On August 19, 2026, the FTC issued a press release outlining the agency’s proposed Enforcement Policy Statement on personalized pricing putting businesses on notice that using consumers’ personal data to set individualized prices without clear and conspicuous disclosures — including
Ninth Circuit Holds Human User, Not Developer of AI Agent, Responsible for Websites Accessed
Key Point: In a significant ruling for the AI industry, the Ninth Circuit vacated a preliminary injunction against Perplexity AI, holding that Amazon was unlikely to succeed on its Computer Fraud and Abuse Act (CFAA) and California Comprehensive Data Access
Gemini Tracking Allegations Fall Short of Article III Standing
In a recent decision challenging Google’s Gemini AI features, a California federal court held that allegations concerning an AI tool’s capabilities, without facts showing actual access or use of plaintiffs’ data, were insufficient to demonstrate the “concrete” harm required for
Colorado Releases Proposed Rules for Its AI and Chatbot Safety Laws: These Create More Operational Work than the Statutes Suggest
On August 11, 2026, the Colorado Department of Law released a single set of proposed rules substantially building out two 2026 statutes: the Automated Decision-Making Technology Act (“ADMT Act”) and the Conversational Artificial Intelligence Service Operator Requirements (the “Chatbot Safety Act”). Both laws
ADMT Law Roundup: What Employers Need to Know About Recent ADMT Laws
Employers increasingly rely on automated tools to help make decisions concerning hiring, promotion, discipline, and termination. In response, state legislatures and agencies have begun to regulate uses of these technologies, often referred to as automated decision-making technology (“ADMT”). These laws
White House Releases National Security Presidential Memorandum on Expanding Capabilities to Combat Transnational Cyber-Enabled Crime
On August 12, 2026, the Administration published a National Security Presidential Memorandum (“NSPM”) (“Expanding Capabilities to Combat Transnational Cyber-Enabled Crime”) that signals the Administration’s focus on private-sector participation in offensive cyber operations by establishing a federally supervised program to enable
US DOJ charges 17 Iran nationals in hacking campaign against US
The US Department of Justice (DOJ) on Tuesday unsealed a 14-count indictment charging 17 Iranians connected to the Mabna Institute, a private company based in Iran, for conducting cyberattacks against the US. The DOJ’s press release stated that many of
Today’s Podcast Release: The “Confidence Advantage”: Why Privacy, Cybersecurity and AI Governance Are Becoming Business Imperatives
In the latest episode of the Consumer Finance Monitor podcast that we are releasing today, we explore a topic that is becoming increasingly important for financial services companies and virtually every other business operating in today’s digital economy: how privacy,
Medusa Ransomware Hitting Healthcare Industry’s Unpatched Software Vulnerabilities
On August 18, 2026, the Cybersecurity & Infrastructure Security Agency, Federal Bureau of Investigation, and U.S. Department of Health & Human Services issued an update to a previous advisory to the health care industry warning against Medusa ransomware. The advisory
Privacy Tip #504 – What is Spyware?
This week, Apple notified customers in 110 countries around the world (150 countries to date) that they “may have been targeted with spyware capable of hacking into their devices.” Apple notifies users “directly on their iPhone lock screen with a