Published works by Susan Ross (US)

Published works

• Open-Weight AI can bring hidden supply-chain risks

  Data Protection Report · October 20, 2026

  LEX-WK-121QCW2N
• California scales back private CIPA claims, but website privacy litigation is far from over

  Consumer products law blog · October 14, 2026

  LEX-WK-N7DF8QXF
• New California law on lawyer use of generative AI and Connecticut prompt injection ruling

  Data Protection Report · October 10, 2026

  LEX-WK-WVSR0DPQ
• CIPA legislation enacted

  Data Protection Report · October 9, 2026

  LEX-WK-HN417F2S
• Internet privacy updates: CalPrivacy fines data brokers, Colorado proposes new AI regulations

  Data Protection Report · September 15, 2026

  LEX-WK-621RMCCA
• NYDFS levies $250,000 fine on licensee for inadequate cyber risk assessment

  Data Protection Report · August 18, 2026

  LEX-WK-WR0BWXWC
• Rhode Island’s new AI and healthcare privacy law

  Data Protection Report · July 21, 2026

  LEX-WK-2B6R2DNV
• NYDFS issues guidance “in a heightened cybersecurity environment”

  Data Protection Report · June 3, 2026

  LEX-WK-QHE4QNNK
• NYDFS Cybersecurity Enforcement: US$2.25m Fine Against Delta Dental

  Data Protection Report · May 8, 2026

  LEX-WK-NJDDJVSV
• Navigating AI compliance with HIPAA essentials

  Data Protection Report · April 7, 2026

  LEX-WK-FX96RR4M
• Complaint accuses OpenAI of practicing law without a license

  Data Protection Report · April 6, 2026

  LEX-WK-3X9EMRQ0
• NY DFS’s new MFA guidance: closing common gaps before the next exam

  Data Protection Report · March 23, 2026

  LEX-WK-GMV799EF
• HHS and state AGs fine ambulance firm over $500,000, require enhanced security, privacy, and data minimization practices

  Data Protection Report · March 6, 2026

  LEX-WK-G27F425B
• AI and privilege: Assessing recent court rulings

  Data Protection Report · March 3, 2026

  LEX-WK-EAC9M8N7
• New York’s algorithmic pricing law

  Data Protection Report · December 22, 2025

  LEX-WK-KJ041CFG
• Regulators, including FCC, emphasize third party vendor cybersecurity monitoring requirements

  Data Protection Report · December 19, 2025

  LEX-WK-5ZCVNYYT
• Service provider outages test customer resiliency

  Data Protection Report · November 26, 2025

  LEX-WK-X9R5NKNZ
• NYDFS releases guidance on third-party service provider risks

  Data Protection Report · October 30, 2025

  LEX-WK-11QATPHW
• Text messages and the new Texas registration requirement

  Data Protection Report · September 30, 2025

  LEX-WK-EADY8PNY
• NYDFS fines licensee $2 million for lack of email retention policy and MFA

  Data Protection Report · August 19, 2025

  LEX-WK-NCMWJBBG
• California’s proposed cybersecurity audit regulation

  Data Protection Report · August 12, 2025

  LEX-WK-2A317V7S
• White House unveils AI Action Plan in artificial intelligence

  Data Protection Report · July 25, 2025

  LEX-WK-9M74WB9S
• California’s anti-employment-discrimination regulations now include AI, expand retention requirements

  Data Protection Report · July 17, 2025

  LEX-WK-N9P02CXT
• The Healthline Order: Privacy law grows teeth

  Data Protection Report · July 11, 2025

  LEX-WK-PA1FS5MR
• FTC’s COPPA Rule changes include AI training consent requirement

  Data Protection Report · June 4, 2025

  LEX-WK-1JFA0F1R