Blog
Inside Privacy
By Covington & Burling LLP Visit the blog
2,570 published works
Inside Privacy
CPPA Proposes Amendments to Opt-Out Preference Signal Regulations
By Lindsey Tonsager, Marissa Uri
The California Privacy Protection Agency (“CPPA” or “Agency”) staff has released a package of proposed amendments to the California Consumer Privacy Act (“CCPA”) regulations governing opt-out preference signals (“OOPS”). The…
Inside Privacy
Algorithmic Pricing Laws: A Growing State Patchwork and What Businesses Should Know
By Laura Kim, Lindsey Tonsager, Jayne Ponder, Jehan Patterson, Irene Kim
Lawmakers and regulators at both the state and federal levels are increasingly focusing on consumer protection considerations relating to algorithmic pricing. On September 25, the Federal Trade Commission ("FTC") closed…
Inside Privacy
A Comparison of the EU Cloud and AI Development Act Requirements Against the U.S. FOCI Regime and FedRAMP
By Ashden Fein, Heather Finstuen, Ryan Burnette, Jacob Crump, Alexandra Bruer
As governments increasingly focus on cloud security and sovereignty, the European Commission (“EC”) is, through its proposal for a Cloud and AI Development Act (“CADA Proposal”), attempting to create a…
Inside Privacy
New AI Transparency Requirements Enacted for Advertisers and Deployers
By Jayne Ponder, Laura Kim, Irene Kim
State legislatures have passed new laws focused on disclosing the use of AI in advertisements or depictions of individuals. On September 16, California Governor Gavin Newsom signed SB 1050, a…
Inside Privacy
California Enacts New Privacy Legislation Affecting Consumer Rights, Data Brokers, and Website Tracking Litigation
By Jayne Ponder, Lindsey Tonsager, Bryan Ramirez
In the final days of California’s 2026 legislative session, California Governor Gavin Newsom signed a series of privacy legislation spanning consumer privacy rights, data broker activities, digital platform design, and…
Inside Privacy
CISA Submits Final CIRCIA Rule for OMB Review
By Ashden Fein, Caleb Skeath, John Webster Leslie, Shayan Karbassi
On October 1, 2026, the U.S. Cybersecurity and Infrastructure Security Agency (“CISA”) submitted a draft of the Final Rule implementing the Cyber Incident Reporting for Critical Infrastructure Act of 2022…
Inside Privacy
California Governor Signs Over 20 AI-related Bills into Law
By Jayne Ponder, Diana Lee, Evan Chiacchiaro
Governor Gavin Newsom of California signed over 20 AI-related bills into law in the final days of September. Several of these bills address topics such as frontier model and generative…
Inside Privacy
California Governor Signs SB 690, Eliminating Private Website-Based CIPA Pen Register Claims and Calling for Broader CIPA Reform
By Kathryn Cahoy, Lindsey Tonsager, Matthew Verdin, Jenna Zhang, Julia Barrero, Bryan Ramirez
On September 30, Governor Gavin Newsom signed SB 690, a significant new law aimed at curbing the wave of lawsuits and demand letters asserting “pen register” claims under the California…
Inside Privacy
New California AI Employment Laws: Key Requirements for Employers
By Lindsey Tonsager, Jayne Ponder, Carolyn Rashby, Bryan Ramirez
On September 30, California Governor Gavin Newsom signed three laws that will regulate the use of AI in the employment context, starting in the new year. Below, we briefly summarize…
Inside Privacy
Key Takeaways for Private Sector Entities from the FBI’s New Cyber Strategy
By Ashden Fein, Jim Garland, Micaela McMurrough, Moriah Daugherty, Ali Cooper-Ponte, Matthew Harden, Alexandra Bruer
On September 9, 2026, the U.S. Federal Bureau of Investigation (“FBI”) announced the publication of the FBI Cyber Strategy (the “Strategy”). The Strategy, which “provides a roadmap for defending the…