Businesses subject to the CCPA now must conduct risk assessments for certain types of processing activities and, starting in 2028, must certify to California regulators that they completed the assessments.
- February 01, 2026David Stauss and Shelby Dolen and TK Lively and Marlaina Pinto
The U.S. Supreme Court will consider if Internet users can sue websites for sharing their data with Facebook under the 1988 law aimed at protecting customers' private video rental history.
February 01, 2026Jimmy HooverAs we enter 2026, the winners will be those who operationalize compliance as a capability by linking AI governance, privacy discipline, and cybersecurity resilience to business enablement.
January 12, 2026Michael Bahar and Jessica Fuhrman and Chris Bloomfield and Rebekah O’BrienAs we kick off the new year, we asked several members of Taft’s Privacy, Security, and Artificial Intelligence practice group to share their thoughts on what should be on a client’s list of resolutions for 2026.
January 12, 2026Scot Ganow and Zach Heck and Zenus Franklin and Jordan JenningsAn annual tradition continues at Cybersecurity Law & Strategy as we poll our panel of experts on the key developments of 2025 and what we can expect in 2026 in AI, privacy, e-discovery and other areas of legal tech.
January 01, 2026Cybersecurity Law & Strategy StaffAPAC is awash with recent changes in AI, privacy and cybersecurity regulations. Part one of this article examined the specifics of those changes and the paradigm shift they are precipitating. Part two explores the real-world implications of those changes and key takeaways for compliance teams.
December 01, 2025Brandon Hollinder and Jon KesslerThe increasing prevalence of cyberstalking, harmful deepfakes and online harassment is creating profound risks for individuals and organizations. So much so that Congress has implemented a federal statute designed to shift liability toward online platforms and provide victims with enforceable removal rights.
December 01, 2025Johnathan BridbordAPAC is awash with recent changes in AI, privacy and cybersecurity regulations. Part one of this article examines the specifics of those changes and the paradigm shift they are precipitating.
October 31, 2025Brandon Hollinder and Jon KesslerOn Oct. 9, 2025, the Colorado attorney general’s (AG) office announced final revisions to the proposed draft amendments to the Colorado Privacy Act (CPA) rules. This article provides background on the rulemaking and provide an overview of the revisions.
October 31, 2025David Stauss and Shelby DolenThe continued, rapid advancement of artificial intelligence technologies comes with increasing risks for businesses, demanding that they navigate such issues more carefully than ever. Considering recent privacy class action trends detailed in this article, companies that utilize AI in their business operations should immediately review and modify their compliance programs as necessary to mitigate legal risk and liability exposure.
September 30, 2025Matthew G. White










