Alston & Bird Privacy, Cyber & Data Strategy Blog

Spanish DPA Releases Agentic AI Guidance

By and

On 18 February 2026, the Spanish Data Protection Authority (Agencia Española de Protección de Datos or ‘AEPD’) published an 81‑page guidance document on the privacy aspects of AI systems operating as agents - commonly referred to as ‘agentic AI’. The guidance is aimed at companies that process personal data under the EU General Data Protection Regulation (GDPR) while designing or using agentic AI. The AEPD’s guidance explains the concept of agentic AI, identifies the privacy and data … [Read more] about Spanish DPA Releases Agentic AI Guidance

Federal Court Rules using AI Tools can Waive Privilege, Even if Privileged Information is Input into Them

By , and

On February 10, 2026, the U. S. District Court for the Southern District of New York held that a criminal defendant could not claim attorney-client privilege over documents he produced using a commercially available artificial intelligence (“AI”) … [Read more] about Federal Court Rules using AI Tools can Waive Privilege, Even if Privileged Information is Input into Them

New Jersey Expands HIPAA-Based Exemptions Under Its Comprehensive Privacy Law

By , and

On January 20, 2026, the New Jersey Governor signed Assembly Bill A5017 (“Amendment”), amending the New Jersey Data Protection Act (“NJDPA”). The Amendment exempts data that is not protected health information (“non-PHI”) from the NJDPA when it is … [Read more] about New Jersey Expands HIPAA-Based Exemptions Under Its Comprehensive Privacy Law

FBI Launches Operation Winter SHIELD in Effort to Advance Cyber Resilience Across Critical Sectors

By , and

On January 28, 2026, the Federal Bureau of Investigation (FBI) announced the launch of Operation Winter SHIELD, a coordinated initiative designed to promote adoption of core defensive measures that are shown to mitigate common intrusion vectors. … [Read more] about FBI Launches Operation Winter SHIELD in Effort to Advance Cyber Resilience Across Critical Sectors

FTC Reverses Rytr Consent Order Amid Push for Federal AI Standards

By , , , and

On December 22, 2025, the Federal Trade Commission (FTC) set aside its 2024 consent order against Rytr, a generative AI-powered company, concluding that the original complaint “failed to satisfy the legal requirements of the FTC Act” and that the … [Read more] about FTC Reverses Rytr Consent Order Amid Push for Federal AI Standards