Technology Law and Digital Law

California's new CPPA regulations impose mandatory annual cybersecurity audits and privacy risk assessments on businesses meeting specific thresholds under the CCPA. With the first compliance deadlines approaching in 2027 and 2028, businesses must act now to map data flows, engage qualified auditors, and document high-risk processing activities before certification and submission requirements take effect.

A federal court in Pennsylvania ruled that physical manifestations of emotional distress from a data breach do not constitute bodily injury under a general liability policy. The decision also addressed whether the policy's personal and advertising injury coverage applied when a hacker gained unauthorized access to private photos of female athletes stored in software operated by the insured.

President Trump's National Security Presidential Memorandum authorizes vetted private U.S. contractors to conduct cyber surveillance and offensive operations against foreign...

The GENIUS Act became Public Law 119-27 one year ago on July 18, 2025 (GENIUS Act — Public Law 119-27). Multiple federal regulators are preparing the regulatory framework to integrate digital money in the form of payment stablecoins into the existing conventional banking system. States are also exploring the use of stablecoins for payments and digital assets as a class of financial assets. All of this activity is building a new digital payments economy.

State attorneys general are increasingly coordinating multistate investigations and settlements targeting payment companies, creating a fragmented enforcement landscape where the same practices may attract scrutiny from multiple states applying different laws. Recent settlements with Block and PayPal demonstrate how states are imposing detailed operational obligations on payment platforms while also using coordinated policy initiatives to influence payment network policies on issues ranging from e-cigarette

Winston Taylor filed an amicus brief urging the U.S. Supreme Court to determine whether the Federal Reserve can deny master accounts to eligible depository institutions...

Recent federal court decisions are challenging long-standing interpretations of the Telephone Consumer Protection Act's consent requirements for pre-recorded calls to cell phones.

Through our Viewpoints series, Riveron experts share their opinions on current topics, business trends, and industry news.

Effective January 1, 2025, California law AB 2426 will require companies offering online-only digital goods to disclose that consumers are purchasing a limited-duration license...

Two bodies of export regulations typically come to mind when we think of export controls: the Export Administration Regulations of the Commerce Department's Bureau of Industry and Security, and the International Traffic in Arms Regulations ...

The 2026 International Hotel Investment Forum EMEA revealed critical challenges facing the hospitality industry, from geopolitical tensions affecting Middle East markets to yield compression threatening profitability. Industry leaders grappled with how artificial intelligence will reshape booking channels and operations while maintaining the human touch that defines hospitality.

As AI agents begin to autonomously execute commercial transactions, a critical question emerges that precedes all others: will the platforms, merchants, and payment providers that control transaction infrastructure even allow these agents to participate? The architecture of access control is being built now, and it may determine the future of agentic commerce more than any legal doctrine.