On January 20, 2026, the New Jersey Governor signed Assembly Bill A5017 (“Amendment”), amending the New Jersey Data Protection Act (“NJDPA”). The Amendment exempts data that is not protected health information (“non-PHI”) from the NJDPA when it is … [Read more] about New Jersey Expands HIPAA-Based Exemptions Under Its Comprehensive Privacy Law
On January 28, 2026, the Federal Bureau of Investigation (FBI) announced the launch of Operation Winter SHIELD, a coordinated initiative designed to promote adoption of core defensive measures that are shown to mitigate common intrusion vectors. … [Read more] about FBI Launches Operation Winter SHIELD in Effort to Advance Cyber Resilience Across Critical Sectors
On December 22, 2025, the Federal Trade Commission (FTC) set aside its 2024 consent order against Rytr, a generative AI-powered company, concluding that the original complaint “failed to satisfy the legal requirements of the FTC Act” and that the … [Read more] about FTC Reverses Rytr Consent Order Amid Push for Federal AI Standards
On January 28, 2026, California Attorney General (“AG”) Rob Bonta announced an investigative sweep targeting “surveillance pricing” practices among businesses in the retail, grocery, and hotel sectors. The investigation focuses on companies that use … [Read more] about California Attorney General Announces Investigative Sweep into “Surveillance Pricing”
On December 3, 2025, the European Commission published its first set of technical FAQs on the EU Cyber Resilience Act (‘CRA’). The CRA is an EU-wide law which lays down cybersecurity requirements for ‘products with digital elements’ (‘PDEs’), … [Read more] about European Commission Publishes Guidance For Companies Implementing the EU Cyber Resilience Act