Connecticut’s first CTDPA enforcement action – a critical reminder for businesses
7/30/25
By: Michael R. Brown and David A. Cole
The Connecticut attorney general announced its first public enforcement action under the Connecticut Data Privacy Act (“CTDPA”), resulting in an $85,000 settlement with TicketNetwork, Inc., for failing to comply with the law’s …
And we’re off! America’s AI action plan to win the AI race*
7/25/25
*Text below not written by AI!
We’ve come a long way since the race to space. The track is now set for the world’s race to AI dominance. To win this race, the White House released …
7/21/25
By: Cory A. Chipman
Introduction
The Cybersecurity and Infrastructure Security Agency (CISA), through its Joint Cyber Defense Collaborative (JCDC), published the Artificial Intelligence (AI) Cybersecurity Collaboration Playbook (The Playbook)1 and a fact sheet2 on Jan. 14, 2025. The …
Consent becoming a forceful defense at the motion to dismiss stage in privacy claims
7/2/25
By: Justin J. Boron and Michael R. Brown
In data privacy litigation, consent has traditionally been a fact-heavy issue decided at later stages of litigation. But recent rulings from federal courts suggest that this may be changing. In a shift …
6/24/25
It’s official: There’s a new sheriff in town when it comes to regulating the wild west of AI Governance that will arguably be the toughest in the nation. Texas Governor Greg Abbott signed the Texas Responsible AI …
Data doesn’t disappear. It just goes dark
6/12/25
Personally identifiable information, protected health information and other sensitive data don’t go into a black hole after they’re stolen. It goes on the Dark Web, which has become a reliable repository of PII and PHI. The …
A new sheriff in town?: Texas legislature passes the Texas Responsible AI Governance Act
6/11/25
There’s a new sheriff in town when it comes to regulating the wild west of AI Governance. The Texas legislature passed a new comprehensive AI law, H.B. 149, the Texas Responsible AI Governance Act (TRAIGA)…
Labcorp v. Davis: Pivotal SCOTUS decision may reshape the future of data breach class actions
5/30/25
By: Justin J. Boron, David A. Cole, Fredrick A. Hagen and Kevin M. Ringel
The future of data breach and consumer privacy class actions may hinge on the U.S. Supreme Court’s forthcoming decision in Labcorp v. Davis. …
Data tracking claims taking shape under CIPA
5/15/25
By: Justin J. Boron and Michael R. Brown
Whether by settlement or early dismissal, data-tracking claims have avoided significant judicial scrutiny. But the Torres v. Prudential Financial Inc. decision presents a result that could shape how these matters are litigated …
4/14/25
By: James G. Bozza and Kevin R. Stone
A Connecticut court recently found a law firm liable for failing to protect its email system following a breach, which led to a fraudster obtaining funds intended to finalize a real estate …
Key updates to CCPA fines and penalties for 2025
1/8/25
By: David A. Cole and Danielle A. Ocampo
The California Privacy Protection Agency (CPPA) has announced significant updates to the fines and penalties under the California Consumer Privacy Act (CCPA), effective January 1, 2025. These changes are part of the …
The price of consumer data: Marriott, Starwood, and the Federal Trade Commission
11/20/24
By: Zohar Peleg
On October 9, 2024, Marriott International, Inc. and its subsidiary, Starwood Hotels & Resorts Worldwide, LLC (collectively “Marriott”) agreed to a proposed settlement1 with the Federal Trade Commission (“FTC”) and a coalition of forty-nine state attorneys …