North America: Technology

Since Jan. 1, 2026, some businesses have focused on more immediate obligations under the updated California Consumer Privacy Act (CCPA) regulations, including risk assessments and automated decision-making technology (ADMT) requirements. However, for the largest businesses, another deadline is quickly approaching — the first audit period under the CCPA’s new cybersecurity audit rules.

Cybersecurity leader JJ Markee explores how artificial intelligence is fundamentally transforming the threat landscape at machine speed, requiring Fortune 500 CISOs to rethink their approach to security fundamentals. The discussion reveals critical emerging challenges including non-human identity management, agent-swarm attacks, and the delicate balance between enabling AI innovation and managing enterprise risk.

Foreign companies entering Canada often assume their existing privacy programs designed for GDPR or CCPA compliance can simply extend to Canadian operations, but Canada's legal requirements demand targeted modifications. This comprehensive guide examines Canada's private sector privacy legislation, breach reporting obligations, AI governance expectations, and anti-spam regulations that businesses must navigate before launching in the Canadian market.

Two bodies of export regulations typically come to mind when we think of export controls: the Export Administration Regulations of the Commerce Department's Bureau of Industry and Security, and the International Traffic in Arms Regulations ...

The 2026 International Hotel Investment Forum EMEA revealed critical challenges facing the hospitality industry, from geopolitical tensions affecting Middle East markets to yield compression threatening profitability. Industry leaders grappled with how artificial intelligence will reshape booking channels and operations while maintaining the human touch that defines hospitality.

As AI agents begin to autonomously execute commercial transactions, a critical question emerges that precedes all others: will the platforms, merchants, and payment providers that control transaction infrastructure even allow these agents to participate? The architecture of access control is being built now, and it may determine the future of agentic commerce more than any legal doctrine.

With the ever-growing barrage of rhetoric over just how, when, and if, AI will kill us all, the conversation also lends itself to, do we believe it will be AI that kills us, or a bad actor using AI? If I showed you a picture of East Asia at night from space and pointed out that you can’t see North Korea for the lack of available electricity, (It’s 99% blacked out, and only Pyongyang shows a small cluster of light) would you think for a minute that they would have the tech savvy, and high end software, or even hardware, necessary to steal $6.7 billion in crypto since 2017?

A federal copyright case over a single Facebook photograph resulted in years of litigation despite a $200 damages award, demonstrating how routine image use in business marketing can create substantial legal and financial exposure. Understanding copyright compliance, licensing requirements, and proper image-sourcing procedures has become essential for businesses seeking to avoid costly infringement disputes.

Enterprise AI creates legal risk throughout the AI lifecycle, beginning before deployment. Model selection, data pipelines, vendor relationships, AI-generated outputs, consequential decision-making, contracts, and governance can create intellectual-property, privacy, confidentiality, contractual, regulatory, and liability exposure. Artificial intelligence is rapidly reshaping real-money gaming, but its value proposition is inseparable from regulatory risk.

Recent federal court decisions are challenging long-standing interpretations of the Telephone Consumer Protection Act's consent requirements for pre-recorded calls to cell phones.

Through our Viewpoints series, Riveron experts share their opinions on current topics, business trends, and industry news.

Effective January 1, 2025, California law AB 2426 will require companies offering online-only digital goods to disclose that consumers are purchasing a limited-duration license...