Worldwide: Data Protection

The European Commission's draft guidelines on high-risk AI systems under the EU AI Act provide the clearest indication yet of how workplace AI tools will be regulated, with key compliance deadlines pushed to December 2027. Multinational employers now face the challenge of integrating these requirements into their global compliance frameworks alongside rules in California, Canada, Korea, and the UK, while navigating complex questions about when recruitment, performance management, and workforce allocation to

The Federal Trade Commission settles with RentGrow for $2.25 million over Fair Credit Reporting Act violations, while the UK Treasury emphasizes cyber resilience as a strategic enabler for financial services growth. The European Data Protection Board issues new guidance on anonymization, blockchain, and AI web scraping, and the Supreme Court eliminates for-cause removal protections for FTC Commissioners.

On July 9, 2026, the Federal Trade Commission (“FTC”), entered into a settlement with RentGrow, Inc. (“RentGrow”) after the filing of an agreed-upon consent order...

State legislatures across the U.S. are rapidly expanding legal requirements for businesses that collect data from minors, imposing obligations ranging from age verification and parental consent to restrictions on targeted advertising and data profiling. These evolving laws carry significant penalties and vary widely by jurisdiction, creating a complex compliance landscape for companies operating websites, online services, or social media platforms accessible to children. How are businesses navigating this p

State attorneys general across the nation are taking decisive action on multiple fronts, from securing major settlements over data breaches and consumer protection violations to challenging federal policy changes affecting education and grant funding. This week's developments showcase coordinated multistate efforts addressing digital privacy, financial fraud, and the protection of vital public services.

Federal regulators are dramatically expanding health information exchange through TEFCA while simultaneously ramping up enforcement against information blocking practices. With over 1 billion health records now flowing through the network and a new federal auditor in place, healthcare organizations face heightened scrutiny and potential penalties reaching $1 million per violation. How should providers prepare for this new era of interoperability oversight?

Appellate courts are reshaping data breach litigation by scrutinizing post-breach responses and raising evidentiary standards for plaintiffs. Recent decisions demonstrate that companies with disciplined incident response protocols, clear contractual defenses, and well-documented communications gain significant advantages when cases reach higher courts. The evolving legal landscape emphasizes that organizational preparedness and strategic documentation may prove as critical as cybersecurity measures themselv

A healthtech company discovered a newly hired remote employee was operating under a false identity as part of a nation-state-linked operation designed to fraudulently obtain technology jobs. With support from Riveron, the company rapidly contained the threat, investigated the incident, and strengthened its hiring verification controls to defend against this emerging attack vector.

This page provides information about cookie usage and data collection practices, explaining how the site uses cookies for operation, performance improvement, and content personalization. Users can manage their cookie preferences and learn about data sharing with third parties through linked privacy policies.