Privacy And Cybersecurity Law

The California Privacy Protection Agency expects to conduct California Consumer Privacy Act compliance audits in 2026 as it builds out its newly created Audits Division, according Law360’s recent interview with the agency’s Executive Director, Tom Kemp.Continue Reading ›

On April 13, 2026, Virginia Governor Abigail Spanberger signed into law S.B. 388, which amends the Virginia Consumer Data Protection Act to prohibit the sale of geolocation data, effective July 1, 2026.Continue Reading ›

The U.S. Department of Health and Human Services’ Office for Civil Rights recently announced a settlement with health care software company MMG Fusion to resolve the company’s alleged noncompliance with the HIPAA Privacy, Security and Breach Notification Rules.Continue Reading ›

On March 25, 2026, New Jersey enacted a new law restricting health care facilities’ collection and disclosure of certain patient information, including immigration status, citizenship status, place of birth, Social Security number and individual taxpayer identification number.Continue Reading ›

On April 1, 2026, the U.S. Court of Appeals for the Seventh Circuit held that the 2024 amendment to Illinois’ Biometric Information Privacy Act, limiting damages, applies retroactively to pending cases.Continue Reading ›

On March 24, 2026, Washington Governor Bob Ferguson signed House Bill 2225, an Act regulating artificial intelligence companion chatbots.Continue Reading ›

The Connecticut Attorney General recently issued a legal memorandum regarding the application of existing Connecticut laws, such as the Connecticut Data Privacy Act, to the use of artificial intelligence.Continue Reading ›

As reported on the Hunton Employment & Labor Perspectives blog, SB 574 is a California bill that would set specific duties for attorneys who use generative artificial intelligence and would restrict how arbitrators may use such tools in decision-making.Continue Reading ›

On March 23, 2026, South Dakota Governor Larry Rhoden signed Senate Bill 49, a new law designed to “safeguard the integrity, privacy, and security of consumer genetic data,” which takes effect on July 1, 2026.Continue Reading ›

On March 25, 2026, the UK Information Commissioner’s Office and the UK Office of Communications released a joint statement addressing the intersection of online safety and data protection in relation to age assurance.Continue Reading ›