Beginning August 1, 2026, data brokers must begin accessing California’s Delete Request and Opt-Out Platform (“DROP”) at least once every 45 days to retrieve and process consumer deletion requests, as the consumer-facing launch transitions to … [Read more] about DROP Is Coming Due: What California’s Delete Act Means for Data Brokers in August
On July 14, 2026, the General Services Administration (“GSA”) held a public listening session to gather stakeholder feedback on a revised draft General Services Administration Acquisition Regulation (“GSAR”) clause addressing the basic safeguarding … [Read more] about GSA Seeks Input on Revised AI Data Safeguarding Clause for Government Contracts
In the Accellion data breach case, the United States District Court for the Northern District of California has denied the plaintiffs’ motion to modify the court’s order on class certification. In its first class certification order, the Court … [Read more] about No Second Bite at the Apple for Accellion Plaintiffs: Judge Denies Motion to Modify Class Certification Order
On 30 June 2026, the French Data Protection Authority (CNIL) published comprehensive new guidance on the processing of personal data generated by connected vehicles, with a particular focus on geolocation data (available in French here). For … [Read more] about Connected Vehicles Under the Spotlight: French DPA Issues Landmark Guidance on Vehicle Data Privacy
On June 22, 2026, the intelligence alliance known as Five Eyes released a statement warning that frontier AI models will fundamentally transform offensive and defensive cyber capabilities, and that the timeline for this transformation is measured in … [Read more] about Five Eyes Issues Urgent Call to Action on AI-Driven Cyber Threats