AI Agent Developers Under SEC Watch

  

  With agents powered by artificial intelligence increasingly making decisions in the cryptocurrency world, there's a chance the U.S. Securities and Exchange Commission could use the Investment Advisers Act to regulate this technology in financial services, but there are ways developers can mitigate regulatory risks, say attorneys at Morrison Cohen.

• How The Healthline Privacy Settlement Redefines Ad Tech Use

  

  The Healthline settlement is the first time California has drawn a clear line in the sand around how website tracking must function in practice, so if your site uses tracking technologies, especially around sensitive content like health or finance, regulators are inspecting your website's back end, not just its banner, say attorneys at Baker Donelson.