Alston & Bird Privacy, Cyber & Data Strategy Blog

FTC Reverses Rytr Consent Order Amid Push for Federal AI Standards

By , , , and

On December 22, 2025, the Federal Trade Commission (FTC) set aside its 2024 consent order against Rytr, a generative AI-powered company, concluding that the original complaint “failed to satisfy the legal requirements of the FTC Act” and that the order unduly burdened AI innovation in violation of the Trump Administration’s January 2025 AI Executive Order and America’s AI Action Plan, which prioritize fostering AI adoption. Background: The 2024 Rytr Consent Order In September 2024, the FTC … [Read more] about FTC Reverses Rytr Consent Order Amid Push for Federal AI Standards

California Attorney General Announces Investigative Sweep into “Surveillance Pricing”

By , and

On January 28, 2026, California Attorney General (“AG”) Rob Bonta announced an investigative sweep targeting “surveillance pricing” practices among businesses in the retail, grocery, and hotel sectors. The investigation focuses on companies that use … [Read more] about California Attorney General Announces Investigative Sweep into “Surveillance Pricing”

European Commission Publishes Guidance For Companies Implementing the EU Cyber Resilience Act

By , and

On December 3, 2025, the European Commission published its first set of technical FAQs on the EU Cyber Resilience Act (‘CRA’). The CRA is an EU-wide law which lays down cybersecurity requirements for ‘products with digital elements’ (‘PDEs’), … [Read more] about European Commission Publishes Guidance For Companies Implementing the EU Cyber Resilience Act

New York Regulates Large Artificial Intelligence Models

By , , , and

On December 19, 2025, just eight days after President Trump issued an executive order titled “Ensuring a National Policy Framework for Artificial Intelligence” to challenge burdensome state laws that regulate artificial intelligence (the “December … [Read more] about New York Regulates Large Artificial Intelligence Models

DOJ Cybersecurity Enforcement Pace Shows No Signs of Slowing Down Going Into 2026

By , , and

As 2025 drew to a close, the United States Department of Justice (DOJ) announced significant developments in cases relating to the allegedly deficient cybersecurity practices of two Department of Defense (DoD) contractors. These two cases suggest … [Read more] about DOJ Cybersecurity Enforcement Pace Shows No Signs of Slowing Down Going Into 2026