Expert Analysis

• Hugging Face Attack Is A Warning To The Securities Markets

  

  The recent Hugging Face cyberattack, in which OpenAI's artificial intelligence agents hacked a third party without human instruction, raises questions about how regulators could respond to a similar incident in the securities markets and whether there's a substitute for scienter if no person is behind a financial crime, says Joseph A. Hall at Davis Polk.

• Series

  Playing Bid Whist Makes Me A Better Lawyer

  

  As a child, I viewed bid whist as a family tradition and a source of friendly card game competition, but as a lawyer, I see it as a tool that has helped me cultivate skills like communication, teamwork, risk assessment and composure, says Keyonn Pope at Riley Safer.

• FCC Robotics Restrictions Raise AI Compliance Risks

  

  A recent "covered list" update from the Federal Communications Commission places restrictions on foreign-produced advanced robotic devices’ ability to obtain new authorizations, creating a framework that is poorly suited to continuous artificial intelligence updates, and raising several transactional and contractual challenges, says Kim Larsen at Stinson.

• AML Takes Center Stage In Financial Crime Enforcement

  

  Financial Crimes Enforcement Network actions, including its recent anti-money-laundering penalty against UBS, signal that companies should align sanctions and anti-corruption controls with documented risk assessments, quickly escalate and investigate red flags, and test remediation as enforcement intensifies, say attorneys at Bass Berry.

• Navigating Employer Obligations Under NY Personnel File Law

  

  In light of a New York law that will soon give private sector employees the right to review and comment on their personnel files, employers should understand where their exposure lies and be mindful of where records are stored, and for how long, among other things, says attorney Jason Tenenbaum.

• Banks Should Stay Disciplined As OCC, FDIC Ease Oversight

  

  Despite a newly issued Office of the Comptroller of the Currency and the Federal Deposit Insurance Corp. rule that narrows the range of conduct that regulators may require institutions to remediate, prudent risk management suggests banks should still document how they arrive at their risk determinations, say attorneys at Crowell & Moring.

• Opinion

  The Time Is Right To Simplify Overlapping Broker-Dealer Regs

  

  While the U.S. Securities and Exchange Commission has made an important start to simplifying its rules, legislators should follow and expand on the commission's example by reexamining and removing the unnecessary overlap between SEC, Financial Industry Regulatory Authority and state broker-dealer regulations, says Howard Spindel at Integrated Solutions.

• What Cos. Must Know As Fast Energy Permitting Gains Steam

  

  A recently approved geothermal project in Nevada may be the first authorized by the U.S. Bureau of Land Management under a new 14-day expedited environmental review process — but project developers may find that a more thorough environmental analysis will provide better protection against litigation challenges, says Jill Yung at Allen Matkins.

• Opinion

  Calif. Bill Goes Too Far In Trying To Regulate Attorney AI Use

  

  California’s first-in-the-nation act regulating how attorneys and arbitrators use generative artificial intelligence will likely soon become law, but read broadly, the provisions may dissuade lawyers from employing AI at all, thereby depriving them of key work tools, says Joshua Wurtzel at Schlam Stone.

• AI Rise In Healthcare Demands New Cybersecurity Strategies

  

  As artificial intelligence-related capabilities are increasingly integrated into medical devices and healthcare operations, organizations must adapt their compliance playbook to address evolving cybersecurity needs and implement lifecycle-based risk assessment approaches, say attorneys at Covington.

• The Preemption Gap In Prediction Market High Court Petitions

  

  The Supreme Court is considering three certiorari petitions following a split in prediction market litigation between the Third and Ninth circuits, but one of the petitions would not allow the court to reach the express preemption question, which would leave the dispute half-resolved, says Jordan Garman at Withers.

• How Data Center Projects Can Navigate Wyo. Siting Process

  

  As opposition to data center development grows nationwide, the way that Wyoming is handling the issue through its industrial siting process offers a counterintuitive lesson: More process, not less, can provide both meaningful scrutiny and a clear path forward for projects, says Jeffrey Pope at Holland & Hart.

• Tips From Apex Ruling On Handling Workers' Public Criticism

  

  A National Labor Relations Board judge’s recent finding that Apex Fintech Services illegally reined in an employee’s public criticism on LinkedIn should caution employers that overbroad policies and reflexive responses may not only fail to defend the company’s reputation, but compound risks of federal labor charges, say attorneys at Krevolin Horst.

• Series

  Fintech Regulator Outlook: 5 Lessons From Minnesota

  

  Minnesota's recent cryptocurrency kiosk ban and virtual currency custody rules hold several broad compliance lessons: Digital asset companies must map regulated activities, strengthen third-party oversight and engage regulators early to innovate responsibly, says Deputy Commissioner of Financial Institutions Mike Crow at the Minnesota Department of Commerce.

• Hims & Hers Suit Spotlights Health Data-Sharing Privacy Risks

  

  Regulators' complaint against telehealth company Hims & Hers alleging deceptive practices serves as a reminder that the privacy principles developed under consumer protection laws and predating omnibus statutes remain in force, and sensitive data governance continues to be a crucial component of compliance, say attorneys at Venable.