No Password Required: CISO at RSA and Champion of a Passwordless Future
From Diligence to Post-Closing: What’s Shifting in 2026 Health Care Transactions
Point-of-Sale Finance Series: Health Care Financing Compliance, Regulatory, and Privacy Pitfalls — Payments Pros – The Payments Law Podcast
Point-of-Sale Finance Series: Health Care Financing Compliance, Regulatory, and Privacy Pitfalls — The Consumer Finance Podcast
From Showroom to Server Room: AI in Auto Finance — Moving the Metal: The Auto Finance Podcast
Navigating Employee Data Responsibly: What’s the Tea in L&E?
AI, Algorithms, and Accountability: Unpacking the Colorado AI Act with Senator Rodriguez — Regulatory Oversight Podcast
Navigate the Money Matrix in Our Upcoming Series: Privacy, Security, and AI Explained — The Consumer Finance Podcast
No Password Required: Virtual CISO at Trace3 and Roller Derby Penalty Box Visitor
Block & Order | Building on Layer 1 with Jennie Levin: Algorand, Policy Shifts & Tokenization’s Future
The Privacy Insider Podcast Episode 21: What Businesses Get Wrong About Regulators and How to Fix Privacy Fast
12 Days of Regulatory Insights: Day 11 – FTC Enforcement Trends in a New Age — Regulatory Oversight Podcast
Listen: Digital Doppelgangers: Navigating AI and Likeness Rights
12 Days of Regulatory Insights: Day 8 – How State AGs Are Rewriting Social Media Rules — Regulatory Oversight Podcast
We get AI for work™: Is your Tool really AI?
Navigating FDA's 2025 AI Guidance: Risk-Based Framework, Public Comments, and Generative Models - The Good Bot Podcast
The Privacy Insider Podcast Episode 20: Privacy, Power, and the Algorithmic Workplace with Matthew Scherer of the Center for Democracy & Technology
The Down-Low on Data for Value-Based Enterprises and Their Participating Providers – Diagnosing Health Care Video Podcast
12 Days of Regulatory Insights: Day 5 – Privacy Under the Microscope — Regulatory Oversight Podcast
AI Boom and What the Future Holds - Data Centers Series
The EU Cyber Resilience Act (“CRA”) establishes mandatory cybersecurity requirements for most hardware and software products made available on the EU market. While the CRA's date of full application (11 December 2027) is...more
Scrutiny of European Union's dependence on non-European cloud services is intensifying amid geopolitical tensions and rising cyber risk. U.S. hyperscalers control more than 70% of the EU cloud market, while European...more
What Businesses Need to Know - Contrary to the expectations of many in the privacy field, no new state-level data privacy laws were passed in 2025. As we enter 2026, however, several laws that were passed in 2024, along...more
While often described as a hybrid of Software‑as‑a‑Service (SaaS) and Business Process Outsourcing (BPO), Business-Process-as-a-Service (BPaaS) is far more than the sum of its parts. It represents a strategic shift toward...more
New York state has joined New York City and the other jurisdictions that limit an employer’s ability to use an applicant’s or employee’s credit information in making employment decisions. Beginning April 18, 2026, New York...more
Businesses across many industries are racing to capture the value of artificial intelligence (AI) notetakers and meeting recording tools. The promise is obvious: faster follow‑ups, searchable records, and fewer dropped...more
Deepfakes have moved from novelty to material enterprise risk, reshaping how organizations assess privacy, security, brand integrity and marketing. This technology can erode evidentiary trust, enable impersonation and fraud...more
In February 2024, HHS finalized significant revisions to 42 CFR Part 2, the federal regulation governing the confidentiality of SUD treatment records. Part 2 has historically imposed stricter privacy protections than HIPAA,...more
The UK's online safety regulatory framework reached a significant milestone in 2025 with the first wave of risk assessments submitted under the Online Safety Act (OSA). Ofcom has now published its Year 1 Online Safety Risk...more
As noted in last week’s post, privacy risk assessments are now required in several states. Of the 19 U.S. states with comprehensive consumer data privacy laws, all but two mandate that businesses conduct privacy risk...more
The NSW Government has announced legislative reforms that will enhance the surveillance powers of investigative agencies including NSW’s Independent Commission Against Corruption (ICAC)....more
On January 14, 2026, the Federal Trade Commission finalized a sweeping order against General Motors LLC, General Motors Holdings LLC, and OnStar LLC. The order resolves allegations that the companies collected, retained, and...more
Data Privacy Day is recognized globally each year on January 28 as an international effort to raise awareness regarding the importance of secure privacy practices and data protection. The date commemorates the signing of...more
Rob Hughes, the CISO at RSA, has more than 25 years of experience leading security and cloud infrastructure teams. In this episode, he reflects on his unconventional career path, from co-founding the original Geek.com and...more
eDiscovery has become increasingly complex and costly. What once involved a few servers and email archives has become a vast network of cloud systems, collaboration tools, and AI-driven applications. As the volume and variety...more
Internal investigations are an important component of an effective legal and compliance program within health care organizations. These investigations may arise from many varied situations ranging from patient complaints,...more
If you work at or with an investment adviser, the SEC’s 2026 examination priorities are critical because they shape what examiners will scrutinize when assessing whether firms are acting in clients’ best interests, keeping...more
State attorneys general (AGs) are among the most active and influential regulators in the U.S., using broad statutory authority, political visibility, and growing technical knowledge to shape policy and enforcement across...more
Data privacy regulation continued to accelerate in 2025, with both U.S. regulators and international authorities placing increased emphasis on enforcement and operational compliance. ...more
This coming year will be an encore performance for the National Association of Insurance Commissioners’ cybersecurity and privacy protections working groups. After remixing in June 2024, when the Privacy Protections (H)...more
The new year is already off to a fast start in the world of cybersecurity and privacy. With Data Privacy Day approaching next week (January 28), we will look at three trends that we expect to see in the coming year. The...more
The European Data Protection Board (EDPB) has adopted its draft Recommendations 1/2026 on Binding Corporate Rules for Processors (BCR-P) (“Recommendations”). ...more
AI chatbots are no longer a novelty. They are now embedded in social media platforms, search engines, and educational tools. Providers of AI chatbots face mounting scrutiny nationwide, as advocacy groups and legislators...more
On December 6 2025, the CAC released the draft Network Data Security Risk Assessment Measures (Draft for Comments) for public consultation. The measures aim to standardize network data security risk assessment activities,...more
Recent amendments to the Illinois Right to Privacy in the Workplace Act include important employer responsibilities effective immediately; Massachusetts and Washington may soon enact similar laws. California’s recent...more
