Expert Analysis

• CrowdStrike Incident Highlights Third-Party Risk For Banks

  

  The global business disruptions caused by CrowdStrike's faulty software update last month serves as a reminder that banks should assess operational and compliance risks associated with third-party service providers and create resiliency plans extending down to fourth- and fifth-level providers, says Craig Landrum at Jones Walker.

• Foreign Threat Actors Pose Novel Risks To US Tech Cos.

  

  A recent bulletin jointly issued by several U.S. intelligence agencies warns technology startups and the venture capital community about national security risks posed by foreign threat actors, so companies interested in raising foreign capital should watch for several red flags, say Robert Friedman and Jacob Marco at Holland & Knight.

• Replacing The Stigma Of Menopause With Law Firm Support

  

  A large proportion of the workforce is forced to pull the brakes on their career aspirations because of the taboo surrounding menopause and a lack of consistent support, but law firms can initiate the cultural shift needed by formulating thoughtful workplace policies, says Barbara Hamilton-Bruce at Simmons & Simmons.

• Class Actions At The Circuit Courts: August Lessons

  

  In this month's review of class action appeals, Mitchell Engel at Shook Hardy considers certification cases touching on classwide evidence of injury from debt collection practices, defining coupon settlements under the Class Action Fairness Act, proper approaches for evaluating attorney fee awards in class action settlements, and more.

• Planning Law Firm Content Calendars: What, When, Where

  

  During the slower month of August, law firms should begin working on their 2025 content calendars, planning out a content creation and distribution framework that aligns with the firm’s objectives and maintains audience engagement throughout the year, says Jessica Kaplan at Legally Penned.

• 4 Steps To Address New Sanctions Time Bar Extension

  

  Recent guidance from the Office of Foreign Assets Control clarifies details of the newly extended statute of limitations for civil and criminal enforcement of U.S. sanctions law, so compliance teams should implement key updates, including to lookback periods and recordkeeping policies, say attorneys at Freshfields.

• Incident Response Lessons From The CrowdStrike Failure

  

  CrowdStrike's incident highlights a growing problem within modern digital infrastructures — single points of failure that cause widespread disruption when things go wrong — so organizations should carefully review their digital infrastructure to identify unique areas of exposure or vulnerability, say Erik Dullea at Husch Blackwell and Kip Boyle at Cyber Risk Opportunities.

• Series

  Playing Golf Makes Me A Better Lawyer

  

  Golf can positively affect your personal and professional life well beyond the final putt, and it’s helped enrich my legal practice by improving my ability to build lasting relationships, study and apply the rules, face adversity with grace, and maintain my mental and physical well-being, says Adam Kelly at Venable.

• What FCA Cases May Look Like In The Age Of Generative AI

  

  Generative artificial intelligence raises unique considerations both in the context of potentially leading to False Claims Act cases and in the discovery and litigation phases of these lawsuits, says attorney Rachel Rose.

• Law Firms Should Move From Reactive To Proactive Marketing

  

  Most law firm marketing and business development teams operate in silos, leading to an ad hoc, reactive approach, but shifting to a culture of proactive planning — beginning with comprehensive campaigns — can help firms effectively execute their broader business strategy, says Paul Manuele at PR Manuele Consulting.

• 3 Ways To Limit Risks Of Black-Box AI In Financial Services

  

  As regulators increasingly highlight the potential for artificial intelligence to make unfair consumer credit decisions, and require financial institutions to explain how these so-called black-box algorithms arrive at conclusions, companies should consider three key questions to reduce their regulatory risks from these tools, say Jeffrey Naimon and Caroline Stapleton at Orrick.

• Takeaways From EU's 'Pay Or Consent' Advertising Probe

  

  Anne-Gabrielle Haie and Charles Whiddington at Steptoe examine key points from the European Commission's recent investigation into Big Tech's use of "pay or consent" advertising models, as well as the European Data Protection Board’s opinion on how such models can comply with EU competition and data protection laws.

• Energy And AI: Key Issues And Future Challenges

  

  Artificial intelligence promises new technical advantages for the energy industry, but it is also responsible for vast, and growing, energy consumption — so the future of AI and energy will require balancing technological advancement with regulatory oversight, environmental responsibility and infrastructure development, say attorneys at Morgan Lewis.

• When Banks Unknowingly Become HIPAA Biz Associates

  

  There appears to be significant confusion regarding the application of the Health Insurance Portability and Accountability Act to financial institutions when serving healthcare-related clients, so these institutions should consider undertaking several steps as a starting point in the effort to achieve compliance, say attorneys at Vorys.

• The Regulatory Headwinds Facing Lab-Developed Tests

  

  Though the U.S. Food and Drug Administration's final rule regarding regulation of laboratory-developed tests outlines a four-year plan for ending enforcement discretion, and though this rule is currently being challenged in courts, manufacturers should heed compliance opportunities immediately as enforcement actions are already on the horizon, say attorneys at Kirkland & Ellis.