Alston & Bird Privacy, Cyber & Data Strategy Blog

DROP Is Coming Due: What California’s Delete Act Means for Data Brokers in August

By

Beginning August 1, 2026, data brokers must begin accessing California’s Delete Request and Opt-Out Platform (“DROP”) at least once every 45 days to retrieve and process consumer deletion requests, as the consumer-facing launch transitions to operational obligations for data brokers. DROP allows California residents to submit a single deletion request to hundreds of registered data brokers through the platform rather than contacting each broker individually. California consumers have been able … [Read more] about DROP Is Coming Due: What California’s Delete Act Means for Data Brokers in August

GSA Seeks Input on Revised AI Data Safeguarding Clause for Government Contracts

By and

On July 14, 2026, the General Services Administration (“GSA”) held a public listening session to gather stakeholder feedback on a revised draft General Services Administration Acquisition Regulation (“GSAR”) clause addressing the basic safeguarding … [Read more] about GSA Seeks Input on Revised AI Data Safeguarding Clause for Government Contracts

No Second Bite at the Apple for Accellion Plaintiffs: Judge Denies Motion to Modify Class Certification Order

By , and

In the Accellion data breach case, the United States District Court for the Northern District of California has denied the plaintiffs’ motion to modify the court’s order on class certification.  In its first class certification order, the Court … [Read more] about No Second Bite at the Apple for Accellion Plaintiffs: Judge Denies Motion to Modify Class Certification Order

Connected Vehicles Under the Spotlight: French DPA Issues Landmark Guidance on Vehicle Data Privacy

By , , and

On 30 June 2026, the French Data Protection Authority (CNIL) published comprehensive new guidance on the processing of personal data generated by connected vehicles, with a particular focus on geolocation data (available in French here). For … [Read more] about Connected Vehicles Under the Spotlight: French DPA Issues Landmark Guidance on Vehicle Data Privacy

Five Eyes Issues Urgent Call to Action on AI-Driven Cyber Threats

By , and

On June 22, 2026, the intelligence alliance known as Five Eyes released a statement warning that frontier AI models will fundamentally transform offensive and defensive cyber capabilities, and that the timeline for this transformation is measured in … [Read more] about Five Eyes Issues Urgent Call to Action on AI-Driven Cyber Threats