Alston & Bird Privacy, Cyber & Data Strategy Blog

GDPR Meets DSA: Key Takeaways from the EDPB’s Final Guidelines

By and

On 17 September 2026, the European Data Protection Board (EDPB) published its final guidelines on the interplay between the General Data Protection Regulation (GDPR) and the Digital Services Act (DSA) (available here). While the GDPR regulates the processing of personal data, the DSA seeks to create a safer and more transparent online environment by imposing a broad range of obligations on online intermediary services, including hosting providers, online platforms, marketplaces, social media … [Read more] about GDPR Meets DSA: Key Takeaways from the EDPB’s Final Guidelines

State Privacy Laws Are Moving Beyond Disclosures: What Businesses Need to Know in 2026

By , , and

State privacy laws are increasingly regulating how businesses collect, use, share, and govern personal information in practice, not just what they say in privacy notices. Compliance challenges now extend beyond disclosures to areas such as digital … [Read more] about State Privacy Laws Are Moving Beyond Disclosures: What Businesses Need to Know in 2026

New AI Rules for Lawyers? California Codifies Attorney Obligations for the Use of Generative AI

By , and

On September 30, 2026, California Governor Gavin Newsom signed Senate Bill 574, authored by Senator Thomas Umberg, which regulates the use of generative artificial intelligence (“GenAI”) by attorneys, arbitrators, judicial officers, and alternative … [Read more] about New AI Rules for Lawyers? California Codifies Attorney Obligations for the Use of Generative AI

White House Secures Voluntary Industry Commitments on Independent AI Audits

By , and

On September 29, 2026, the President met with executives of several leading artificial intelligence developers at the White House. The parties announced a voluntary framework titled “The White House Accord on Super Intelligence” (the “Accord”). Under … [Read more] about White House Secures Voluntary Industry Commitments on Independent AI Audits

NYDFS Issues Guidance on the Million Dollar Question—How to Conduct Cybersecurity Risk Assessments Under Part 500

By , , and

On September 10, 2026, the New York State Department of Financial Services (“NYDFS”) published an Industry Letter (the “Letter”) to regulated entities (“Covered Entities”) addressing what is probably the most frequently asked Part 500 question: “How … [Read more] about NYDFS Issues Guidance on the Million Dollar Question—How to Conduct Cybersecurity Risk Assessments Under Part 500