DFS guidance clarifies cybersecurity risk assessment expectations, including emerging AI, third-party risks and increased scrutiny.
WilmerHale
WilmerHale is a leading, full-service international law firm with 1,000 lawyers located throughout 13 offices in the United States, Europe and Asia. Our lawyers work at the intersection of government, technology and business, and we remain committed to our guiding principles of: providing quality, world-class legal and client services; developing diversity among our lawyers and staff; fostering an environment that promotes an entrepreneurial spirit, collaboration and collegiality by drawing on the exceptional talents and varied experience of our lawyers; encouraging lawyers and staff to perform public service and give back to the community through pro bono work, government service, service to the bar, teaching, and supporting public institutions and charitable organizations; and hiring and retaining exceptionally talented lawyers who possess the common trait of outstanding academic and personal achievements.
Website:
https://www.wilmerhale.com/en
WilmerHale Blogs
Blog Authors
Latest from WilmerHale
California Adopts Law to Impose New Guardrails on Attorneys and Arbitrators Use of AI
SB 574, effective January 2027, establishes California’s first statutory safeguards for attorneys’ and arbitrators’ use of generative AI.
Delaware Adds New Requirements for Sensitive Data, Third-Party Contracts
On September 2, 2026, Delaware Governor Matt Myer signed House Bill 380 into law, amending the Delaware Personal Data Privacy Act to, among other things, create new restrictions for sensitive data that go into effect on January 1, 2027.
CIPA Reform Signed Into Law
California’s SB 690 narrows CIPA liability by eliminating certain website tracking claims, though other privacy litigation risks remain.
California Finalizes Next Wave of State AI and Privacy Regulation
California’s legislative session has officially wrapped up with the passing of Governor Newsom’s September 30 signing deadline. Here’s what you need to know about the latest AI and privacy bills passed and vetoed.
Washington Attorney General Publishes First Data Privacy Report
On August 14, 2026, Washington Attorney General (AG) Nick Brown released the state’s first-ever Data Privacy Report (the “Report”). The Report examines how the modern data economy incentivizes the collection and retention of personal information, catalogs the harms that can…
FTC Issues Proposed Policy Statement on Personalized Pricing
FTC scrutiny of personalized pricing is increasing, prompting companies to strengthen disclosures, data practices and pricing transparency.
Seventh Circuit Rules that Text Messages are not Telephone Calls Under TCPA’s Private Right of Action
The Seventh Circuit’s decision in Steidinger v. Blackstone Medical Services held that text messages are not “telephone calls” under the TCPA’s private right of action for do-not-call violations, creating a potentially significant defense for businesses facing text message-based TCPA claims.
California Data Broker Updates
California is raising the stakes through its continuing enforcement activities involving data brokers.
Connecticut Amends Its Data Privacy Act to Increase Data Protections
Amendments to Connecticut’s comprehensive privacy law, the Data Privacy Act (“CTDPA”), recently took effect through Senate Bill 1295 (“SB 1295”), which expands the applicability of the CTDPA to entities that sell consumers’ personal information or process consumers’ sensitive information.