Cybersecurity & Privacy

  • May 15, 2024

    Arizona AG Lobs Suits Over 'Deceptive' Amazon Practices

    Arizona Attorney General Kris Mayes on Wednesday filed a pair of suits claiming that Amazon Prime's cancellation process and other features are deceptive, misleading and have led to higher prices for consumers.

  • May 15, 2024

    Blackbaud Dodges Data Breach Victims' Class Cert. Bid

    A South Carolina federal judge has refused to certify several proposed classes consisting of roughly 1.5 billion patients, donors and other individuals whose personal information was allegedly swept up in a 2020 ransomware attack on software provider Blackbaud Inc., finding that the plaintiffs had failed to show that class members could be easily identified. 

  • May 15, 2024

    SolarWinds Says SEC's Cyber Breach Suit Goes Too Far

    SolarWinds Corp. on Wednesday asked a Manhattan federal judge to throw out the U.S. Securities and Exchange Commission's suit accusing the enterprise software company of deceiving investors about its lax cybersecurity, which left it open to a Russian hacking campaign.

  • May 15, 2024

    State Farm Can't Dodge TCPA Suit Over Robocalls

    State Farm must face a proposed class action alleging it violated the Telephone Consumer Protection Act by using a third-party company to make automated telemarketing calls without prior consent, an Illinois federal judge has ruled, saying the suit states a plausible claim of the insurer's vicarious liability for the robocalls.

  • May 15, 2024

    Flexibility In Info Security Policy May Add Compliance Burden

    New federal guidance for contractors handling sensitive, but unclassified information could introduce confusion and compliance burdens if agencies implement security controls without consulting contractors. 

  • May 15, 2024

    UnitedHealth Concealed DOJ Merger Investigation, Suit Says

    UnitedHealth Group has been hit with a proposed shareholder class action alleging that it failed to disclose that the U.S. Department of Justice had reopened an antitrust investigation into the health insurance giant following its acquisition of a healthcare data company, and that top executives had sold more than $120 million of shares knowing about the investigation before a news report revealed it to the public.

  • May 15, 2024

    En Banc 9th Circ. Will Mull Jurisdiction In Shopify Privacy Suit

    The Ninth Circuit agreed to review en banc a panel's decision dismissing a suit alleging payment processing company Shopify collects shoppers' sensitive information without permission, after the plaintiff argued the full court should hear the case to resolve how to assess personal jurisdiction in online misconduct cases.

  • May 15, 2024

    Anti-Trans Groups Fail To Block Wash. Youth Shelter Law

    A federal judge on Wednesday threw out a lawsuit filed by two anti-transgender groups challenging a Washington state law intended to ensure shelter for teens seeking gender-affirming care or reproductive health services, ruling that speculating on possible injury was not enough to clear a standing hurdle.

  • May 15, 2024

    FTC Chair Khan Defends Request For 25% Budget Increase

    Federal Trade Commission Chair Lina M. Khan defended a 25% budget increase request during a House appropriations hearing Wednesday, calling it "healthy" that aggressive Biden administration merger enforcement has made antitrust considerations top of mind for companies mulling transactions.

  • May 15, 2024

    House Panel Advances Tax-Exempt Org Oversight Bills

    The House Ways and Means Committee approved a package of bills Wednesday that would increase scrutiny of foreign donations to tax-exempt organizations, including legislation that would require those organizations to publicly report the donations.

  • May 15, 2024

    FCC Could Require ISP Reports On Internet Routing Security

    The Federal Communications Commission will vote on a plan next month to require the largest broadband providers to file confidential reports on security of the internet's main routing technology, the Border Gateway Protocol.

  • May 15, 2024

    Ex-FTX Exec Seeks Leniency, Saying He Was Kept In The Dark

    A former top FTX official has asked a Manhattan federal judge for a lenient 18-month sentence, saying he was not part of company co-founder Sam Bankman-Fried's inner circle and was as shocked as everyone else to learn that the crypto exchange was operating a fraud that siphoned billions in customer funds.

  • May 15, 2024

    Senators Release 'Road Map' For Crafting Federal AI Policy

    A bipartisan group of senators on Wednesday laid out a "road map" for artificial intelligence policy that calls for increased AI innovation funding, testing of potential harms posed by AI and consideration of the technology's workforce implications.

  • May 15, 2024

    Kirkland Guiding Billionaire McCourt On Bid To Buy TikTok

    Billionaire Frank McCourt, advised by Kirkland & Ellis, says he's building a consortium to purchase TikTok and redesign the platform to eliminate the collection of users' information, putting "people in control of their [own] digital identities and data." 

  • May 15, 2024

    Mortgage Co.'s $2.4M Data Breach Settlement Gets Initial OK

    A Connecticut federal judge gave her initial sign-off to a $2.4 million settlement between mortgage firm Planet Home Lending LLC and a consolidated class of customers whose personal data, including their Social Security numbers, was exposed in a cyberattack.

  • May 14, 2024

    Gunster Data Breach Affected 9K Clients' Data, Suit Says

    A former client of Gunster Yoakley & Stewart PA has filed a proposed class action in Florida federal court, alleging the law firm's weak cybersecurity systems allowed outsiders to access clients' personal and sensitive health information and that the firm waited over a year to inform those affected.

  • May 14, 2024

    Davis Wright-Led TikTok Creators Challenge Potential Ban

    Following TikTok Inc.'s lead, a group of creators on Tuesday lodged their own challenge to a new federal law that would exclude the popular app from the U.S. market unless it cuts ties with its Chinese parent company, telling the D.C. Circuit that the measure undermines the First Amendment.

  • May 14, 2024

    Telecoms Settle FCC Probe Into Undersea Cables For $2M

    Two telecoms will pay $1 million each to resolve a Federal Communications Commission probe into an undersea cable system that connected the U.S. with Colombia and Costa Rica without FCC approval.

  • May 14, 2024

    Chamber Cautions FCC Against Making Anti-Arbitration Rules

    Business leaders told the Federal Communications Commission that it cannot bar wireless providers from requiring arbitration clauses with customers to resolve disputes arising from cellphone SIM card and port-out fraud.

  • May 14, 2024

    NIST Finalizes Revised Security Guidelines For Sensitive Info

    The National Institute of Standards and Technology on Tuesday released a final version of revised guidelines for contractors and other entities who handle sensitive unclassified federal information, intended to clarify and streamline those requirements.

  • May 14, 2024

    Casino App User Can't Hide Arbitration Details, Chancery Says

    A mobile app slot-machine player who lost an arbitration dispute with the game's operator may not keep the details of the arbitration award confidential in Delaware court filings, a Chancery Court vice chancellor said Tuesday, denying a request for ongoing confidential treatment.

  • May 13, 2024

    11th Circ. Says Class Attys Self-Dealt In $35M TCPA Settlement

    The Eleventh Circuit on Monday dismissed a proposed $35 million settlement of a class action alleging GoDaddy.com violated the Telephone Consumer Protection Act by sending unwanted marketing texts, saying the deal may have come by through nefarious means.

  • May 13, 2024

    Vt. On Brink Of Enacting Privacy Bill With Lawsuit Mechanism

    The Vermont legislature has sent to the governor's desk a comprehensive data privacy bill that would not only require companies to scale back their data collection efforts and ramp up safeguards for children, but also give consumers the rare opportunity to sue large businesses that violate the law in certain circumstances. 

  • May 13, 2024

    Student Loan Servicer Faces Suit Over Tax Form Data Breach

    An education-focused subsidiary of payment processor Global Payments Inc. faces a proposed class action accusing it of negligence after it disclosed that part of its website allowed bad actors unfettered access to certain student tax documents for months at a time.

  • May 13, 2024

    SEC, FinCEN Propose Money Manager Customer ID Rule

    The U.S. Securities and Exchange Commission and the Treasury Department's Financial Crimes Enforcement Network on Monday proposed a rule that would require money managers such as hedge funds and private equity firms to document and maintain customer identification programs.

Expert Analysis

  • Legal Issues When Training AI On Previously Collected Data

    Author Photo

    Following the Federal Trade Commission's recent guidance about the use of customer data to train artificial intelligence models, companies should carefully think through their terms of service and privacy policies and be cautious when changing them to permit new uses of previously collected data, says James Gatto at Sheppard Mullin.

  • Series

    Riding My Peloton Bike Makes Me A Better Lawyer

    Author Photo

    Using the Peloton platform for cycling, running, rowing and more taught me that fostering a mind-body connection will not only benefit you physically and emotionally, but also inspire stamina, focus, discipline and empathy in your legal career, says Christopher Ward at Polsinelli.

  • Compliance Steps After ABA White Collar Crime Conference

    Author Photo

    Senior law enforcement officials’ statements this month at the American Bar Association's white collar crime conference suggest government enforcement efforts this year will increasingly focus on whistleblower incentives, artificial intelligence and data protection, and companies will need to update their compliance programs accordingly, say attorneys at Baker McKenzie.

  • Spartan Arbitration Tactics Against Well-Funded Opponents

    Author Photo

    Like the ancient Spartans who held off a numerically superior Persian army at the Battle of Thermopylae, trial attorneys and clients faced with arbitration against an opponent with a bigger war chest can take a strategic approach to create a pass to victory, say Kostas Katsiris and Benjamin Argyle at Venable.

  • What 2 Years Of Ukraine-Russia Conflict Can Teach Cos.

    Author Photo

    A few key legal lessons for the global business community since Russia's invasion of Ukraine could help protect global commerce in times of future conflict, including how to respond to disparate trade restrictions and sanctions, navigate war-related contract disputes, and protect against heightened cybersecurity risks, say attorneys at Morgan Lewis.

  • Cos. Seeking Cyber Coverage Can Look To Key Policy Terms

    Author Photo

    As cyberattacks increasingly threaten business operations, including one last month that partially paralyzed UnitedHealth's services, expanded interpretations of several key policy terms may allow affected companies to recover under cyber business interruption policies or other coverage, even if their business hasn't completely shut down, say attorneys at Kasowitz.

  • How AI May Be Used In Fintech Fraud — And Fraud Detection

    Author Photo

    Recent enforcement actions in the fintech and finance industries show that the government is increasingly pursuing fraud enabled by artificial intelligence — at the same time it’s using AI innovations to enforce regulations and investigate fraud, say attorneys at ArentFox Schiff.

  • Takeaways From Groundbreaking Data Transfer Order

    Author Photo

    A recent first-of-its-kind executive order and related proposed rulemaking lay the groundwork for important outbound U.S. data protections, but they may have unintended consequences related to the types of data and the subjects within their scope, say attorneys at Kirkland.

  • What Recent Study Shows About AI's Promise For Legal Tasks

    Author Photo

    Amid both skepticism and excitement about the promise of generative artificial intelligence in legal contexts, the first randomized controlled trial studying its impact on basic lawyering tasks shows mixed but promising results, and underscores the need for attorneys to proactively engage with AI, says Daniel Schwarcz at University of Minnesota Law School.

  • Innodata Suit Highlights 'AI Washing' Liability Risk For Cos.

    Author Photo

    A class action against software company Innodata over so-called AI washing, one of the first of its kind, underscores the litigation and enforcement risks that can arise from the U.S. Securities and Exchange Commission's novel theory about misleading artificial intelligence capabilities, say attorneys at Bracewell.

  • For Now, Generative AI Is Risky For Class Action Counsel

    Author Photo

    Although a recent survey showed most in-house counsel think that their outside counsel should be using generative artificial intelligence "in some way" in class action work, the technology is more a target for class actions than it is a tool to be used in practice at present, says Matthew Allen at Carlton Fields.

  • Steps To Reduce CIPA Litigation Risks For Companies

    Author Photo

    As class action claims brought under the California Invasion of Privacy Act continue to advance new theories under an old law to target companies for commonplace website and app activities, there are steps that organizations can take to reduce exposure and strengthen their defenses against such lawsuits, say attorneys at Hintze Law.

  • Banks Should Continue To Prep For CFPB Data Rule Rollout

    Author Photo

    Consumer Financial Protection Bureau-supervised banks should not expect industry pressure to delay the rollout of proposed Section 1033 open banking rules, which regulate how consumer financial information flows between financial institutions, and prepare their required data access portals and compliance procedures now, say attorneys at Troutman Pepper.

  • Tips For Orgs Facing AI Data Privacy Compliance Challenges

    Author Photo

    Regulators around the world are actively seeking to enforce data privacy and consumer protection laws against companies providing artificial intelligence-related services, raising complex compliance questions in areas like transparency, data minimization, lawfulness of processing, data subject rights and higher risk activities, say attorneys at Hogan Lovells.

  • BIPA's Statutory Exemptions Post-Healthcare Ruling

    Author Photo

    The Illinois Supreme Court's November opinion in Mosby v. Ingalls Memorial Hospital, which held that the Biometric Information Privacy Act's healthcare exemption also applies when information is collected from healthcare workers, is a major win for healthcare defendants that resolves an important question of statutory interpretation, say attorneys at Quinn Emanuel.

Want to publish in Law360?


Submit an idea

Have a news tip?


Contact us here
Can't find the article you're looking for? Click here to search the Cybersecurity & Privacy archive.
Hello! I'm Law360's automated support bot.

How can I help you today?

For example, you can type:
  • I forgot my password
  • I took a free trial but didn't get a verification email
  • How do I sign up for a newsletter?
Ask a question!