Cybersecurity & Privacy

  • May 15, 2024

    Flexibility In Info Security Policy May Add Compliance Burden

    New federal guidance for contractors handling sensitive, but unclassified information could introduce confusion and compliance burdens if agencies implement security controls without consulting contractors. 

  • May 15, 2024

    UnitedHealth Concealed DOJ Merger Investigation, Suit Says

    UnitedHealth Group has been hit with a proposed shareholder class action alleging that it failed to disclose that the U.S. Department of Justice had reopened an antitrust investigation into the health insurance giant following its acquisition of a healthcare data company, and that top executives had sold more than $120 million of shares knowing about the investigation before a news report revealed it to the public.

  • May 15, 2024

    En Banc 9th Circ. Will Mull Jurisdiction In Shopify Privacy Suit

    The Ninth Circuit agreed to review en banc a panel's decision dismissing a suit alleging payment processing company Shopify collects shoppers' sensitive information without permission, after the plaintiff argued the full court should hear the case to resolve how to assess personal jurisdiction in online misconduct cases.

  • May 15, 2024

    Anti-Trans Groups Fail To Block Wash. Youth Shelter Law

    A federal judge on Wednesday threw out a lawsuit filed by two anti-transgender groups challenging a Washington state law intended to ensure shelter for teens seeking gender-affirming care or reproductive health services, ruling that speculating on possible injury was not enough to clear a standing hurdle.

  • May 15, 2024

    FTC Chair Khan Defends Request For 25% Budget Increase

    Federal Trade Commission Chair Lina M. Khan defended a 25% budget increase request during a House appropriations hearing Wednesday, calling it "healthy" that aggressive Biden administration merger enforcement has made antitrust considerations top of mind for companies mulling transactions.

  • May 15, 2024

    House Panel Advances Tax-Exempt Org Oversight Bills

    The House Ways and Means Committee approved a package of bills Wednesday that would increase scrutiny of foreign donations to tax-exempt organizations, including legislation that would require those organizations to publicly report the donations.

  • May 15, 2024

    FCC Could Require ISP Reports On Internet Routing Security

    The Federal Communications Commission will vote on a plan next month to require the largest broadband providers to file confidential reports on security of the internet's main routing technology, the Border Gateway Protocol.

  • May 15, 2024

    Ex-FTX Exec Seeks Leniency, Saying He Was Kept In The Dark

    A former top FTX official has asked a Manhattan federal judge for a lenient 18-month sentence, saying he was not part of company co-founder Sam Bankman-Fried's inner circle and was as shocked as everyone else to learn that the crypto exchange was operating a fraud that siphoned billions in customer funds.

  • May 15, 2024

    Senators Release 'Road Map' For Crafting Federal AI Policy

    A bipartisan group of senators on Wednesday laid out a "road map" for artificial intelligence policy that calls for increased AI innovation funding, testing of potential harms posed by AI and consideration of the technology's workforce implications.

  • May 15, 2024

    Kirkland Guiding Billionaire McCourt On Bid To Buy TikTok

    Billionaire Frank McCourt, advised by Kirkland & Ellis, says he's building a consortium to purchase TikTok and redesign the platform to eliminate the collection of users' information, putting "people in control of their [own] digital identities and data." 

  • May 15, 2024

    Mortgage Co.'s $2.4M Data Breach Settlement Gets Initial OK

    A Connecticut federal judge gave her initial sign-off to a $2.4 million settlement between mortgage firm Planet Home Lending LLC and a consolidated class of customers whose personal data, including their Social Security numbers, was exposed in a cyberattack.

  • May 14, 2024

    Gunster Data Breach Affected 9K Clients' Data, Suit Says

    A former client of Gunster Yoakley & Stewart PA has filed a proposed class action in Florida federal court, alleging the law firm's weak cybersecurity systems allowed outsiders to access clients' personal and sensitive health information and that the firm waited over a year to inform those affected.

  • May 14, 2024

    Davis Wright-Led TikTok Creators Challenge Potential Ban

    Following TikTok Inc.'s lead, a group of creators on Tuesday lodged their own challenge to a new federal law that would exclude the popular app from the U.S. market unless it cuts ties with its Chinese parent company, telling the D.C. Circuit that the measure undermines the First Amendment.

  • May 14, 2024

    Telecoms Settle FCC Probe Into Undersea Cables For $2M

    Two telecoms will pay $1 million each to resolve a Federal Communications Commission probe into an undersea cable system that connected the U.S. with Colombia and Costa Rica without FCC approval.

  • May 14, 2024

    Chamber Cautions FCC Against Making Anti-Arbitration Rules

    Business leaders told the Federal Communications Commission that it cannot bar wireless providers from requiring arbitration clauses with customers to resolve disputes arising from cellphone SIM card and port-out fraud.

  • May 14, 2024

    NIST Finalizes Revised Security Guidelines For Sensitive Info

    The National Institute of Standards and Technology on Tuesday released a final version of revised guidelines for contractors and other entities who handle sensitive unclassified federal information, intended to clarify and streamline those requirements.

  • May 14, 2024

    Casino App User Can't Hide Arbitration Details, Chancery Says

    A mobile app slot-machine player who lost an arbitration dispute with the game's operator may not keep the details of the arbitration award confidential in Delaware court filings, a Chancery Court vice chancellor said Tuesday, denying a request for ongoing confidential treatment.

  • May 13, 2024

    11th Circ. Says Class Attys Self-Dealt In $35M TCPA Settlement

    The Eleventh Circuit on Monday dismissed a proposed $35 million settlement of a class action alleging GoDaddy.com violated the Telephone Consumer Protection Act by sending unwanted marketing texts, saying the deal may have come by through nefarious means.

  • May 13, 2024

    Vt. On Brink Of Enacting Privacy Bill With Lawsuit Mechanism

    The Vermont legislature has sent to the governor's desk a comprehensive data privacy bill that would not only require companies to scale back their data collection efforts and ramp up safeguards for children, but also give consumers the rare opportunity to sue large businesses that violate the law in certain circumstances. 

  • May 13, 2024

    Student Loan Servicer Faces Suit Over Tax Form Data Breach

    An education-focused subsidiary of payment processor Global Payments Inc. faces a proposed class action accusing it of negligence after it disclosed that part of its website allowed bad actors unfettered access to certain student tax documents for months at a time.

  • May 13, 2024

    SEC, FinCEN Propose Money Manager Customer ID Rule

    The U.S. Securities and Exchange Commission and the Treasury Department's Financial Crimes Enforcement Network on Monday proposed a rule that would require money managers such as hedge funds and private equity firms to document and maintain customer identification programs.

  • May 13, 2024

    FTC Can't Modify $5B Meta Privacy Deal, DC Circ. Told

    Meta Platforms Inc. told the D.C. Circuit on Monday that the Federal Trade Commission lacks the ability to unilaterally modify a $5 billion privacy settlement, contending that the courts are the ones responsible for enforcing the agreement.

  • May 13, 2024

    Wash. Hospital Scores Exit In Facebook Privacy Suit, For Now

    A Washington federal judge has tossed a proposed class action accusing a Seattle-area hospital of sharing patients' confidential health information by using Facebook browser tracking tools, ruling on Monday the plaintiff has failed to show that her own private information was input into the website and shared with a third party.

  • May 13, 2024

    50 Cent, GC Accused Of Federal Wiretap Violations

    A liquor business consultant has told a New York state court that Curtis "50 Cent" Jackson and the rapper's general counsel violated federal and New Jersey wiretap statutes, after the court dismissed an earlier counterclaim lodged under the Illinois Eavesdropping Act.

  • May 13, 2024

    FCC Looks To Declaw 'Royal Tiger' Global Robocall Network

    The Federal Communications Commission says that a gateway provider known for helping funnel illegal robocalls into the United States is once again back to its old tricks and operating under yet another name, this time Royal Tiger.

Expert Analysis

  • The Art Of Asking: Leveraging Your Contacts For Referrals

    Author Photo

    Though attorneys may hesitate to ask for referral recommendations to generate new business, research shows that people want to help others they know, like and trust, so consider who in your network you should approach and how to make the ask, says Rebecca Hnatowski at Edwards Advisory.

  • Compliance Strategies To Mitigate 3 New Areas Of AI Risk

    Author Photo

    The era of artificial intelligence-assisted corporate crime is here, but several concrete mitigation strategies can allow companies to address the new, rapidly evolving threats posed by deepfakes, information barrier evasion and AI model manipulation, say attorneys at Debevoise.

  • How Cos. Can Prep For New Calif. Privacy Regulations

    Author Photo

    The California Privacy Protection Agency has been very active in the first quarter of 2024 and continues to exercise its rulemaking authority with proposed draft regulations, so retailers should prepare for California Consumer Privacy Act enforcement and figure out how best to comply, say attorneys at Dentons.

  • 9th Circ. Arbitration Ruling Could Have Int'l Implications

    Author Photo

    In Patrick v. Running Warehouse, the Ninth Circuit's recent matter-of-fact invocation of an unusual California rule in a domestic arbitration context raises choice of law questions, and could make California law a strategic option for some international arbitration parties, says Jerry Roth at FedArb.

  • Series

    Being An Equestrian Makes Me A Better Lawyer

    Author Photo

    Beyond getting experience thinking on my feet and tackling stressful situations, the skills I've gained from horseback riding have considerable overlap with the skills used to practice law, particularly in terms of team building, continuing education, and making an effort to reset and recharge, says Kerry Irwin at Moore & Van Allen.

  • Opinion

    Cyber Regulators Should Rely On Existing Sources Cautiously

    Author Photo

    New incident reporting rules proposed by the Cybersecurity and Infrastructure Security Agency illustrate how the use of definitions, standards and approaches from existing sources can create a complex patchwork of regulations, demonstrating that it is essential for agencies to be clear about expectations and not create unnecessary confusion, says Megan Brown at Wiley.

  • 4 Ways To Refresh Your Law Firm's Marketing Strategy

    Author Photo

    With many BigLaw firms relying on an increasingly obsolete marketing approach that prioritizes stiff professionalism over authentic connection, adopting a few key communications strategies to better connect with today's clients and prospects can make all the difference, say Eric Pacifici and Kevin Henderson at SMB Law.

  • Tips For Balanced Board Oversight After A Cyberincident

    Author Photo

    The U.S. Securities and Exchange Commission's cybersecurity disclosure rules, as well as recent regulatory enforcement actions bringing board governance under scrutiny, continue to push boards toward active engagement in relation to their cyber-oversight role, despite it being unclear what a board's level of involvement should be, say attorneys at Alston & Bird.

  • What Cos. Are Reporting Under New SEC Cybersecurity Rule

    Author Photo

    Four months after its effective date, 14 companies have made disclosures under the U.S. Securities and Exchange Commission's mandatory cybersecurity incident reporting rule, and some early trends are emerging, including a possible rush to file, say attorneys at Debevoise.

  • Data Protection Steps To Consider After Biden Privacy Order

    Author Photo

    A recent White House executive order casts a spotlight on the criticality of securing sensitive content communications, presenting challenges and necessitating a recalibration of practices, especially for lawyers, says Camilo Artiga-Purcell at Kiteworks.

  • The Future Of BIPA Insurance Litigation After Visual Pak

    Author Photo

    A recent Illinois appellate court decision, National Fire Insurance v. Visual Pak, may have altered the future of insurance litigation under the state's Biometric Information Privacy Act by diametrically opposing a prominent Seventh Circuit ruling that found insurance coverage for violations of the act, say attorneys at Jenner & Block.

  • Consumer Privacy Takeaways From FTC Extraterritorial Action

    Author Photo

    With what appears to be its first privacy-related consent agreement with a non-U.S. business, the Federal Trade Commission establishes that its reach is extraterritorial and that consumer internet browsing data is sensitive data, and there are lessons for any multinational business that handles consumer information, say Olivia Greer and Alexis Bello at Weil.

  • Series

    Whitewater Kayaking Makes Me A Better Lawyer

    Author Photo

    Whether it's seeing clients and their issues from a new perspective, or staying nimble in a moment of intense challenge, the lessons learned from whitewater kayaking transcend the rapids of a river and prepare attorneys for the courtroom and beyond, says Matthew Kent at Alston & Bird.

  • Navigating Kentucky's New Consumer Privacy Law

    Author Photo

    On April 4, Kentucky passed a new law that imposes obligations on affected businesses relating to the collection, use and sale of personal data — and those operating within the state must prepare for a new regulatory landscape governing the handling of consumer data, say Risa Boerner and Martha Vázquez at Fisher Phillips.

  • This Earth Day, Consider How Your Firm Can Go Greener

    Author Photo

    As Earth Day approaches, law firms and attorneys should consider adopting more sustainable practices to reduce their carbon footprint — from minimizing single-use plastics to purchasing carbon offsets for air travel — which ultimately can also reduce costs for clients, say M’Lynn Phillips and Lisa Walters at IMS Legal Strategies.

Want to publish in Law360?


Submit an idea

Have a news tip?


Contact us here
Can't find the article you're looking for? Click here to search the Cybersecurity & Privacy archive.
Hello! I'm Law360's automated support bot.

How can I help you today?

For example, you can type:
  • I forgot my password
  • I took a free trial but didn't get a verification email
  • How do I sign up for a newsletter?
Ask a question!