Alston & Bird Privacy, Cyber & Data Strategy Blog

The White House’s Gold Eagle Initiative Signals a New Phase in AI Enabled Cyber Defense

By and

The White House has launched “Gold Eagle,” a new cybersecurity vulnerability coordination clearinghouse designed to use advanced AI capabilities to accelerate how the government and industry identify, prioritize, verify, and remediate software vulnerabilities. The initiative was established under the June 2, 2026 Executive Order, “Promoting Advanced Artificial Intelligence Innovation and Security,” and is being framed by the White House as a new operational model for cyber defense. Gold Eagle … [Read more] about The White House’s Gold Eagle Initiative Signals a New Phase in AI Enabled Cyber Defense

DROP Is Coming Due: What California’s Delete Act Means for Data Brokers in August

By

Beginning August 1, 2026, data brokers must begin accessing California’s Delete Request and Opt-Out Platform (“DROP”) at least once every 45 days to retrieve and process consumer deletion requests, as the consumer-facing launch transitions to … [Read more] about DROP Is Coming Due: What California’s Delete Act Means for Data Brokers in August

GSA Seeks Input on Revised AI Data Safeguarding Clause for Government Contracts

By and

On July 14, 2026, the General Services Administration (“GSA”) held a public listening session to gather stakeholder feedback on a revised draft General Services Administration Acquisition Regulation (“GSAR”) clause addressing the basic safeguarding … [Read more] about GSA Seeks Input on Revised AI Data Safeguarding Clause for Government Contracts

No Second Bite at the Apple for Accellion Plaintiffs: Judge Denies Motion to Modify Class Certification Order

By , and

In the Accellion data breach case, the United States District Court for the Northern District of California has denied the plaintiffs’ motion to modify the court’s order on class certification.  In its first class certification order, the Court … [Read more] about No Second Bite at the Apple for Accellion Plaintiffs: Judge Denies Motion to Modify Class Certification Order

Connected Vehicles Under the Spotlight: French DPA Issues Landmark Guidance on Vehicle Data Privacy

By , , and

On 30 June 2026, the French Data Protection Authority (CNIL) published comprehensive new guidance on the processing of personal data generated by connected vehicles, with a particular focus on geolocation data (available in French here). For … [Read more] about Connected Vehicles Under the Spotlight: French DPA Issues Landmark Guidance on Vehicle Data Privacy