On August 11, 2026, the California Privacy Protection Agency (CalPrivacy) announced a Final Stipulated Order between Iowa-based data broker LocateSmarter LLC and the agency, requiring LocateSmarter to pay $116,490 and change its privacy practices. This marks the agency’s first-ever CCPA decision against a data broker, and the first arising from both violations of the Delete
Colorado Publishes Draft ADMT Regulations
On August 11, 2026, the Colorado Department of Law published its much anticipated Automated Decision-Making Technology (ADMT) and Conversational AI Service Rules (the “Draft Rules”). The ADMT Draft Rules provide guidance on the newly amended Colorado AI Act.
The Draft Rules – which were required to be written on an expedited basis by the amended
California Assembly Committee Advances CIPA Reform
On July 1, 2026, the California Assembly’s Committee on Privacy and Consumer Protection passed SB 690, a bill that would amend the California Invasion of Privacy Act (CIPA) to cut off the flood of litigation that has hit companies across industries for the last several years.
By way of background, dozens of states have
Federal Prosecutors Bring Criminal Charges Against Attorneys for Insider Trading
Federal prosecutors recently brought insider trading charges against numerous attorneys, who were previously employed at various prominent law firms. The indictments in United States v. Nourafchan, No. 1:26-cr-10115 (D. Mass. 2026) and United States v. Fejal, No. 1:26-cr-10133-LTS (D. Mass. Apr. 2026) allege that these attorneys tipped off third parties about confidential M&A
Congress Takes Aim at AI: The Push for Federal AI Framework
On June 4, 2026, House Representatives Jay Obernolte (R-Calif.) and Lori Trahan (D-Mass.) released a 269-page bipartisan discussion draft called the “Great American AI Act” in an attempt to seek feedback from experts, stakeholders, and the public before formally introducing the bill. The Great American AI Act would establish a national standard for governing artificial
Vermont Just Changed the Rules for Data Brokers – Is Your Business Ready?
- Broader definitions – The law
Bipartisan Coalition of State Attorneys General Opposes House Children’s Online Safety Bill
A bipartisan coalition of 44 state attorneys general has formally objected to the House version of the Kids Internet and Digital Safety Act (H.R. 7757), urging congressional leaders to reject the legislation in favor of its Senate counterpart. The coalition sent a letter to key lawmakers arguing that the House bill undermines state
Colorado Rewrites Its Landmark AI Law: Unpacking SB 26-189 and What It Means for Businesses
After attempting to amend its first-in-the-nation AI law for two years and three legislative sessions, on May 9, 2026, the Colorado legislature passed SB 26-189. It now awaits the governor’s signature and is expected to be signed into law, which will go into effect January 1, 2027.
U.S. House Committee Releases SECURE Data Act to Establish New Federal Privacy Framework
On April 22, 2026, the House Energy & Commerce Committee released the “Securing and Establishing Consumer Uniform Rights and Enforcement over Data Act” (the “SECURE Data Act”). The SECURE Data Act seeks to establish a comprehensive federal framework for consumer privacy rights and the protection of personal data. Subject to certain exemptions, the SECURE Data
Alabama Passes A Comprehensive Privacy Law But Not Without Controversy
On April 7, 2026, the Alabama legislature unanimously passed House Bill 351, the Alabama Personal Data Protection Act, sending it to Governor Kay Ivey for approval. The bill cleared the Alabama House 104-0 and the Alabama Senate 34-0, and if Governor Ivey signs the bill, Alabama will join the growing list of states that have