On June 5, 2026, the Federal Trade Commission (“FTC”) gave final approval to a modified consent order against Illuminate Education, Inc. (“EdTech Provider”), a K-12 software vendor, settling allegations that the EdTech Provider did not adequately protect the personal data of more than 10 million students. The action — which follows a public comment period […]
About Jennifer Everett
Your AI Therapist May Need a Lawyer: Pennsylvania Brings Suit Against Chatbot Developer
Our Health Care Group investigates a lawsuit against Character.AI that raises legal risks for AI platforms presenting themselves as licensed professionals and signals tightening regulatory scrutiny. AI chatbot developers could face regulatory action, private lawsuits, and reputational harm if bots imply professional credentials or offer regulated advice Federal and state authorities are increasing scrutiny of chatbot […]
One Federal Privacy Bill to Rule Them All?
On April 21, 2026, Republican lawmakers on the House Energy & Commerce Committee, including Congressman Brett Guthrie and Congressman John Joyce, M.D., Leader of the Energy and Commerce Data Privacy Working Group, introduced the “Securing and Establishing Consumer Uniform Rights and Enforcement over Data Act”, the SECURE Data Act (the “Act”). The Act is designed […]
Your AI Scribe May Be Taking Notes (and Plaintiffs Are Too)
On April 7, 2026, several plaintiffs (“Plaintiffs”) filed a putative class action complaint in the Northern District of California against Sutter Health, Memorial Health Services Inc. and Memorial Care Medical Foundation (the “Providers”). The complaint alleges the Providers illegally recorded Plaintiffs’ confidential medical information by using an AI-powered “ambient clinical documentation” tool to record clinician-patient […]
The FTC’s COPPA Policy Statement to Incentivize Age Verification Through a More Flexible Enforcement Approach
On February 25, 2026, the Federal Trade Commission (“FTC”) issued an enforcement policy statement announcing that the Commission will not bring enforcement actions under the Children’s Online Privacy Protection Act (“COPPA”) Rule against operators of general audience sites and services and mixed audience sites and services that collect, use, or disclose personal information for the […]