On June 22, 2025, the Texas governor signed the Texas Responsible Artificial Intelligence Governance Act into law, making Texas the second state to pass comprehensive artificial intelligence regulation (with Colorado).
Privacy & Data Security
Help Shape the New EU Consumer Protection Law: Join the Public Consultation on the Digital Fairness Act
On July 17, 2025, the European Commission launched a “call for evidence” and public consultation on the Digital Fairness Act (“DFA”), an anticipated new consumer protection law. The Commission seeks feedback on existing EU consumer protection laws and on proposals for how the DFA could address the following two problems with the existing…
California’s anti-employment-discrimination regulations now include AI, expand retention requirements
On June 27, 2025, the California Civil Rights Council, which is part of the Civil Rights Department, published revised regulations to protect against employment discrimination as a result of an employer’s use of artificial intelligence (AI) and other technologies that make decisions or facilitate human decision making regarding employment benefits.
These regulations contain many surprises,…
Cybersecurity Regulation in Flux as Trump Administration Focuses on Evolving Foreign and Tech Threats
The administration has signaled a potential softening of cyber regulation for domestic entities, with increasing focus on national security priorities and preparing for the future.
By Antony (Tony) Kim and Michael H. Rubin
The Trump administration’s focus on reshaping the cyber regulatory environment continues with executive order 14306, “Sustaining Select Efforts to Strengthen the Nation’s…
Real AI Risks No One Wants To Talk About And What Companies Can Do About Them
@media screen and (max-width: 1023px){section[data-id=”block_e372bcd7803c470c4c97b47880da627a”]{ }}@media screen and (min-width: 1024px) and (max-width: 1365px){section[data-id=”block_e372bcd7803c470c4c97b47880da627a”]{ }}@media screen and (min-width: 1366px){section[data-id=”block_e372bcd7803c470c4c97b47880da627a”]{ }}

Anne Bradley is the Chief Customer Officer at Luminos. Anne helps in-house legal, tech, and data science teams use the Luminos platform to manage the automated AI risk, compliance, and approval processes, statistical testing, and legal
…
The Second Half of the Year Brings New State Privacy Obligations – Are You Ready?
Many organizations have been working diligently to comply with the 13 state consumer privacy laws (CPLs) in effect in the first half of 2025 (14 if you count Florida). Some have chosen to comply on a state-by-state basis and others have followed the high-watermark approach of applying the strictest standard from among the CPLs to…
Countdown to 2026: What Will the Texas AI Law Mean for Businesses?
Texas is getting into the AI action, with a new law (the Texas Responsible Artificial Intelligence Governance Act) that will place restrictions not only on AI use by government agencies, but businesses as well. In particular, it will apply to businesses (a) operating in Texas, (b) those that have products or services used by…
Could FDA Model Master Files Facilitate Use of Third-Party AI Models in the Drug Life Cycle?
As the Covington team discussed in a recent article, use of AI models in biopharma is on the rise, with use cases spanning the life cycle of drugs and biologics, including product development, manufacturing, and pharmacovigilance. Recently, FDA announced its own intentions to aggressively scale the use of AI in regulatory review and launched…
U.S. Privacy Litigation Update: June 2025 Decisions
In this post: (1) Website tracking litigation risk remains as SB 690 is designated “two-year bill”; (2) Second Circuit reinforces narrower interpretation of PII to “shut the door for Pixel-based VPPA claims”; (3) Courts require individualized harm to establish standing; (4) Dismissals increase where plaintiffs fail to provide detailed allegations; and (5) Courts split on whether…
Another EU AI Act Milestone – Nearly Final Version of the General-Purpose AI Code of Practice Published
On July 10, 2025, the European Commission released a nearly final version of the General-Purpose AI (GPAI) Code of Practice (Code) under Regulation (EU) 2024/1689 (AI Act).