3/13/2026 4:54:40 PM Iran-Linked Cyberattack: What U.S. Companies Need to Know Now By Aaron Tantleff Jennifer Urban Christopher Swift Overview On March 11, 2026, independent reports confirmed that one of the largest medical device companies in the United States was the...
3/5/2026 6:06:39 PM Prompt Injection: Social Engineering Attacks on AI By Steve Millendorf Today's AI models suffer from a critical flaw. They lack human judgment and context that makes them vulnerable to what security...
2/2/2026 8:48:09 PM In Case You Missed It: Data Privacy Week 2026 By Steve Millendorf Gabe Wild Alex Misakian Samuel Goldstick Jennifer Urban Aaron Tantleff Erica Bade +4 more... Show less Last week, our Cybersecurity & Data Privacy team delivered a packed lineup of insights, expert discussions, and practical guidance to...
1/30/2026 7:04:08 PM Privacy Podcast Episode Four: The Blur Between Privacy and Security By Aaron Tantleff Jennifer Urban Key Takeaways The traditional separation between privacy and security is dissolving as technology and regulations force roles and...
1/28/2026 5:02:40 PM Privacy Podcast Episode Three: State of Confusion: Navigating the U.S. Privacy Law Maze By Samuel Goldstick Alex Misakian Key Takeaways U.S. privacy compliance has become significantly more complex due to the rapid growth of state consumer privacy laws, each...
1/27/2026 4:52:39 PM Privacy Podcast Episode Two: A Practical Guide to Risk Assessments and Automated Decision-Making Requirements By Steve Millendorf Gabe Wild Key Takeaways New CCPA regulations effective January 1, 2026, introduce significant new obligations for businesses, including...
1/26/2026 8:56:10 PM Privacy Podcast Episode One: A Practical Guide to the New CCPA Regulations By Steve Millendorf Gabe Wild Key Takeaways New CCPA regulations effective January 1, 2026, introduce significant new obligations for businesses, including...
1/21/2026 2:57:39 PM AI, Privacy, and Cybersecurity in Digital Health: A CEO Playbook for Reducing Risk While Scaling Fast By Aaron Maguregui Jennifer Hennessy Digital health and telehealth companies are scaling faster than regulators can write rules. AI-driven clinical workflows, remote...
12/16/2025 9:50:09 PM The EU Digital Omnibus Regulation impact on the GDPR's Definition of Personal Data By Steve Millendorf On November 19, the European Commission introduced a draft regulation known as the Digital Omnibus Regulation (Omnibus Regulation), aimed...
10/9/2025 5:52:46 PM California Governor Newsom Signs Browser Opt-out Signal Bill By Steve Millendorf On October 8, California Governor Newsom signed AB 566, which adds a section to the California Privacy Protection Agency (CCPA) to...
9/10/2025 8:44:39 PM Validity EU-U.S. Data Protection Framework Spared (for now) By Steve Millendorf The EU-U.S. Data Protection Framework (DPF) has been spared to live another day and remains valid for transfers of personal data from the...
7/29/2025 4:15:09 PM California Privacy Protection Agency Approves Draft Regulations After Over a Year in Drafting By Steve Millendorf On July 24, 2025, the California Privacy Protection Agency (CPPA) voted unanimously to finalize the draft regulations for automated...
7/10/2025 3:46:40 PM FTC's "Click-to-Cancel" Rule Invalidated By Steve Millendorf The Federal Appeals Court for the 8th Circuit invalidated the Federal Trade Commission's (FTC) “click-to-cancel” (aka “negative option”)...
7/2/2025 1:42:43 PM AI-Powered Text Messaging by Digital Health Companies: Supreme Court Raises the Stakes By Aaron Maguregui Jennifer Hennessy Digital health companies increasingly rely on AI-powered messaging platforms, chatbots, and virtual assistants to engage patients through...
6/25/2025 1:54:54 PM AI Contracts in Health Care: Avoiding the Data Dumpster Fire By Aaron Maguregui Jennifer Hennessy For AI companies in the health care space, data is everything. It fuels model performance, drives product differentiation, and can make...
6/18/2025 1:43:09 PM HIPAA Risk Analyses for Digital Health: Navigating AI, M&A and Vendor Diligence By Aaron Maguregui Jennifer Hennessy HIPAA Security Risk Analyses (SRAs) should be the foundation of every digital health company’s cybersecurity compliance. Far more than a...