DFS guidance clarifies cybersecurity risk assessment expectations, including emerging AI, third-party risks and increased scrutiny.
WilmerHale Privacy and Cybersecurity Law
WilmerHale’s Cybersecurity, Privacy and Communications Practice (CPC) represents sophisticated, high-profile clients on a wide range of challenges—from routine matters to cutting-edge issues where the law is unclear and the enforcement risks are high. Our internationally recognized team, composed of lawyers from different practice areas and offices, possesses a mix of counseling, regulatory, litigation, enforcement and transactional knowledge. This blog's authors are members of the CPC team.
Blog Authors
Latest from WilmerHale Privacy and Cybersecurity Law
California Adopts Law to Impose New Guardrails on Attorneys and Arbitrators Use of AI
SB 574, effective January 2027, establishes California’s first statutory safeguards for attorneys’ and arbitrators’ use of generative AI.
Delaware Adds New Requirements for Sensitive Data, Third-Party Contracts
On September 2, 2026, Delaware Governor Matt Myer signed House Bill 380 into law, amending the Delaware Personal Data Privacy Act to, among other things, create new restrictions for sensitive data that go into effect on January 1, 2027.
CIPA Reform Signed Into Law
California’s SB 690 narrows CIPA liability by eliminating certain website tracking claims, though other privacy litigation risks remain.
California Finalizes Next Wave of State AI and Privacy Regulation
California’s legislative session has officially wrapped up with the passing of Governor Newsom’s September 30 signing deadline. Here’s what you need to know about the latest AI and privacy bills passed and vetoed.
Washington Attorney General Publishes First Data Privacy Report
On August 14, 2026, Washington Attorney General (AG) Nick Brown released the state’s first-ever Data Privacy Report (the “Report”). The Report examines how the modern data economy incentivizes the collection and retention of personal information, catalogs the harms that can…
FTC Issues Proposed Policy Statement on Personalized Pricing
FTC scrutiny of personalized pricing is increasing, prompting companies to strengthen disclosures, data practices and pricing transparency.
Seventh Circuit Rules that Text Messages are not Telephone Calls Under TCPA’s Private Right of Action
The Seventh Circuit’s decision in Steidinger v. Blackstone Medical Services held that text messages are not “telephone calls” under the TCPA’s private right of action for do-not-call violations, creating a potentially significant defense for businesses facing text message-based TCPA claims.
California Data Broker Updates
California is raising the stakes through its continuing enforcement activities involving data brokers.
Connecticut Amends Its Data Privacy Act to Increase Data Protections
Amendments to Connecticut’s comprehensive privacy law, the Data Privacy Act (“CTDPA”), recently took effect through Senate Bill 1295 (“SB 1295”), which expands the applicability of the CTDPA to entities that sell consumers’ personal information or process consumers’ sensitive information.