Worldwide: Data Protection

Subscribe
Privacy law and privacy regulation thought leadership, articles, podcasts, videos and webinars from expert sources across the legal world. Explore insights covering topics including GDPR, data protection, data privacy, and privacy protection.
Article
California Ends Private “Pen Register” Suits Over Website Tracking. Here Is What It Doesn’t End.
California's SB 690 fundamentally reshapes who can bring privacy claims against websites using common tracking tools like analytics scripts and advertising pixels. While the law removes private enforcement for certain violations, it leaves critical questions unanswered about what conduct remains prohibited and how businesses should protect themselves from ongoing legal exposure.
United States Privacy
GU
Gesmer Updegrove LLP
Article
AI Quarterly | A Review Of AI Law, Policy & Practice | 2026 Q3
Explore the latest developments in AI regulation, cybersecurity threats, and compliance frameworks as businesses navigate personalized pricing scrutiny, prompt injection attacks, and evolving transparency obligations. Discover how government initiatives and international intelligence agencies are responding to AI-driven vulnerabilities while organizations implement practical governance strategies across legal, privacy, and operational domains.
United States Privacy
AB
Alston & Bird
Article
Privacy, Cyber & Data Strategy Advisory | State Privacy Laws Are Moving Beyond Disclosures: What Businesses Need To Know In 2026
State privacy laws are evolving from disclosure-based requirements into comprehensive operational mandates affecting product design, data governance, and technology systems. Businesses now face heightened enforcement risk in digital advertising, sensitive data handling, and consumer rights fulfillment, with regulators increasingly scrutinizing the alignment between privacy policies and actual data practices.
United States Privacy
AB
Alston & Bird
Article
When One Statute Closes, Another Opens: How CIPA Plaintiffs Are Shifting To The Wiretap Act, VPPA, And Florida’s FSCA
California's Invasion of Privacy Act has driven website-tracking litigation for three years, but as courts and legislators narrow CIPA's reach, plaintiffs' firms are pivoting to federal statutes and other state laws. The same allegations about Google Analytics, Meta pixels, and tracking tools are now being reframed under the Electronic Communications Privacy Act, Video Privacy Protection Act, and Florida's Security of Communications Act, creating multistate exposure that CIPA reform does nothing to address.
United States Privacy
JM
Jeffer Mangels & Mitchell LLP
Article
HIPAA In The Age Of AI: What Healthcare & Health Tech Companies Need To Know
As artificial intelligence becomes embedded in healthcare systems—from patient portals to back-end documentation—organizations face critical questions about how HIPAA applies to AI-driven data flows. When AI features access protected health information, can vendors use that data to train models? Do business associate agreements actually reflect how these tools work? Understanding the full AI stack, from model providers to subprocessors, is essential for healthcare compliance in 2026.
United States Healthcare
Gouchev Law PLLC
Article
Crisis-Proofing Your New Jersey Business: Building A Crisis Response Plan Before You Need One
New Jersey businesses face legal and operational challenges when crises strike unexpectedly. A well-structured crisis response plan establishes clear protocols for decision-making, evidence preservation, regulatory compliance, and communication management to minimize legal exposure and protect organizational interests during workplace accidents, data breaches, government investigations, and other critical incidents.
United States Commercial
SH
Scarinci Hollenbeck LLC
Article
Your HIPAA Compliance Program Is About To Change
The U.S. Department of Health and Human Services appears ready to finalize significant revisions to the HIPAA Privacy Rule that could fundamentally alter how healthcare organizations handle patient information, access requests, and caregiver communications. Organizations that haven't updated their HIPAA compliance frameworks recently may face substantial policy, procedural, and operational changes affecting everything from privacy notices to health IT systems.
United States Healthcare
HL
Hogan Lovells Cadwalader
Article
New Jersey’s New Sensitive Data Law: What Employers Need To Know
New Jersey's Assembly Bill 5328 introduces sweeping changes to data privacy regulations, creating a public registry system and imposing civil penalties up to $50,000 per record for violations. With most provisions already in effect and registration opening April 1, 2027, businesses must urgently assess whether their data-sharing practices classify them as "data brokers" or "data collectors" under the new law's expansive definitions.
United States Privacy
WG
Wilentz, Goldman & Spitzer
Article
When Commercial AI Meets Defense Data: Privacy, Security, And Data Rights Considerations
The Pentagon wants commercial AI, and AI companies want the Pentagon’s business. But the terms that make or break these deals are often about data, security, and rights, not algorithms. That demand runs deep across U.S. defense customers and the defense industrial base, and AI companies are increasingly eager to supply it, directly or through primes, subcontractors, vendors, or technology partners.
United States Government
SS
Seyfarth Shaw LLP
Article
Governor Newsom Signs SB 690, Ending The Private Right Of Action Under CIPA’s Pen Register And Trap-and-Trace Provision
Governor Gavin Newsom signed Senate Bill 690 on September 30, 2026, eliminating the private right of action under California's Invasion of Privacy Act (CIPA) for pen register and trap-and-trace violations. While the law takes effect January 1, 2027, and applies retroactively for two years, its narrow scope is not expected to significantly reduce abusive CIPA litigation.
United States Litigation
BS
Ballard Spahr LLP
Article
Privacy, Cyber & Data Strategy Advisory | California SB 690 Enacted: New Limits On CIPA Pen Register And Trap-and-Trace Claims
California's SB 690 fundamentally alters the website privacy litigation landscape by eliminating private rights of action under CIPA's pen register provision for online tracking technologies. While this reform curtails one major litigation avenue, businesses must understand that other privacy claims remain viable and broader legislative changes may be forthcoming.
United States Privacy
AB
Alston & Bird
Article
WAITING, WAITING, WAITING: A California Federal Court Stays Another Claim Pending The California Court Of Appeal’s Decision On CIPA § 638.51.
A California federal court has granted another stay in a CIPA § 638.51 case, halting proceedings until the California Court of Appeal determines whether the statute applies to internet communications or is limited to telephonic technology. The decision in Dominique Nelson v. Reddit Inc. follows a pattern of similar stays as courts await clarity on this pivotal jurisdictional question.
United States Litigation
Troutman Amin LLP
See more

Latest Videos

See more