As governments increasingly focus on cloud security and sovereignty, the European Commission (“EC”) is, through its proposal for a Cloud and AI Development Act (“CADA Proposal”), attempting to create a regime establishing “sovereignty” requirements on cloud computing service providers that can be procured by the public sector. In our prior
Continue Reading A Comparison of the EU Cloud and AI Development Act Requirements Against the U.S. FOCI Regime and FedRAMPNew AI Transparency Requirements Enacted for Advertisers and Deployers
By Jayne Ponder, Laura Kim & Irene Kim on
Posted in Advertising & Marketing
State legislatures have passed new laws focused on disclosing the use of AI in advertisements or depictions of individuals. On September 16, California Governor Gavin Newsom signed SB 1050, a new law requiring disclosures when certain advertisements prominently feature a “synthetic performer.” This was one of several AI-related measures…
Continue Reading New AI Transparency Requirements Enacted for Advertisers and DeployersCalifornia Enacts New Privacy Legislation Affecting Consumer Rights, Data Brokers, and Website Tracking Litigation
By Jayne Ponder, Lindsey Tonsager & Bryan Ramirez on
Posted in State Privacy
In the final days of California’s 2026 legislative session, California Governor Gavin Newsom signed a series of privacy legislation spanning consumer privacy rights, data broker activities, digital platform design, and civil remedies for website privacy litigation. Governor Newsom also vetoed a privacy measure that would have imposed broad restrictions on…
Continue Reading California Enacts New Privacy Legislation Affecting Consumer Rights, Data Brokers, and Website Tracking LitigationCISA Submits Final CIRCIA Rule for OMB Review
Posted in Critical Infrastructure, Cybersecurity
On October 1, 2026, the U.S. Cybersecurity and Infrastructure Security Agency (“CISA”) submitted a draft of the Final Rule implementing the Cyber Incident Reporting for Critical Infrastructure Act of 2022 (“CIRCIA”) to the Office of Information and Regulatory Affairs (“OIRA”) for interagency review, marking one of the final steps before…
Continue Reading CISA Submits Final CIRCIA Rule for OMB ReviewCalifornia Governor Signs Over 20 AI-related Bills into Law
By Jayne Ponder, Diana Lee & Evan Chiacchiaro on
Posted in Artificial Intelligence (AI), Technology
Governor Gavin Newsom of California signed over 20 AI-related bills into law in the final days of September. Several of these bills address topics such as frontier model and generative AI oversight, AI transparency, and new requirements for use of AI in particular industries, described below. In addition to these…
Continue Reading California Governor Signs Over 20 AI-related Bills into LawCalifornia Governor Signs SB 690, Eliminating Private Website-Based CIPA Pen Register Claims and Calling for Broader CIPA Reform
Posted in State Privacy
On September 30, Governor Gavin Newsom signed SB 690, a significant new law aimed at curbing the wave of lawsuits and demand letters asserting “pen register” claims under the California Invasion of Privacy Act (“CIPA”). The legislation eliminates the private right of action for pen register and trap-and-trace claims arising…
Continue Reading California Governor Signs SB 690, Eliminating Private Website-Based CIPA Pen Register Claims and Calling for Broader CIPA ReformNew California AI Employment Laws: Key Requirements for Employers
Posted in State Privacy
On September 30, California Governor Gavin Newsom signed three laws that will regulate the use of AI in the employment context, starting in the new year. Below, we briefly summarize these developments, which we discuss in greater detail in our prior blog post. These laws join an existing body…
Continue Reading New California AI Employment Laws: Key Requirements for EmployersKey Takeaways for Private Sector Entities from the FBI’s New Cyber Strategy
- Investigate, Disrupt, and Impose Cost on
California Enacts Several Minors’ Privacy and Safety Laws
By Lindsey Tonsager, Jenna Zhang & Irene Kim on
Posted in Children's Privacy, State Privacy
Recently, California Governor Gavin Newsom signed a sweeping set of laws related to minors’ privacy and safety, including new laws that restrict covered platforms from providing certain features to users under 16, impose a duty of care on social media platforms, revise the state’s Age-Appropriate Design Code, modify the state’s age-assurance requirements governing age signals, and impose safety requirements on AI chatbots. This blog summarizes the key takeaways from these new laws.
Continue Reading California Enacts Several Minors’ Privacy and Safety LawsThe EU KIDS Act Proposal: Towards a New Regulatory Framework for the Protection of Children Online
On September 17, 2026, the European Commission (the “Commission”) published its proposal for a new EU framework on child safety online (the “KIDS Act”). The proposed Regulation aims to introduce EU-harmonized age-based account restrictions, safety-by-design rules, and age-assurance obligations across a broad range of digital services and systems.
The proposal is the latest of a growing body of initiatives aimed at strengthening children’s safety and privacy in the digital world, both in the EU and globally, as discussed in our recent blog post.
This post summarizes some of the KIDS Act’s key features.
Continue Reading The EU KIDS Act Proposal: Towards a New Regulatory Framework for the Protection of Children Online