#privsecforum Privacy + Security Academy Forum @privsecacademy.bsky.social “From #IR #DataReview to Defense: How #Notification #Strategy Shapes #Litigation #Outcomes” w/ Assessment First VPs Andrew Nauer, CIPP/US (Operations) & Matthew Liebner (Sales); and @zwillgen.com Attorney Jamie Elbert

The EU Council and Parliament have reached provisional agreement on amendments to the EU AI Act framework. www.consilium.europa.eu/en/press/pre...

As AI tools make it easier than ever to spin up apps and internal tools, it’s worth remembering that speed and accessibility don’t replace security, privacy, or governance review.

The UK’s Online Safety Act has entered a new phase, with in-scope user-to-user services now required to remove and report detected child exploitation content to the UK’s NCA or a equivalent foreign agency. #UKCompliance #ChildrensPrivacy #OnlineSafety  www.zwillgen.com/eu-uk/new-uk...

The FTC announced a settlement with Kochava and its subsidiary prohibiting the sale, sharing, or disclosure of sensitive location data without consent, following allegations the companies sold data that could be used to trace individuals’ movements. www.ftc.gov/news-events/...

Cookie banners were meant to help mitigate certain litigation risk, but they are now drawing a new wave of lawsuits. We discuss the lawsuits targeting banners and preference tools: #litigation #privacy #CIPA #California www.zwillgen.com/litigation/n...

A wave of CIPA Section 638.51 lawsuits has put online businesses under growing pressure, with plaintiffs targeting routine website technologies. We discuss key pending appellate decisions and how they could impact litigation risk: #CIPA #Litigation #Privacy www.zwillgen.com/litigation/a...

In a recent Computer Weekly article, Marc Zwillinger and Zach J. examine the crucial role of end-to-end encryption (E2EE) in an era of unprecedented digital surveillance. #encryption #privacy #security www.zwillgen.com/publication/...

The House approved a short-term extension of Section 702 of the Foreign Intelligence Surveillance Act (FISA) through April 30, sending the measure to the Senate days before the program’s scheduled expiration. www.cnn.com/2026/04/17/p...

We break down why connecting AI tools to internal systems can create significant legal, privacy, and operational risks and the guardrails organizations should consider having in place before moving forward. #AIGovernance #DataPrivacy #AICompliance #EnterpriseAI www.zwillgen.com/artificial-i...

Virginia’s governor has signed a law banning the sale of residents’ precise geolocation data, signaling growing momentum at the state level to restrict the commercial sale of sensitive location information. therecord.media/virginia-ena...

The FTC is seeking public comment on potential unfair or deceptive fee practices in online food and grocery delivery services, signaling continued scrutiny of pricing transparency in digital marketplaces. www.ftc.gov/news-events/...

ZwillGen ranked 9th nationally in Privacy & Data Security in the Vault 2026-2027 Practice Area Rankings, placing the firm among the top 10 in the U.S. www.zwillgen.com/firm-news/zw...

The CJEU’s Brillen Rottler decision offers a notable clarification for organizations dealing with potentially abusive DSARs. We cover the decision in our latest blog post: #Privacy #DSAR #EU #UK www.zwillgen.com/eu-uk/dsar-a...

The Federal Trade Commission has released its FY 2026–2030 Strategic Plan outlining agency priorities for the next five years. www.ftc.gov/news-events/...

In a recent @bloomberglaw.com article, Marci Rozen and Lucia Martinez discuss how recent legislations and regulations have resulted in more companies than ever qualifying as “data brokers”. www.zwillgen.com/publication/...

The FTC is revisiting Negative Option Rulemaking, and while this new ANPRM does not change compliance obligations today, it signals that broader subscription and auto-renewal requirements may still be on the horizon. #FTC #AutoRenewal #Subscriptions  www.zwillgen.com/ftc-state-ag...

The Fourth Circuit’s decision in United States v. Lowers clarifies that provider access under a platform’s terms of service does not automatically extend to government access, strengthens support for a broad approach to reporting suspected CSAM. #TrustAndSafety www.zwillgen.com/law-enforcem...

The White House has released a National Policy Framework for AI, outlining seven legislative priorities for Congress spanning child safety, infrastructure, copyright, innovation policy, workforce development, and potential federal preemption of state AI laws. www.zwillgen.com/artificial-i...

Courts are starting to rethink long-standing FCC interpretations of the TCPA, and litigants are pressure-testing key assumptions, including whether texts qualify as “calls” and whether written consent is required. www.zwillgen.com/privacy/tcpa...

The CFTC issued new guidance on event contracts, including sports-related markets. Days later, Arizona brought criminal charges against Kalshi, adding another layer to an already complex legal landscape. What does this mean for the future of prediction markets? We break it down in our latest post.

MEPs have agreed on proposals to simplify artificial intelligence rules and propose clear application dates for high-risk system requirements and a ban on AI “nudifier” systems. Learn more: link.europa.eu/mW8h64

Washington Gov. Bob Ferguson signs two bills requiring large AI companies to add disclosures for AI-generated or modified content and establish guardrails for AI chatbots. www.kuow.org/stories/wash...

We’re proud to share that Brenda Leong is named in Lawdragon’s 2026 Leading AI & Legal Tech Advisors list, which recognizes leaders shaping the future of legal practice in AI, innovation, and technology. www.zwillgen.com/firm-news/br...

ZwillGen’s Brenda Leong contributed an article to a new Biometrics Institute report on digital identity and physical authenticity, examining the distinction between biometric verification and biometric identification in law and policy. www.zwillgen.com/publication/...

The White House has released a new national AI legislative framework outlining policy priorities including child safety, intellectual property, free speech, innovation, and federal preemption of state AI laws. www.whitehouse.gov/articles/202...

ZwillGen’s Brenda Leong weighs in on a proposed AI framework from Sen. Marsha Blackburn and what it could mean for state AI laws and access to AI system data. www.zwillgen.com/publication/...

Congress considers blowing up internet law

In this Corporate Compliance Insights article, Zach Judge-Raza and Jamie Elbert examine the impact of the EU Data Act and why compliance will require ongoing, enterprise-wide oversight. www.zwillgen.com/publication/...

ZwillGen’s Zach Lerner weighs in for @bloomberglaw.com after the Ninth Circuit upheld key provisions of California’s Age-Appropriate Design Code this week. news.bloomberglaw.com/us-law-week/...

Companies that have paused their Age-Appropriate Design Code compliance efforts will have to pick the pen back up. #AADC #ChildrensPrivacy #Privacy www.zwillgen.com/privacy/sout...

The Ninth Circuit revives parts of California’s Age-Appropriate Design Code which would limit how online businesses collect and use data from users under 18. www.sfchronicle.com/politics/art...

A bipartisan bill would force the FBI to get a warrant to read Americans’ messages and ban the federal purchase of commercial data on US residents ahead of a critical April deadline. www.wired.com/story/us-law...

FTC Seeks Public Comment in Response to Advance Notice of Proposed Rulemaking Regarding Negative Option Marketing Practices www.ftc.gov/news-events/...

Tech associations appear unlikely to win in their effort to block Florida’s age-specific social media regulations as the Eleventh Circuit indicated at oral argument Tuesday that they lack standing to maintain their suit.

Judge blocks Perplexity’s AI agents from shopping on Amazon

Lawmakers just advanced online safety laws that require age verification at the app store

The U.S. Department of the Treasury released two new, non-binding financial-sector AI governance resources aiming to standardize how financial institutions address and document AI risk governance: #AI #ArtificialIntelligence #AIGovernance www.zwillgen.com/artificial-i...

ZwillGen and LuminosAI announce the launch of the Automated AI Governance Package, bringing together tailored legal guidance and automation to help companies operationalize AI governance at scale. www.zwillgen.com/firm-news/zw...

US District Judge Patricia Tolliver Giles on February 27 blocked Virginia from enforcing a new law requiring age verification and limiting social media use by those under 16 to one hour per day, saying it likely infringed free speech rights of adults and children reut.rs/471zWwK

Supreme Court won’t hear AI-generated art copyright case

California’s AG just secured a $2.75M #CCPA settlement—the largest to date—sending a clear message that opt-outs must work across devices, brands, and services tied to a user’s account. We discuss the settlement and its broader implications for companies in our blog www.zwillgen.com/ftc-state-ag...

FTC issues policy statement announcing it will not bring a COPPA enforcement action against certain websites and online services that collect, use, or disclose personal information solely for age verification purposes. www.ftc.gov/news-events/...

Legal 500’s inaugural DC Cybersecurity & Data Protection rankings are out, and ZwillGen is ranked Tier 1! All seven of our DC-based Shareholders were also individually recognized across Tiers 1 and 2. www.zwillgen.com/firm-news/zw...

The UK is moving toward a new 48-hour takedown rule for non-consensual intimate images with fines of up to 10% of global revenue for companies that fail to comply. We break down what the proposal means in practice: #ContentModeration #UK #ArtificialIntelligence www.zwillgen.com/privacy/inti...

A putative class action in California seeks to classify an AI-generated hiring “Match Score” as a consumer report under the FCRA. We take a closer look at the complaint & review its position within broader litigation trends. #AI #Litigation www.zwillgen.com/litigation/p...

In a recent Law360 article, Zach Judge-Raza and Brenda Leong discuss the European Commission’s proposed changes and implementation delay of the EU Artificial Intelligence Act. #ArtificialIntelligence #AI #EU www.zwillgen.com/publication/...

Security experts have urged people to be cautious with the viral agentic AI tool, known for being highly capable but also wildly unpredictable. wrd.cm/4tHSwDO

With Maine legalizing online casino gaming and Virginia advancing similar legislation, states may be rethinking their approach to iGaming regulation as sweepstakes casino enforcement and prediction markets reshape the landscape. #iGaming #PredictionMarkets  www.zwillgen.com/gaming/the-i...

Section 230 turns 30 as it faces its biggest tests yet