United States: Data Protection

The Perfect Law Class Action Conference at NYU brought together practitioners and academics from Europe, Canada, and the United States to debate cutting-edge issues in class action litigation, with particular focus on privacy violations, securities fraud, and the transformative impact of artificial intelligence. The conference explored how Article III standing requirements are shaping privacy class actions, with detailed analysis of recent cases demonstrating the critical importance of pleading specific, se

California Governor Gavin Newsom signed SB 690, amending the California Invasion of Privacy Act to restrict private plaintiffs from bringing pen register and trap and trace claims arising from web-based conduct. While this amendment aims to reduce the wave of private CIPA litigation targeting website tracking technology, businesses remain exposed to several major types of claims and enforcement mechanisms under CIPA and related statutes.

Alabama, Louisiana, Oklahoma, and Vermont have enacted comprehensive consumer privacy laws, adding to the growing patchwork of state privacy regulations. While these laws share a common framework with existing state privacy statutes, each contains distinct requirements regarding applicability thresholds, opt-out mechanisms, sensitive data processing, and enforcement provisions that businesses must navigate carefully.

A federal court rejected TikTok's attempt to use two prior nationwide class action settlements—totaling over $93 million—to dismiss new privacy claims brought by minors alleging violations of the Children's Online Privacy Protection Act. The ruling hinged on whether the current plaintiffs were demonstrably members of the earlier settlement classes based solely on the pleadings, raising critical questions about the scope and enforceability of broad settlement releases in successive privacy litiga

A federal district court in Oklahoma has departed from the previous consensus on the use of automated license plate reader (“ALPR”) technology by law enforcement, holding that a police officer violated the Fourth Amendment when he queried ALPR databases to obtain one month of a vehicle’s historical location records without a warrant.

The legal profession has spent the past few years asking whether generative AI is trustworthy. Will it draft a contract, research an issue, summarize a record, or invent a case with impressive confidence? California’s new law shifts the focus to a more practical question: who takes responsibility when lawyers use it?

AI-enabled threats are rapidly outpacing traditional cybersecurity defenses, creating increasingly sophisticated risks to organizational data and systems. This podcast explores how artificial intelligence is being weaponized by bad actors faster than defensive measures can adapt, with recent incidents at major AI labs demonstrating that even the most advanced companies are struggling to contain AI agents within intended environments. Legal experts discuss practical strategies for protecting sensitive data t

On January 1, 2026, Texas’s newest law addressing the growing issues of data privacy and the use of Artificial Intelligence went into effect. The Texas Responsible Artificial Intelligence Governance Act (TRAIGA) was passed by the 89th Texas Legislature and signed into law by Gov. Greg Abbott in 2025.

California has enacted the nation's most comprehensive online child safety legislation, banning addictive social media features for minors under 16, establishing strict companion chatbot regulations, and imposing enhanced civil penalties for platforms that harm children. Companies operating social media platforms or chatbots accessible to California children must now assess their products, audit features, and prepare compliance programs ahead of the laws' effective dates.