Artificial intelligence (AI) companion apps have been in the news, with Commissioner Melissa Holyoak of the Federal Trade Commission calling for a study on AI companions earlier this month, and lawmakers at the state and federal level voicing concerns about the technologies. In response, New York has enacted the first law requiring safeguards for AI
Nevada Passes Law Limiting AI Use for Mental and Behavioral Healthcare
On June 5, 2025, Nevada Governor Joe Lombardo signed AB 406, a law regulating the use of artificial intelligence (AI) for mental and behavioral healthcare. AB 406 comes as other states, such as Utah and New York, have taken steps to regulate AI chatbots, including AI chatbots providing mental health services. AB 406
Six State Attorney Generals Object to Proposed AI Enforcement Moratorium
The Attorney Generals of California, Connecticut, Delaware, New Jersey, Oregon and Vermont wrote a letter June 23, 2025 to Senate Majority Leader John Thune and Senate Minority Leader Chuck Schumer, objecting to a proposed AI enforcement moratorium that is in the One Big Beautiful Bill.
The key arguments against the ban are:
- States have played
New Jersey’s proposed privacy rules include some surprises
On June 2, 2025, the New Jersey Attorney General’s Division of Consumer Affairs released proposed rules (57 N.J.R. 1101(a)) pursuant to the New Jersey Data Privacy Act (N.J.S.A. 56:8-166.4 et seq.). Although the proposed rules have many similarities to California’s current privacy regulations, there are some surprises. Among other things, New Jersey has proposed
Digital Fairness Act Series — Topic 3: Personalized Advertising and Pricing
Personalized advertising and pricing are increasingly common online practices, and prompt discussions about fairness and consumer rights in the EU. This post examines how these practices are regulated under EU consumer protection law, and what we anticipate from the forthcoming Digital Fairness Act (DFA). We also consider how data protection rules—such as the GDPR—interact with
Proposed State Privacy Law Update: June 23, 2025
Keypoint: Texas enacts two amendments to its data broker law while New York’s legislature passes a social media warning bill.
Below is the twenty fourth weekly update on the status of proposed state privacy legislation in 2025. As always, the contents provided below are time-sensitive and subject to change.
Table of Contents
Privacy Compliance in the U.S. and Canada: One Border, Two Privacy Playbooks
If you’re doing business in both Canada and the United States, you’ve probably already discovered this truth: one privacy strategy just won’t work for both countries. In fact, trying to apply the same rules on both sides of the border is like using the same key for two different locks. You might force it to
CNIL Publishes Recommendations on Legitimate Interest as a Legal Basis for AI Training
On June 19, 2025, the French Data Protection Authority (“CNIL”) published two recommendations for AI developers. The first recommendation covers reliance on the GDPR’s legitimate interest legal basis for developing an AI model. It provides examples of legitimate interests that can justify the use of personal data for AI development. The second recommendation discusses measures
Agentic AI for Software Security: Eliminate More Vulnerabilities, Triage Less
@media screen and (max-width: 1023px){section[data-id=”block_22bd036dec0f54b0c5589604377c8eab”]{ }}@media screen and (min-width: 1024px) and (max-width: 1365px){section[data-id=”block_22bd036dec0f54b0c5589604377c8eab”]{ }}@media screen and (min-width: 1366px){section[data-id=”block_22bd036dec0f54b0c5589604377c8eab”]{ }}
Ian Riopel is the CEO and Co-founder of Root, applying agentic AI to fix vulnerabilities instantly. A US Army veteran and former Counterintelligence Agent, he’s held roles at Cisco, CloudLock, and Rapid7. Ian brings military-grade security
Cybersecurity in the Era of Generative and Agentic AI: Six Observations
Last week, I had the privilege to attend one of the Midwest’s largest artificial intelligence conferences dedicated to AI developers, users, and enthusiasts: Cincy AI Week. During the three-day event, which brought together over 950 local professionals, I spoke on a panel entitled “Managing Risk in the Age of AI and Automation.” Here are six