Alston & Bird Privacy, Cyber & Data Strategy Blog

DOJ Cybersecurity Enforcement Pace Shows No Signs of Slowing Down Going Into 2026

By , , and

As 2025 drew to a close, the United States Department of Justice (DOJ) announced significant developments in cases relating to the allegedly deficient cybersecurity practices of two Department of Defense (DoD) contractors. These two cases suggest that the federal government will continue to make DFARS 7012 compliance for companies that process Controlled Unclassified Information (CUI) an enforcement priority in 2026. They also suggest that the DOJ may be broadening its enforcement efforts.On … [Read more] about DOJ Cybersecurity Enforcement Pace Shows No Signs of Slowing Down Going Into 2026

Spanish DPA Highlights Privacy Risks in GenAI Content Creation

By and

Earlier this month, the Spanish Data Protection Authority (Agencia Española de Protección de Datos, or AEPD) issued new guidance on the privacy and data protection risks associated with uploading images or photos - whether directly or indirectly … [Read more] about Spanish DPA Highlights Privacy Risks in GenAI Content Creation

Texas Court Blocks Smart TV Data Collection

By , and

A Texas state court has issued a temporary restraining order  (“TRO”) blocking Hisense, a major Chinese smart TV manufacturer, from collecting data on the content viewers watch via Automatic Content Recognition (“ACR”) technology. Background The … [Read more] about Texas Court Blocks Smart TV Data Collection

How to Comply with the EU AI Act: Guidance from the Spanish AI Regulator

By and

On December 10, the Spanish supervisory authority for the EU AI Act (Agencia Española de Supervisión de Inteligencia Artificial, or AESIA) published a set of 16 detailed guidelines and non-binding checklists (available online here in Spanish) … [Read more] about How to Comply with the EU AI Act: Guidance from the Spanish AI Regulator