On April 22, 2026, the Federal Trade Commission will begin enforcing compliance with its most recent amendments to the Children’s Online Privacy Protection Rule (the COPPA Rule). As discussed in more detail below, the FTC published amendments in a 2025 final rule that, among other updates, expands the scope of the COPPA Rule, expands notice
A popular public AI tool has been accused in federal court of practicing law without a license. Please see the post on the Artificial Intelligence page of Inside Tech Law: AI in litigation series: Complaint accuses OpenAI of practicing law without a license | Inside Tech Law | Global law firm | Norton Rose Fulbright
On March 24, 2026, Washington Governor Bob Ferguson signed House Bill 2225, an Act regulating artificial intelligence companion chatbots.Continue Reading ›
I just returned from the IAPP Global Privacy Summit, and there was a lot to absorb. Sessions covered AI governance, children’s safety, advertising compliance, international data law, and more.
There is SO much that we learned at IAPP that we can’t possibly put it all into this one newsletter, so stay tuned for part 2
On March 20, 2026, the White House released its National Policy Framework for Artificial Intelligence (“Framework”), outlining legislative recommendations for Congress to establish a unified federal approach to AI regulation. The Framework builds on prior executive actions, including the December 2025 Executive Order (the “Executive Order”) and the Trump administration’s “America’s AI Action Plan,” and
The Connecticut Attorney General recently issued a legal memorandum regarding the application of existing Connecticut laws, such as the Connecticut Data Privacy Act, to the use of artificial intelligence.Continue Reading ›
As reported on the Hunton Employment & Labor Perspectives blog, SB 574 is a California bill that would set specific duties for attorneys who use generative artificial intelligence and would restrict how arbitrators may use such tools in decision-making.Continue Reading ›
The California Consumer Privacy Act (CCPA) Regulations were approved at the end of 2025, and in them are new obligations for companies that use automated decision-making technologies (ADMT) for significant decisions.
These are new obligations that will require in-scope businesses to modify policies and practices and review contracts with third parties, contractors, and service providers.
As hospitality businesses increasingly rely on digital tools, automation, biometrics, and AI‑enabled services, their collection and use of personal data has expanded significantly. With that expansion comes a corresponding rise in legal and regulatory obligations – and risks.
Below are key takeaways from a webinar I presented today with Carolyn D. Richmond on how privacy