Privacy + Cyber + AI

The Privacy + Cyber + AI blog, published by Troutman Pepper Locke, focuses on legal developments and regulatory issues at the intersection of privacy, cybersecurity, and artificial intelligence. It covers topics such as state and federal AI laws and regulations, privacy litigation including the Video Privacy Protection Act (VPPA), enforcement trends by state attorneys general, and the impact of executive orders on AI policy. The blog also addresses challenges related to consumer data protection, algorithmic transparency, consent management, data broker regulations, and compliance strategies for businesses navigating evolving privacy and cyber laws.

Latest from Privacy + Cyber + AI

Key Points

  • OCR reached two 2026 settlements — totaling $695,000 — with self-funded group health plans following ransomware breaches, marking a notable expansion of direct HIPAA enforcement against self-funded health plans.
  • Both plans were cited for failing to conduct an

Key points: Troutman Pepper Locke’s Regulatory Investigations, Strategy + Enforcement (RISE) and Privacy + Cyber + AI practice groups worked with the firm’s innovation team using AI to collect and curate five years of data concerning state AG activities and