Inside Privacy

Updates on developments in data privacy and cybersecurity

Subscribe via RSS
Visit Blog

Blog Authors

ABCDEFGHIJKLMNOPQRSTUVWXYZ
Moriah Daugherty
Matthew DelNero
Edwin Djabatey
Stefanie Doebler
Madeleine Dolan
Yaron Dori
Marianna Drake
Natalie Dugan
Ben Duke
Ariel Dukes
Olivia Dworkin
Virginie de France

Latest from Inside Privacy

State legislatures have passed new laws focused on disclosing the use of AI in advertisements or depictions of individuals. On September 16, California Governor Gavin Newsom signed SB 1050, a new law requiring disclosures when certain advertisements prominently feature a “synthetic performer.”  This was one of several AI-related measures signed by Governor Newsom this…

In the final days of California’s 2026 legislative session, California Governor Gavin Newsom signed a series of privacy legislation spanning consumer privacy rights, data broker activities, digital platform design, and civil remedies for website privacy litigation. Governor Newsom also vetoed a privacy measure that would have imposed broad restrictions on the sale and sharing of…

On October 1, 2026, the U.S. Cybersecurity and Infrastructure Security Agency (“CISA”) submitted a draft of the Final Rule implementing the Cyber Incident Reporting for Critical Infrastructure Act of 2022 (“CIRCIA”) to the Office of Information and Regulatory Affairs (“OIRA”) for interagency review, marking one of the final steps before the Final Rule will be…

On September 9, 2026, the U.S. Federal Bureau of Investigation (“FBI”) announced the publication of the FBI Cyber Strategy (the “Strategy”).  The Strategy, which “provides a roadmap for defending the American people and the nation’s critical infrastructure in cyberspace,” is broken into four pillars:

  • Investigate, Disrupt, and Impose Cost on Cyber Adversaries;
  • Support Victims;
  • Increase

    • …

    Recently, California Governor Gavin Newsom signed a sweeping set of laws related to minors’ privacy and safety, including new laws that restrict covered platforms from providing certain features to users under 16, impose a duty of care on social media platforms, revise the state’s Age-Appropriate Design Code, modify the state’s age-assurance requirements governing age signals,…

    On August 19, 2026, Connecticut Attorney General William Tong announced a $275,000 settlement with online tax preparation company TaxAct over allegations that the company improperly disclosed taxpayer information to advertising partners through third-party tracking technologies on its website. The Attorney General alleged that, between January 2018 and December 2022, TaxAct used third-party tracking technologies for…

    On August 12, 2026, the Administration published a National Security Presidential Memorandum (“NSPM”) (“Expanding Capabilities to Combat Transnational Cyber-Enabled Crime”) that signals the Administration’s focus on private-sector participation in offensive cyber operations by establishing a federally supervised program to enable private sector participants to conduct offensive cyber operations against “Cyber-Enabled Transnational Criminal Organizations” (“CE-TCOs”).  …

    Employers increasingly rely on automated tools to help make decisions concerning hiring, promotion, discipline, and termination. In response, state legislatures and agencies have begun to regulate uses of these technologies, often referred to as automated decision-making technology (“ADMT”). These laws generally require entities that deploy ADMT in the employment context to, among other requirements, notify…

    The Illinois Governor recently signed SB 2886, which expands the scope of the state’s Genetic Information Privacy Act (“GIPA”) to include “biomarker testing” and “biomarker.” GIPA currently regulates the collection, use, and disclosure of genetic testing information.

    The bill defines “biomarker” as “a characteristic that is objectively measured and evaluated as an indicator of…