AI Regulatory Landscape: Three Things to Know - 1. Has the EU AI Act implementation deadline been delayed? As part of its new digital omnibus package, on November 19th the European Commission proposed rules aimed at...more
12/3/2025
/ AI Act ,
Artificial Intelligence ,
California ,
EU ,
European Commission ,
Executive Orders ,
Innovative Technology ,
Machine Learning ,
Minors ,
New Legislation ,
Proposed Rules ,
Risk Management ,
Trump Administration
The use of facial recognition technology in stadiums is becoming increasingly popular and has the potential to improve the visitor experience. Venues can use the technology to shorten queues at entrances and concession...more
11/4/2025
/ AI Act ,
Arenas and Stadiums ,
Biometric Information ,
California Consumer Privacy Act (CCPA) ,
Consent ,
Cybersecurity ,
Data Privacy ,
Enforcement Actions ,
Facial Recognition Technology ,
General Data Protection Regulation (GDPR) ,
Innovative Technology ,
State Privacy Laws
On September 29, 2025, California Governor Gavin Newsom signed the Transparency in Frontier Artificial Intelligence Act (TFAIA) (SB 53) into law. ...more
10/23/2025
/ Artificial Intelligence ,
California ,
Corporate Counsel ,
Disclosure Requirements ,
Information Technology ,
Innovative Technology ,
New Legislation ,
Operating System Developers ,
Regulatory Requirements ,
Reporting Requirements ,
Risk Management ,
State and Local Government ,
Transparency
On September 30, 2025, the California Privacy Protection Agency (CPPA) issued a final order against farm, ranch and rural lifestyle retailer, Tractor Supply Company (“Tractor Supply”), for violations of the California...more
10/21/2025
/ Administrative Fines ,
California Consumer Privacy Act (CCPA) ,
California Privacy Protection Agency (CPPA) ,
Consumer Privacy Rights ,
Data Protection ,
Disclosure Requirements ,
Enforcement Actions ,
Fines ,
Opt-Outs ,
Retailers ,
State Privacy Laws ,
Statutory Violations
The Italian Law No. 132/2025 on rules applicable to AI systems and models (‘Italian AI Law’) took effect October 10, 2025. It aims to integrate and implement the broader European AI regulatory framework (EU AI Act) by...more
10/16/2025
/ Artificial Intelligence ,
Clinical Trials ,
Cybersecurity ,
Data Protection ,
EU ,
Healthcare ,
Intellectual Property Protection ,
Italy ,
New Legislation ,
Popular ,
Regulatory Requirements ,
Research and Development
The compliance challenge: Companies operating globally face a complex maze of emerging AI regulations. Our panel provided practical guidance for those navigating these fast-moving and divergent legal regimes....more
10/6/2025
/ AI Act ,
Artificial Intelligence ,
Compliance Management Systems ,
Cross-Border Transactions ,
Data Protection Impact Assessments (DPIAs) ,
General Data Protection Regulation (GDPR) ,
Innovative Technology ,
International Regulatory Standards ,
Machine Learning ,
New Regulations ,
Popular ,
Regulatory Requirements ,
Risk Management
In this month's update: AI Regulatory Landscape: Three Things to Know What does Illinois’ sweeping new AI law mean for behavioral health providers? How has the Colorado AI Act changed? When does a downstream actor become a...more
9/25/2025
/ Artificial Intelligence ,
Enforcement Actions ,
EU ,
Federal Trade Commission (FTC) ,
Government Agencies ,
Healthcare ,
Innovative Technology ,
Machine Learning ,
New Legislation ,
Popular ,
Regulatory Oversight ,
Regulatory Reform ,
Regulatory Requirements ,
State and Local Government
Colorado enacted a first-of-its-kind AI law, the Colorado AI Act (SB 24-205) governing the development and use of artificial intelligence. ...more
9/15/2025
/ Algorithms ,
Artificial Intelligence ,
Bias ,
Colorado ,
Corporate Counsel ,
Disclosure Requirements ,
Discrimination ,
Innovative Technology ,
Machine Learning ,
New Legislation ,
Non-Discrimination Rules ,
Regulatory Requirements ,
Risk Management ,
State and Local Government ,
Transparency
In this month's update: AI Regulatory Landscape: Three Things To Know How will Trump’s “AI Action Plan” and Executive Orders impact U.S. tech and federal procurement? Which companies are subject to “general-purpose” AI...more
8/18/2025
/ Artificial Intelligence ,
Automated Decision Systems (ADS) ,
California ,
Corporate Counsel ,
Donald Trump ,
EU ,
European Commission ,
Executive Orders ,
Financial Services Industry ,
New Legislation ,
Popular ,
Regulatory Requirements
Wearable health technology is rapidly transforming the landscape of professional sports. From heart rate monitors and GPS trackers to biometric gloves and brain health sensors, these devices are now commonplace in...more
Interest in genetic data is on the rise, driven by the growth of direct-to-consumer (DTC) genetic testing and its value for AI in drug development and personalized medicine. Historically, gaps in privacy laws have sometimes...more
8/8/2025
/ Bankruptcy Code ,
Data Privacy ,
Department of Justice (DOJ) ,
Genetic Discrimination ,
Genetic Testing ,
GINA ,
Health Insurance Portability and Accountability Act (HIPAA) ,
New Legislation ,
Privacy Laws ,
Regulatory Requirements ,
State Privacy Laws
On July 23, 2025, President Trump announced a sweeping new AI strategy, releasing the highly anticipated "Winning the AI Race: America’s AI Action Plan" and signing three executive orders regarding federal procurement,...more
8/6/2025
/ Artificial Intelligence ,
Executive Orders ,
Export Controls ,
Federal Contractors ,
Infrastructure ,
Open Source Software ,
OSTP ,
Popular ,
Procurement Guidelines ,
Regulatory Reform ,
Trump Administration
AI Regulatory Landscape: Three Things To Know What's Happening with U.S. State AI Laws Right Now? Will Federal AI Regulation Override State Laws? What Is the General-Purpose AI Code of Practice? AI Bills We're Keeping an Eye...more
In our continuing coverage of the EU Artificial Intelligence Act, co-hosts Jerry Buckley and Caroline Stapleton are joined by Orrick partners Shannon Yavorsky and Julia Apostle. The conversation explores how companies can...more
On July 1, 2025 the California Attorney General announced the largest CCPA settlement to date, totaling $1.55 million. The settlement, which is awaiting court approval, was the result of an investigation by the California...more
7/9/2025
/ Advertising ,
California Consumer Privacy Act (CCPA) ,
Corporate Counsel ,
Data Collection ,
Data-Sharing ,
Enforcement Actions ,
Opt-Outs ,
Privacy Policy ,
Settlement ,
State Attorneys General ,
Third-Party
The Department of Justice’s (DOJ) 90-day grace period for compliance with the Data Security Program (DSP) ends on July 8, 2025, and enforcement is expected to begin. This regulatory regime was created for national security...more
7/7/2025
/ China ,
Corporate Counsel ,
Covered Person ,
Cross-Border Transactions ,
Data Privacy ,
Data Security ,
Department of Justice (DOJ) ,
Enforcement Actions ,
International Data Transfers ,
National Security ,
Regulatory Requirements
As regulatory scrutiny around automatic renewals intensifies, understanding the Federal Trade Commission’s new “Click-to-Cancel” rule and California’s recently amended Automatic Renewal Law, is essential for companies looking...more
Budget reconciliation bill H.R.1, the “One Big Beautiful Bill Act,” currently pending in the U.S. Senate, originally included not only tax and spending provisions but also a proposed multi-year pause on state and local...more
Budget reconciliation bill H.R.1, the “One Big Beautiful Bill Act,” currently pending in the U.S. Senate, includes not only tax and spending provisions but also a proposed five-year pause on state and local enforcement of...more
On May 1, 2025, the California Privacy Protection Agency (CPPA) issued a final order against clothing retailer, Todd Snyder, for violations of the California Consumer Privacy Act (CCPA). The enforcement action targeted the...more
On April 11, 2025, the Department of Justice’s (DOJ) National Security Division (NSD) released an Implementation and Enforcement Policy, a Compliance Guide, and a list of over 100 Frequently Asked Questions (FAQs) to help...more
Sports teams, leagues, agents and venues collecting personal information from athletes, fans and sponsors must comply with evolving privacy regulations. Here are key takeaways from a conversation Orrick recently hosted with...more
AI companies should familiarize themselves with trade secret law to safeguard their innovations. A company does not need to register a trade secret to invoke it in litigation, unlike other IP protections. Trade secrets can...more
State legislators nationwide have proposed or passed a flurry of laws to regulate AI, with new ideas continuing to emerge as most state legislatures prepare to convene early next year. The most notable bill to date is the...more
The Department of Justice has finalized prohibitions and restrictions on cross-border transfers of certain data to China and other “Countries of Concern” (as defined below). It seeks to address what is, in the U.S....more
1/21/2025
/ Artificial Intelligence ,
China ,
Cuba ,
Data Privacy ,
Data Security ,
Department of Justice (DOJ) ,
International Data Transfers ,
International Emergency Economic Powers Act (IEEPA) ,
Iran ,
National Security ,
Personal Data ,
Russia