CCPA Enforcement Reaches Record High: General Motor’s $12.75 Million Settlement
6/2/26
By: Jacob Berlinger and Josette Brooksbank
Companies that collect and monetize consumer data are facing increasing scrutiny under California’s privacy laws, as illustrated by a recent enforcement action against General Motors (GM). Regulators alleged that, while representing that it collected …
SECURE Data Act: Congress introduces new federal privacy framework
5/29/26
By: Jacob Berlinger & David Cole
On April 21, 2026, Representative John Joyce (R‑PA) introduced the Securing and Establishing Consumer Uniform Rights and Enforcement over Data Act (the “SECURE Data Act”) in the House of Representatives. The bill represents the …
Roll Privacy: Alabama enacts comprehensive Privacy Law
4/27/26
By: Jacob Berlinger & Josette Brooksbank
Alabama has joined the growing wave of states regulating consumer data privacy, becoming the 21st state to enact a comprehensive consumer data privacy statute. On April 16, 2026, Governor Kay Ivey signed the …
The Trump administration unveils national Artificial Intelligence framework
3/30/26
By: Jacob Berlinger and Michael Brown
On March 20, 2026, the Trump administration announced its Artificial Intelligence (“AI”) national legislative framework. This marks the first comprehensive federal blueprint for U.S. AI legislation after several years of fragmented efforts across agencies, …
California’s Anti-Spam law takes center stage in a growing wave of class action lawsuits
3/25/26
By: Jacob Berlinger and Sara Correa
Companies that rely on email marketing are facing increased scrutiny as plaintiffs’ firms file a surge of class action lawsuits alleging violations of California’s Anti-Spam Law, California Business and Professions Code § 17529.5. These …
White House unveils 2026 cyber strategy
3/12/26
By: Jacob Berlinger and Michele Focht
On March 6, 2026, President Donald Trump released his administration’s long-awaited cyber strategy outlining the federal government’s priorities for defending the United States in an increasingly contested digital environment. The strategy addresses the growing …
Key ECPA decision outlines important exceptions to the Wiretap Act
2/4/26
By: Michael Brown
On January 13, 2026, the U.S. District Court for the Northern District of Illinois issued a significant opinion in Lisota v. Heartland Dental, LLC and RingCentral, Inc., a case involving popular AI-enhanced recording tools in healthcare …
A first look at NIST’s new cyber AI framework
1/26/26
By: Jacob Berlinger and Jason Weiss
The National Institute of Standards and Technology (NIST) recently released their initial preliminary draft of NIST IR 8596, also known as the Cybersecurity Framework Profile for Artificial Intelligence. This new cybersecurity framework signals …
Indiana releases new Consumer Data Protection Bill of Rights
12/15/25
By: Jacob Berlinger and Jason G. Weiss
Indiana is preparing residents for the upcoming Indiana Consumer Data Protection Act (“CDPA”), which takes effect January 1, 2026, by releasing the Consumer Data Protection Bill of Rights (“CDPBR”). On November 25, 2025, …
Florida enters the privacy enforcement arena: Why companies need to take note
12/1/25
By: Jacob Berlinger and Zohar Peleg
The Sunshine State has officially stepped into the privacy-enforcement arena. On October 13, 2025, Florida Attorney General James Uthmeier announced that the Office of Parental Rights filed a civil enforcement action against Roku, Inc. …
Are you actually covered? A cyber insurance warning for real estate attorneys
12/1/25
By: William R. Covino and Nancy M. Reimer
For real estate practitioners, this might be the most important client alert you read this year. Imagine this scenario: you are a real estate closing attorney who has received the funds necessary …
India paves the way for functional and enforceable privacy laws with notification of the Digital Personal Data Protection Act rules
11/19/25
By: Jacob Berlinger and Alexia Roney
In 2023, India enacted the Digital Personal Data Protection Act (“DPDP Act”), the first standalone data protection legislation governing the requirements for collection and processing of digitized personal data. The DPDP Act is guided …