When the SEC issues the next annual enforcement report for fiscal year 2025, we expect securities offering actions and investment adviser actions will almost certainly be up, and the “crypto” and “cyber” cases will almost certainly be down. Public statements by the new SEC administration have said as much, but even more telling than public statements are the allocation of limited enforcement resources.
As online platforms become more sophisticated, so do the tactics designed to manipulate user behavior. Among these, “dark patterns” have emerged as a particularly concerning phenomenon. This article explores the different types of dark patterns prevalent online, examines how they affect consumers and businesses, and analyzes the legal frameworks emerging to combat these practices in Connecticut the EU.
While change is a constant in the privacy, security and technology arena, 2025 is poised to be a landmark year. New technologies will continue to radiate through the economy — and our lives — while the new Trump Administration is likely to emphasize innovation over protection, reward maximization over risk minimization, and incentivizing over enforcing.
The Freedom of Information Act (FOIA) stands at a critical juncture heading into 2025. Federal agencies are grappling with mounting backlogs, increasingly complex data landscapes, and rising cybersecurity threats. As a new administration takes office, the urgency to adopt innovative, effective solutions has never been greater.
Employment and labor and cybersecurity, data protection and data privacy remain top of mind for in-house lawyers focused on litigation. Still, there’s mounting concern about the threat of large damages verdicts.
It’s time for our annual poll of experts on what they expect 2025 to bring in legal tech, including generative AI (of course), e-discovery, and more.
The landscape of data protection and privacy continues to expand, and with that expansion comes increased scrutiny and the promise of increased enforcement. 2025 will mark a convergence of the proliferation of artificial intelligence, a growing understanding of and desire to exercise consumer rights and protections and new legislation, meaning increased regulatory enforcement is inevitable. This article explores the impending new legislative landscape, what increased enforcement may look like and how companies can prepare for optimal compliance.
A strong Do Not Call Policy (DNC) is vital to comply with the Telephone Consumer Protection Act. Ensuring robust DNC compliance protects an organization's reputation and increases consumer trust. Below is a practical guide for building and implementing DNC policies that ensure compliance and reduce liability.
In Anderson v. TikTok, Inc., the Third Circuit held that the liability of an Internet Service Provider such as TikTok depended on whether TikTok was sharing content via the platform’s algorithm or engaged in something more. The question of whether TikTok’s recommendation algorithm transformed content into TikTok’s own expressive activity was not immunized by Section 230 and has disrupted the protection previously enjoyed by Internet platforms like TikTok.
The proliferation of data breaches and increased sophistication of criminal attack vectors has led more states to enact their own reasonable security provisions as part of the patchwork quilt of privacy laws. Nineteen of the U.S. states which have enacted comprehensive privacy laws along with Florida’s Digital Bill of Rights (which took effect summer 2024) have provisions requiring controllers and businesses to establish, implement and maintain reasonable administrative, technical and physical data security practices to protect the confidentiality, integrity and accessibility of personal data.
