Cybersecurity & Privacy

  • October 28, 2024

    Conn. Healthcare Co.'s $1.5M Data Breach Deal Gets Final OK

    A Connecticut federal judge has given his final approval to a class action settlement that requires Merritt Healthcare Advisors to pay thousands of people whose personal information was exposed in a data breach.

  • October 28, 2024

    Mass. Court's Wiretap Ruling May Be Bad Omen For Plaintiffs

    A ruling by the Massachusetts high court rejecting wiretap claims over website operators' use of tracking software like Meta Pixel and Google Analytics shows the steep climb plaintiffs may continue to face as they try to apply older laws to modern technologies, experts told Law360.

  • October 28, 2024

    Denver Law Firm Faces Class Action Over Data Breach

    The former spouse of a Sherr Puttmann Akins Lamb PC client has launched a putative class action in Colorado state court alleging that sensitive information she provided to the Denver-based family law firm, including her Social Security number, ended up on the dark web following a data breach.

  • October 28, 2024

    CrowdStrike Fires Back At Delta In IT Outage Blame Game

    CrowdStrike filed a federal lawsuit against Delta Air Lines on Friday, the same day the airline filed a $500 million complaint in Georgia state court blaming the cybersecurity firm for implementing "untested and faulty updates" to its software that knocked out computers with Microsoft Windows operating systems worldwide.

  • October 28, 2024

    King & Spalding Adds White & Case Antitrust Litigator In NY

    King & Spalding LLP is expanding its business litigation team, announcing Monday it is bringing in a White & Case LLP litigator as a partner in its New York office to boost its antitrust capabilities.

  • October 28, 2024

    MVP: Dechert's Brenda Sharton

    Dechert LLP partner Brenda Sharton helped the developer of a popular "magic avatar" app shake sprawling class claims that its AI-generated portraits unlawfully harvest Illinois residents' biometric data, earning her a place among the 2024 Law360 Cybersecurity & Privacy MVPs.

  • October 25, 2024

    AI Surge, Vendor Risks Fuel Election Security Concerns

    The explosion of the tech known as artificial intelligence and persistent vendor security holes are amplifying longstanding concerns about efforts by hostile nations and other cyberattackers to disrupt and discredit U.S. elections as officials work to guard against both familiar and novel risks.

  • October 25, 2024

    Delta Says CrowdStrike Must Pay For Catastrophic IT Outage

    When cybersecurity firm CrowdStrike implemented "untested and faulty updates" to its software, knocking out computers with Microsoft Windows operating systems worldwide, Delta Air Lines' operations were crippled, costing it $500 million as thousands of flights were canceled, according to the airline's lawsuit lodged Friday in Georgia state court.

  • October 25, 2024

    Crypto Rapidly Transforming IRS Criminal Cases, Agent Says

    Cryptocurrency is altering the size of many criminal cases that federal law enforcement agencies are handling, an Internal Revenue Service criminal investigator told the UCLA Tax Controversy Conference, commenting that over the past three years the agency broke its record for asset seizures three times.

  • October 25, 2024

    Apple-Google Pact Plaintiff Stuck With 9th Circ. Appeal

    A Ninth Circuit panel has refused to let a training school send its case accusing Google of paying Apple to refrain from developing its own search engine back to district court in light of a recent D.C. federal judge's decision that Google monopolizes the search market.

  • October 25, 2024

    Social Media MDL Judge Rips Meta, AGs' Agency Doc Fight

    A California federal judge Friday slammed counsel for Meta and dozens of state attorneys general during a contentious hearing in multidistrict litigation over claims social media is addictive for not reaching agreements on Meta's demands for documents from 275 state agencies, telling both sides' attorneys, "we should've never gotten here."

  • October 25, 2024

    AI Researchers Lose Bid For DMCA Anti-Hacking Carveout

    Researchers who want to look into whether generative artificial intelligence was producing content that was discriminatory or explicit won't be exempt from a provision of the Digital Millennium Copyright Act that bars circumventing digital locks on copyrighted material, according to a new rule.

  • October 25, 2024

    Heinz Charity Ends Embezzlement Suit Against Ex-Adviser

    The Pittsburgh-based Heinz Endowments has dropped a federal lawsuit accusing a former technology adviser of steering nearly $1 million of work to a sham company, according to court filings.

  • October 25, 2024

    Photo App Says BIPA Ignorance Warrants Insurance Coverage

    The company behind a website and app that allow families to view photos of their children at summer camp told an Illinois federal judge it had no idea about the state's biometric privacy law, and thus couldn't have knowingly violated it, arguing that means insurers cannot shirk their responsibility to defend it in an underlying suit. 

  • October 25, 2024

    Election Records Law Needs Update, Mich. Justice Says

    The Michigan Supreme Court declined on Friday to revive criminal charges against an election worker who downloaded a copy of a voter list onto a personal thumb drive, prompting one justice to argue the law he was cleared of violating is out of touch in the digital age.  

  • October 25, 2024

    'Magician' Tax Preparer Close To Plea Deal In $100M Case

    A New York City-based tax preparer who earned the nickname "the magician," allegedly making $15 million while fraudulently depriving the IRS of $100 million, is in "fruitful" plea talks with prosecutors, a Manhattan federal judge heard Friday.

  • October 25, 2024

    IRS Agents To Appeal Exclusion From Biden Tax Privacy Case

    The IRS agents accused of improperly revealing Hunter Biden's tax return information in his privacy lawsuit against the U.S. government told a D.C. federal court Friday that they're planning to challenge a decision preventing them from personally intervening in the case.

  • October 25, 2024

    Taxation With Representation: Davis Polk, Skadden, Kirkland

    In this week's Taxation With Representation, Atlantic Union Bankshares Corp. absorbs Sandy Spring Bancorp, Sophos and Secureworks merge, Wendel Group takes a stake in Monroe Capital LLC, and Acuity Brands Inc. buys QSC LLC.

  • October 24, 2024

    LinkedIn Hit With €310M Irish Fine For Targeted Ad Practices

    Ireland's data protection commission has handed down a €310 million ($335 million) penalty against LinkedIn for allegedly failing to have an adequate legal basis for processing European Union users' personal data for targeted advertising purposes, the regulator announced Thursday.

  • October 24, 2024

    USPTO Is Using AI — And More IP Takeaways From Vidal

    U.S. Patent and Trademark Office Director Kathi Vidal fielded tough questions before a crowd of attorneys Thursday to start the American Intellectual Property Law Association annual meeting, covering topics from her agency's cybersecurity challenges to the backlog of patent and trademark applications.

  • October 24, 2024

    AMA Latest To Sue MultiPlan Over Out-of-Network Pricing

    The American Medical Association and the Illinois State Medical Society are the latest to accuse MultiPlan and the nation's largest health insurers of colluding through the use of the data firm's pricing tools to systematically underpay out-of-network providers, alleging in Illinois federal court Thursday that the "far-reaching and unlawful cartel" inhibits its members from offering critical care.

  • October 24, 2024

    Trade Orgs Back Google's Bid For 9th Circ. Play Store Pause

    Trade groups and cybersecurity experts have told the Ninth Circuit to extend the pause on the mandate forcing Google to open up its Play Store and help rival app stores compete through that distribution mechanism, backing Google with amicus briefs warning of major disruptions to the app ecosystem.

  • October 24, 2024

    CAT Is 'Out Of The Bag': Judge Won't Block SEC Data Tool

    The U.S. Securities and Exchange Commission can continue to monitor markets through a surveillance tool known as the consolidated audit trail while it fights a class action lawsuit challenging the tool's existence, with a Texas federal judge saying Thursday that enjoining data collection now would cause chaos and disruption.

  • October 24, 2024

    CFPB Cautions Over 'Unchecked Surveillance' Of Workers

    The Consumer Financial Protection Bureau said Thursday it is taking action to protect consumers from "unchecked surveillance" in the labor force, issuing guidance that warns companies to get consent from workers when using algorithmic hiring scores or other outside profiling data for employment purposes.

  • October 24, 2024

    Va. Judge Won't Block Feds' Nonprofit Disclosure Law

    A Virginia federal judge on Oct. 24 refused to stop the U.S. Department of the Treasury from enforcing a law that requires nonprofits such as community associations to disclose personal identifying information about their beneficial owners and applicants to a Treasury agency that focuses on stopping financial crimes.

Expert Analysis

  • Planning Law Firm Content Calendars: What, When, Where

    Author Photo

    During the slower month of August, law firms should begin working on their 2025 content calendars, planning out a content creation and distribution framework that aligns with the firm’s objectives and maintains audience engagement throughout the year, says Jessica Kaplan at Legally Penned.

  • 4 Steps To Address New Sanctions Time Bar Extension

    Author Photo

    Recent guidance from the Office of Foreign Assets Control clarifies details of the newly extended statute of limitations for civil and criminal enforcement of U.S. sanctions law, so compliance teams should implement key updates, including to lookback periods and recordkeeping policies, say attorneys at Freshfields.

  • Incident Response Lessons From The CrowdStrike Failure

    Author Photo

    CrowdStrike's incident highlights a growing problem within modern digital infrastructures — single points of failure that cause widespread disruption when things go wrong — so organizations should carefully review their digital infrastructure to identify unique areas of exposure or vulnerability, say Erik Dullea at Husch Blackwell and Kip Boyle at Cyber Risk Opportunities.

  • Series

    Playing Golf Makes Me A Better Lawyer

    Author Photo

    Golf can positively affect your personal and professional life well beyond the final putt, and it’s helped enrich my legal practice by improving my ability to build lasting relationships, study and apply the rules, face adversity with grace, and maintain my mental and physical well-being, says Adam Kelly at Venable.

  • What FCA Cases May Look Like In The Age Of Generative AI

    Author Photo

    Generative artificial intelligence raises unique considerations both in the context of potentially leading to False Claims Act cases and in the discovery and litigation phases of these lawsuits, says attorney Rachel Rose.

  • Law Firms Should Move From Reactive To Proactive Marketing

    Author Photo

    Most law firm marketing and business development teams operate in silos, leading to an ad hoc, reactive approach, but shifting to a culture of proactive planning — beginning with comprehensive campaigns — can help firms effectively execute their broader business strategy, says Paul Manuele at PR Manuele Consulting.

  • 3 Ways To Limit Risks Of Black-Box AI In Financial Services

    Author Photo

    As regulators increasingly highlight the potential for artificial intelligence to make unfair consumer credit decisions, and require financial institutions to explain how these so-called black-box algorithms arrive at conclusions, companies should consider three key questions to reduce their regulatory risks from these tools, say Jeffrey Naimon and Caroline Stapleton at Orrick.

  • Takeaways From EU's 'Pay Or Consent' Advertising Probe

    Author Photo

    Anne-Gabrielle Haie and Charles Whiddington at Steptoe examine key points from the European Commission's recent investigation into Big Tech's use of "pay or consent" advertising models, as well as the European Data Protection Board’s opinion on how such models can comply with EU competition and data protection laws.

  • Energy And AI: Key Issues And Future Challenges

    Author Photo

    Artificial intelligence promises new technical advantages for the energy industry, but it is also responsible for vast, and growing, energy consumption — so the future of AI and energy will require balancing technological advancement with regulatory oversight, environmental responsibility and infrastructure development, say attorneys at Morgan Lewis.

  • When Banks Unknowingly Become HIPAA Biz Associates

    Author Photo

    There appears to be significant confusion regarding the application of the Health Insurance Portability and Accountability Act to financial institutions when serving healthcare-related clients, so these institutions should consider undertaking several steps as a starting point in the effort to achieve compliance, say attorneys at Vorys.

  • The Regulatory Headwinds Facing Lab-Developed Tests

    Author Photo

    Though the U.S. Food and Drug Administration's final rule regarding regulation of laboratory-developed tests outlines a four-year plan for ending enforcement discretion, and though this rule is currently being challenged in courts, manufacturers should heed compliance opportunities immediately as enforcement actions are already on the horizon, say attorneys at Kirkland & Ellis.

  • Opinion

    The Big Issues A BigLaw Associates' Union Could Address

    Author Photo

    A BigLaw associates’ union could address a number of issues that have the potential to meaningfully improve working conditions, diversity and attorney well-being — from restructured billable hour requirements to origination credit allocation, return-to-office mandates and more, says Tara Rhoades at The Sanity Plea.

  • Opting In To CIPA Risk Mitigation After New Precedent

    Author Photo

    A recent California federal court decision, adopting a new, broad interpretation of the California Invasion of Privacy Act, will likely increase the volume of CIPA claims and should prompt businesses to undertake certain preventative measures, including adopting an opt-in approach to using third-party website advertising technologies, say attorneys at Thompson Hine.

  • Opinion

    It's Time For A BigLaw Associates' Union

    Author Photo

    As BigLaw faces a steady stream of criticism about its employment policies and practices, an associates union could effect real change — and it could start with law students organizing around opposition to recent recruiting trends, says Tara Rhoades at The Sanity Plea.

  • Why DOJ's Whistleblower Program May Have Limited Impact

    Author Photo

    The U.S. Department of Justice’s new whistleblower pilot program aims to incentivize individuals to report corporate misconduct, but the program's effectiveness may be undercut by its differences from other federal agencies’ whistleblower programs and its interplay with other DOJ policies, say attorneys at Milbank.

Want to publish in Law360?


Submit an idea

Have a news tip?


Contact us here
Can't find the article you're looking for? Click here to search the Cybersecurity & Privacy archive.
Hello! I'm Law360's automated support bot.

How can I help you today?

For example, you can type:
  • I forgot my password
  • I took a free trial but didn't get a verification email
  • How do I sign up for a newsletter?
Ask a question!