Alston & Bird Privacy, Cyber & Data Strategy Blog

State Privacy Laws Are Moving Beyond Disclosures: What Businesses Need to Know in 2026

By , , and

State privacy laws are increasingly regulating how businesses collect, use, share, and govern personal information in practice, not just what they say in privacy notices. Compliance challenges now extend beyond disclosures to areas such as digital advertising, sensitive data, consumer rights, data governance, and technical compliance controls. Our latest client alert highlights key developments affecting businesses in 2026, including evolving expectations around health and geolocation data, … [Read more] about State Privacy Laws Are Moving Beyond Disclosures: What Businesses Need to Know in 2026

New AI Rules for Lawyers? California Codifies Attorney Obligations for the Use of Generative AI

By , and

On September 30, 2026, California Governor Gavin Newsom signed Senate Bill 574, authored by Senator Thomas Umberg, which regulates the use of generative artificial intelligence (“GenAI”) by attorneys, arbitrators, judicial officers, and alternative … [Read more] about New AI Rules for Lawyers? California Codifies Attorney Obligations for the Use of Generative AI

White House Secures Voluntary Industry Commitments on Independent AI Audits

By , and

On September 29, 2026, the President met with executives of several leading artificial intelligence developers at the White House. The parties announced a voluntary framework titled “The White House Accord on Super Intelligence” (the “Accord”). Under … [Read more] about White House Secures Voluntary Industry Commitments on Independent AI Audits

NYDFS Issues Guidance on the Million Dollar Question—How to Conduct Cybersecurity Risk Assessments Under Part 500

By , , and

On September 10, 2026, the New York State Department of Financial Services (“NYDFS”) published an Industry Letter (the “Letter”) to regulated entities (“Covered Entities”) addressing what is probably the most frequently asked Part 500 question: “How … [Read more] about NYDFS Issues Guidance on the Million Dollar Question—How to Conduct Cybersecurity Risk Assessments Under Part 500

FTC Proposes Enforcement Policy Statement on Personalized Pricing

By , , and

On August 19, 2026, the Federal Trade Commission (FTC) announced that it is seeking public comment on a proposed enforcement policy statement regarding personalized pricing. The proposed statement makes clear that the FTC intends to scrutinize … [Read more] about FTC Proposes Enforcement Policy Statement on Personalized Pricing