“It wasn’t me, it was the AI agent” may not help companies avoid civil or criminal liability under a new bipartisan legislative proposal.
U.S. Senators Josh Hawley (R-Mo.) and Chris Murphy (D-Conn.) have announced the proposed AI Agent Accountability Act, which seeks to hold AI-agent operators and developers liable…
Continue Reading It Wasn’t Me, It Was the AI Agent” May Not Avoid Liability Under New Senate ProposalBiometric Consent Cannot Cure Excessive Data Collection: Lessons for U.S. Companies from a €2.59 Million GDPR Fine
The Croatian data protection authority (AZOP) imposed a €2.59 million fine on a casino company…
Continue Reading Biometric Consent Cannot Cure Excessive Data Collection: Lessons for U.S. Companies from a €2.59 Million GDPR FineNew California AI Law Requires Healthcare Providers to Keep Clinical Decision-Making Human
California has enacted a new law requiring healthcare providers using artificial intelligence to keep clinical…
Continue Reading New California AI Law Requires Healthcare Providers to Keep Clinical Decision-Making HumanThe new law eliminates private pen register claims against private actors involving websites and apps…
Continue Reading California Enacts SB 690: What Happens to Website-Tracking Litigation Now?Subscribe to Privacy Compliance & Data Security
The Latest
California AB 1609 Requires Large Businesses to Disclose AI Customer Service Bots and Provide Human Support
A new law signed by Governor Newsom, AB 1609, requires large private businesses to disclose when the customer service agent they are using is an AI bot and provide…
Continue Reading California AB 1609 Requires Large Businesses to Disclose AI Customer Service Bots and Provide Human SupportCalifornia SB 923 Expands CCPA Deletion Rights: How It Compares to the DELETE Act and DROP
On September 27, 2026, Governor Gavin Newsom signed SB 923, the Expanding Privacy Rights Act, which significantly expands the deletion right under the California Consumer Privacy Act. What does…
Continue Reading California SB 923 Expands CCPA Deletion Rights: How It Compares to the DELETE Act and DROPWith the growing wave of letters alleging violations of the California Invasion of Privacy Act (CIPA), Texas Attorney General Ken Paxton has issued a letter urging businesses and nonprofit organizations…
Continue Reading Texas Attorney General Issues Warning on CIPA Website Tracking Demand LettersWhat a German Court’s Ruling on a Public Facebook Profile Means for U.S. Data Brokers
A recent decision from a German labor court offers an interesting perspective on the use of personal information collected from publicly available social media profiles. While the case arose in…
Continue Reading What a German Court’s Ruling on a Public Facebook Profile Means for U.S. Data BrokersAs lawyers increasingly incorporate generative AI into everyday practice, bar associations around the world are considering the same question: how do longstanding professional and ethics rules that have governed the…
Continue Reading AI in Legal Practice: What the Israel Bar Association’s Guidance Means for LawyersBeyond CIPA: New California Federal Court Decision Provides a Roadmap for Tracker Litigation Post-SB 690
A new decision from the Central District Court for Central District of California Judge Fred Slaughter in Reisberg v. Renaissance Learning may provide insight into what website and app tracking…
Continue Reading Beyond CIPA: New California Federal Court Decision Provides a Roadmap for Tracker Litigation Post-SB 690Is the FTC going soft on data privacy? Is it safe to say that companies need to worry about processing sensitive data only in states with privacy laws? Recent Federal…
Continue Reading FTC v. Kochava: A Blueprint for Sensitive Data GovernanceNew California Bill Would Prohibit Apps From Changing User Privacy Settings Without Consent
If a user sets a privacy preference, an operating system or app cannot change that setting without the user’s explicit consent, says new bill, AB 2561, that passed the…
Continue Reading New California Bill Would Prohibit Apps From Changing User Privacy Settings Without ConsentItaly’s €400,000 Credit Scoring Fine: What U.S. Companies Should Know About the Next Phase of DSAR Enforcement
400,000 EUR fine by the Italian DPA for a credit agency Cerved Group S.p.A’s failure to provide sufficient responses to a data access requests (DSARs) provides some insight into a…
Continue Reading Italy’s €400,000 Credit Scoring Fine: What U.S. Companies Should Know About the Next Phase of DSAR EnforcementAbout this Blog
There is a complex web of federal and state statutes and regulations that govern the gathering, use, and retention of private information. Yet many companies and institutions often have only a vague understanding of their rights, obligations, and potential liability. Fox Rothschild attorneys have the necessary experience to address investigations, claims, and lawsuits alleging violations in the privacy arena.