In the wake of two lawsuits against it, California Attorney General Rob Bonta recently served an investigative subpoena on OpenAI as part of the California Department of Justice’s (DOJ) ongoing investigation of incidents resulting from the operations of OpenAI
Data Privacy + Cybersecurity Insider
Leveraging Knowledge to Manage Your Data Risks
Data Privacy + Cybersecurity Insider, published by Robinson & Cole LLP, focuses on legal developments and issues related to data privacy, cybersecurity, and information security. The blog covers topics such as data breaches, regulatory enforcement actions, privacy litigation, law enforcement access to digital data, AI governance and risks, and the implications of forum selection clauses in privacy class actions. It also addresses emerging challenges in technology law including blockchain security vulnerabilities, cross-chain bridge incidents, and the evolving standards for protecting personal and sensitive information in various contexts.
Latest from Data Privacy + Cybersecurity Insider - Page 3
The Problem With AI-Generated Privacy Policy Advice
Clients are increasingly turning to AI before they speak with outside counsel, and sometimes after, by pasting legal advice, contract language, or other work product into a public AI model to ask follow-up questions. Used thoughtfully, these tools can help…
California’s New AI Laws Put Workplace Safeguards on the Agenda
California is taking a leading role in regulating artificial intelligence at work. A newly signed package of laws limits employers’ use of AI in several high-stakes settings: employers may not rely entirely on AI to decide whether to fire a…
Privacy Tip #511 – The Dangers of Sharing Medical Information with AI Tools
I recently had the pleasure to participate in a podcast on Privacy Lawls about the dangers of sharing medical information with AI tools. In the September 21, 2026, episode, “The Dangers of Sharing Medical Information with AI,” Donata Stroink-Skillrud, President…
Fortune 500 Companies’ Credentials Leaking at an Alarming Rate
According to a new report from Nordlayer, a credential from an employee of a Fortune 500 company is posted on the dark web every 100 seconds. The report states that almost 10 million credentials, which include both usernames and…
What Counts as a VPPA Video?
A two-minute apartment tour may not sound like the kind of video Congress had in mind when it passed the Video Privacy Protection Act (VPPA) in 1988, but that question was at the heart of the recent oral argument in…
Do Automatic License Plate Readers Turn Public Roads into a Surveillance Network?
A panel of judges sitting on the federal Court of Appeals for the Seventh Circuit appeared skeptical of a challenge to the use of automatic license plate readers by the Illinois state police, questioning whether the cameras’ collection of vehicle…
OpenAI Sued for AI Agent Hacks
Following the hacking incidents of OpenAI agents of Hugging Face, Ruby Gems, and an Australian government website, two suits have been filed against OpenAI.
One suit was filed by not-for-profit Legal Advocates for Safe Science & Technology (LASST), which claimed…
AI Agents Need More Than Curiosity: They Need Our Trust
Consumer AI agents are software tools designed to do more than answer questions. They can break a request into steps, use external tools and apps, and carry out tasks such as comparing products, managing digital workflows, or booking travel. Some…
Privacy Tip #510 – Social Engineering Vishing Campaigns Hitting Health Care Sector
The Health Information Sharing and Analysis Center (ISAC) recently warned that ShinyHunters is using voice-phishing attacks to target the healthcare sector. “The hackers used medical-themed impersonation domains to trick healthcare employees into exposing their credentials.” More than a dozen organizations…