• Skip to primary navigation
  • Skip to main content
  • Skip to primary sidebar
  • Skip to secondary sidebar

Alston & Bird Privacy, Cyber & Data Strategy Blog

  • Home
  • Services
  • Events
  • Contacts

Santi Villar

headshot of Santi Villar

About Santi Villar

Santiago “Santi” Villar is an associate in Alston & Bird’s Technology & Privacy Group. With a passion for understanding the impact of global developments on his clients, he draws on his experience to provide them with creative and unique solutions to their privacy and technology needs.

[Read Bio]

DROP Is Coming Due: What California’s Delete Act Means for Data Brokers in August

July 17, 2026 By Santi Villar

Beginning August 1, 2026, data brokers must begin accessing California’s Delete Request and Opt-Out Platform (“DROP”) at least once every 45 days to retrieve and process consumer deletion requests, as the consumer-facing launch transitions to operational obligations for data brokers. DROP allows California residents to submit a single deletion request to hundreds of registered data […]

Filed Under: California Privacy & the CCPA, Consumer Protection/FTC, Privacy & Cyber Regulatory Enforcement Tagged With: California Consumer Privacy Act (CCPA), California Privacy Protection Agency (CPPA), Privacy, US State Law

California Jumps into AI Procurement with State Governing Principles in an Executive Order

April 1, 2026 By David Keating, Cynthia Cole, Daniel Felz and Santi Villar

On March 30, 2026, California Governor Gavin Newsom signed Executive Order N-5-26 (the “Order”), aimed at governing the responsible procurement and deployment of Generative Artificial Intelligence (“GenAI”) across California’s state government. The Order builds on the foundation laid by Executive Order N-12-23, issued in September 2023, by directing a series of actions across multiple state […]

Filed Under: AI Cybersecurity & Privacy, Artificial Intelligence (AI), California Privacy & the CCPA Tagged With: Artificial Intelligence, California, Government Contractors, Privacy

FTC Sends Letters Reminding Data Brokers of their Obligations under PADFAA

February 25, 2026 By Jennifer Everett, Daniel Felz, Alex Brown and Santi Villar

On February 9, 2026, the Federal Trade Commission (“FTC”) sent letters to thirteen data brokers reminding them of their obligations to comply with the Protecting Americans’ Data from Foreign Adversaries Act of 2024 (“PADFAA”). We previously wrote an article and Peter Swire published a white paper at the Cross-Border Data Forum (“CBDF”) describing PADFAA in […]

Filed Under: Consumer Protection/FTC, National Security & Digital Crimes, Privacy & Cyber Regulatory Enforcement Tagged With: Federal Trade Commission (FTC), International Data Transfers, National Security

New York Regulates Large Artificial Intelligence Models

January 21, 2026 By Kim Peretti, Jennifer Everett, Dorian Simmons and Santi Villar

On December 19, 2025, just eight days after President Trump issued an executive order titled “Ensuring a National Policy Framework for Artificial Intelligence” to challenge burdensome state laws that regulate artificial intelligence (the “December 2025 EO”), New York Governor Kathy Hochul signed the Responsible Artificial Intelligence (“AI”) Safety and Education Act (the “RAISE Act”). The […]

Filed Under: AI Cybersecurity & Privacy, Artificial Intelligence (AI), Board Governance & Cyber Risk Management Tagged With: Artificial Intelligence, New York, US State Law

Peter Swire’s Work Recognized by IAPP

March 17, 2025 By Santi Villar and Privacy, Cyber & Data Strategy Team

  The International Association of Privacy Professionals (IAPP) recently recognized Alston & Bird Senior Counsel Peter Swire as part of the IAPP’s “25 Leaders, 25 Moments at 25 Years” series. The IAPP, an organization with over 80,000 professionals around the globe, recognized Peter for his work writing the IAPP’s first textbook on U.S. privacy law. […]

Filed Under: Board Governance & Cyber Risk Management, Privacy & Cyber Regulatory Enforcement Tagged With: International Data Transfers, Privacy, US State Law

  • Page 1
  • Page 2
  • Go to Next Page »

Primary Sidebar

This blog is a service of Alston & Bird’s Privacy, Cyber & Data Strategy team and focuses on key data privacy and data security issues.


Receive email notifications when new posts are added.

Receive email notifications when new posts are added.


RANSOMWARE FUSION CENTER
Click here to request access

THE DIGITAL DOWNLOAD
Click here to see the editions

PRIVACY & CYBER EVENTS
Click here to see upcoming and past events

PRIVACY & CYBER MAILINGS
Click here to sign up


Secondary Sidebar

Categories

Recent Posts

  • CMMC Phase II is Suspended, but Defense Contractors’ Cybersecurity Obligations are Not
  • EU Regulators Outline GDPR Requirements for AI Web Scraping
  • The White House’s Gold Eagle Initiative Signals a New Phase in AI Enabled Cyber Defense
  • DROP Is Coming Due: What California’s Delete Act Means for Data Brokers in August
  • GSA Seeks Input on Revised AI Data Safeguarding Clause for Government Contracts
Copyright © 2026 · Alston & Bird · All Rights Reserved. Privacy.