On August 14, 2026, Washington Attorney General (AG) Nick Brown released the state’s first-ever Data Privacy Report (the “Report”). The Report examines how the modern data economy incentivizes the collection and retention of personal information, catalogs the harms that can
WilmerHale Privacy and Cybersecurity Law
WilmerHale’s Cybersecurity, Privacy and Communications Practice (CPC) represents sophisticated, high-profile clients on a wide range of challenges—from routine matters to cutting-edge issues where the law is unclear and the enforcement risks are high. Our internationally recognized team, composed of lawyers from different practice areas and offices, possesses a mix of counseling, regulatory, litigation, enforcement and transactional knowledge. This blog's authors are members of the CPC team.
Blog Authors
Latest from WilmerHale Privacy and Cybersecurity Law
FTC Issues Proposed Policy Statement on Personalized Pricing
FTC scrutiny of personalized pricing is increasing, prompting companies to strengthen disclosures, data practices and pricing transparency.
Seventh Circuit Rules that Text Messages are not Telephone Calls Under TCPA’s Private Right of Action
The Seventh Circuit’s decision in Steidinger v. Blackstone Medical Services held that text messages are not “telephone calls” under the TCPA’s private right of action for do-not-call violations, creating a potentially significant defense for businesses facing text message-based TCPA claims.
California Data Broker Updates
California is raising the stakes through its continuing enforcement activities involving data brokers.
Connecticut Amends Its Data Privacy Act to Increase Data Protections
Amendments to Connecticut’s comprehensive privacy law, the Data Privacy Act (“CTDPA”), recently took effect through Senate Bill 1295 (“SB 1295”), which expands the applicability of the CTDPA to entities that sell consumers’ personal information or process consumers’ sensitive information.
New Jersey Enacts Law Establishing Data Broker Registration Regime and Imposing Prohibitions on Sensitive Data Sales
On June 30, New Jersey Governor Mikie Sherrill signed A. 5328 (“the Act”) into law. The Act moved extremely quickly through the legislative process—it was introduced on June 28, then approved by the Assembly, Senate, and Governor a mere two…
Louisiana Enacts Nation’s Twenty-Second State Comprehensive Privacy Law
On May 29, 2026, Louisiana Governor Jeff Landry signed the Louisiana Data Privacy Act (LDPA) into law, making Louisiana the twenty-second state to enact a comprehensive privacy law and the third to do so this year, following Oklahoma and Alabama.…
What Companies Should Know About Connecticut’s New Omnibus AI Law
Connecticut’s sweeping AI law imposes broad transparency, safety and compliance obligations across multiple use cases with phased deadlines.
Incident Response and Data Retention Protocols at Center of NYDFS Enforcement Action Against Delta Dental
On April 30, the New York State Department of Financial Services (“NYDFS” or the “Department”) announced a $2.25 million settlement with Delta Dental Insurance Company and Delta Dental of New York, Inc. (an accident and health insurer and non-profit dental…
Seventh Circuit Weighs in on Critical BIPA Retroactivity Question
The Seventh Circuit held that BIPA’s 2024 amendment applies retroactively, meaning plaintiffs can recover only one statutory award per person for repeated collection of the same biometric data using the same method even if the case was filed prior to…