Recently, we hosted an intimate dinner in Los Angeles with a group of general counsels and senior executive leaders to discuss the evolving challenges posed by artificial intelligence (AI), data privacy and cybersecurity, particularly as they relate to HR and
The UK’s data protection framework continues to evolve following the enactment of the Data (Use and Access) Act 2025 (DUAA). One of the more operationally significant developments for organisations is the introduction of a new statutory right for individuals to
SPB’s Alan Friel has previously explained here and here how consumer privacy law and online teen safety laws can go too far and be constitutionally suspect. This issue has heated up in the courts as states rush to regulate.
In
French law requires that where hosting services providers host certain types of health data, they must first obtain certification as “hébergeurs de données de santé” (“HDS”) which translates as “health data hosting service providers”. The relevant HDS certification framework was
Join the Los Angeles County Bar Association’s (“LACBA”) Privacy & Cybersecurity Section on May 21, 2026 (6:30–8:00 PM) at the Jonathan Club in Downtown Los Angeles for “Protecting Consumers & Promoting Innovation in a Data-Driven Economy.” The program features FTC
In case you missed it, below are recent posts from Privacy World covering the latest developments on data privacy, security and innovation. Please reach out to the authors if you are interested in additional information.
One of our own is helping shape the conversation. Alan Friel, Partner, and contributing author to our blog, will serve as a featured speaker in an upcoming live CLE webinar tackling one of the most rapidly developing areas of
The 2026 World Technology Law Conference organized by the International Technology Law Association (ITechLaw), starts next week. Squire Patton Boggs is a proud sponsor of this year’s conference and two PrivacyWorld.blog authors are speaking.
On May 14th at 4:30pm, Julia
The Colorado AI Act (SB24-205) is effectively frozen just weeks before its June 30, 2026 effective date, following a stay in enforcement of the law by a Magistrate Judge in the District of Colorado on April 27, 2026.
Background
By
Can a data controller reject a data subject’s first data access request on the basis that it is “excessive”? Until recently, many organisations were cautious and adopted an agnostic view about the intentions behind first access requests. However, the EU
