Alston & Bird Privacy, Cyber & Data Strategy Blog

Texas Enacts Responsible AI Governance Act

By , , and

On June 22, 2025, Texas Governor Greg Abbott signed House Bill 149, the Texas Responsible Artificial Intelligence Governance Act (“TRAIGA”), into law. TRAIGA imposes on businesses and governmental entities obligations and prohibitions for certain uses of artificial intelligence (“AI”), amends the Texas Capture or Use of Biometric Identifier Act (“CUBI”) to include certain exemptions, and amends the Texas Data Privacy and Security Act (“TDPSA”) to require processors to help controllers protect … [Read more] about Texas Enacts Responsible AI Governance Act

Back from the Brink: District Court Clears Air Regarding Individualized Damages Assessment in Data Breach Cases

By , and

On June 27, 2025, the District Court for the Middle District of Florida, on remand from the Eleventh Circuit, reversed course when it denied class certification to a group of plaintiffs who were purportedly impacted by a spring 2018 cyberattack on … [Read more] about Back from the Brink: District Court Clears Air Regarding Individualized Damages Assessment in Data Breach Cases

UK Data Protection Regulator Fines 23andMe ~$3.1 Million Following Credential Stuffing Attack

By and

On June 5, 2025, the UK’s Information Commissioner’s Office (ICO) fined 23andMe £2.31 million (~$3.1 million). The fine was for failing to implement adequate security measures to protect the personal data of over 155,000 UK users. The penalty … [Read more] about UK Data Protection Regulator Fines 23andMe ~$3.1 Million Following Credential Stuffing Attack

NYDFS Issues Guidance on Heightened Cybersecurity and Sanctions Risk from Global Conflict

By and

Overview On June 23, 2025, the New York State Department of Financial Services (“NYDFS”) issued an industry letter encouraging all regulated entities to review their cybersecurity and sanctions compliance programs in light of heightened … [Read more] about NYDFS Issues Guidance on Heightened Cybersecurity and Sanctions Risk from Global Conflict

Are You Ready For The Department Of Justice’s Bulk Data Transfer Rule?

By , and

On July 8, 2025, the Department of Justice (“DOJ”) is set to lift its self-imposed pause on enforcing certain violations of its Rule Preventing Access to US Sensitive Personal Data and Government-Related Data by Countries of Concern or Covered … [Read more] about Are You Ready For The Department Of Justice’s Bulk Data Transfer Rule?