In this month's update: AI Regulatory Landscape: Three Things To Know How will Trump’s “AI Action Plan” and Executive Orders impact U.S. tech and federal procurement? Which companies are subject to “general-purpose” AI...more
8/18/2025
/ Artificial Intelligence ,
Automated Decision Systems (ADS) ,
California ,
Corporate Counsel ,
Donald Trump ,
EU ,
European Commission ,
Executive Orders ,
Financial Services Industry ,
New Legislation ,
Popular ,
Regulatory Requirements
Wearable health technology is rapidly transforming the landscape of professional sports. From heart rate monitors and GPS trackers to biometric gloves and brain health sensors, these devices are now commonplace in...more
Interest in genetic data is on the rise, driven by the growth of direct-to-consumer (DTC) genetic testing and its value for AI in drug development and personalized medicine. Historically, gaps in privacy laws have sometimes...more
8/8/2025
/ Bankruptcy Code ,
Data Privacy ,
Department of Justice (DOJ) ,
Genetic Discrimination ,
Genetic Testing ,
GINA ,
Health Insurance Portability and Accountability Act (HIPAA) ,
New Legislation ,
Privacy Laws ,
Regulatory Requirements ,
State Privacy Laws
On July 23, 2025, President Trump announced a sweeping new AI strategy, releasing the highly anticipated "Winning the AI Race: America’s AI Action Plan" and signing three executive orders regarding federal procurement,...more
8/6/2025
/ Artificial Intelligence ,
Executive Orders ,
Export Controls ,
Federal Contractors ,
Infrastructure ,
Open Source Software ,
OSTP ,
Popular ,
Procurement Guidelines ,
Regulatory Reform ,
Trump Administration
AI Regulatory Landscape: Three Things To Know What's Happening with U.S. State AI Laws Right Now? Will Federal AI Regulation Override State Laws? What Is the General-Purpose AI Code of Practice? AI Bills We're Keeping an Eye...more
In our continuing coverage of the EU Artificial Intelligence Act, co-hosts Jerry Buckley and Caroline Stapleton are joined by Orrick partners Shannon Yavorsky and Julia Apostle. The conversation explores how companies can...more
On July 1, 2025 the California Attorney General announced the largest CCPA settlement to date, totaling $1.55 million. The settlement, which is awaiting court approval, was the result of an investigation by the California...more
7/9/2025
/ Advertising ,
California Consumer Privacy Act (CCPA) ,
Corporate Counsel ,
Data Collection ,
Data-Sharing ,
Enforcement Actions ,
Opt-Outs ,
Privacy Policy ,
Settlement ,
State Attorneys General ,
Third-Party
The Department of Justice’s (DOJ) 90-day grace period for compliance with the Data Security Program (DSP) ends on July 8, 2025, and enforcement is expected to begin. This regulatory regime was created for national security...more
7/7/2025
/ China ,
Corporate Counsel ,
Covered Person ,
Cross-Border Transactions ,
Data Privacy ,
Data Security ,
Department of Justice (DOJ) ,
Enforcement Actions ,
International Data Transfers ,
National Security ,
Regulatory Requirements
As regulatory scrutiny around automatic renewals intensifies, understanding the Federal Trade Commission’s new “Click-to-Cancel” rule and California’s recently amended Automatic Renewal Law, is essential for companies looking...more
Budget reconciliation bill H.R.1, the “One Big Beautiful Bill Act,” currently pending in the U.S. Senate, originally included not only tax and spending provisions but also a proposed multi-year pause on state and local...more
Budget reconciliation bill H.R.1, the “One Big Beautiful Bill Act,” currently pending in the U.S. Senate, includes not only tax and spending provisions but also a proposed five-year pause on state and local enforcement of...more
On May 1, 2025, the California Privacy Protection Agency (CPPA) issued a final order against clothing retailer, Todd Snyder, for violations of the California Consumer Privacy Act (CCPA). The enforcement action targeted the...more
On April 11, 2025, the Department of Justice’s (DOJ) National Security Division (NSD) released an Implementation and Enforcement Policy, a Compliance Guide, and a list of over 100 Frequently Asked Questions (FAQs) to help...more
Sports teams, leagues, agents and venues collecting personal information from athletes, fans and sponsors must comply with evolving privacy regulations. Here are key takeaways from a conversation Orrick recently hosted with...more
AI companies should familiarize themselves with trade secret law to safeguard their innovations. A company does not need to register a trade secret to invoke it in litigation, unlike other IP protections. Trade secrets can...more
State legislators nationwide have proposed or passed a flurry of laws to regulate AI, with new ideas continuing to emerge as most state legislatures prepare to convene early next year. The most notable bill to date is the...more
The Department of Justice has finalized prohibitions and restrictions on cross-border transfers of certain data to China and other “Countries of Concern” (as defined below). It seeks to address what is, in the U.S....more
1/21/2025
/ Artificial Intelligence ,
China ,
Cuba ,
Data Privacy ,
Data Security ,
Department of Justice (DOJ) ,
International Data Transfers ,
International Emergency Economic Powers Act (IEEPA) ,
Iran ,
National Security ,
Personal Data ,
Russia
Over the past several years, data brokers have been subject to increased scrutiny from regulatory and enforcement agencies at both federal and state levels. On Dec. 3, the Consumer Financial Protection Bureau took a...more
The Department of Justice (DOJ) has proposed a significant restriction on cross-border transfers of sensitive personal data to designated “countries of concern.” The goal is to address national security risks posed by...more
12/13/2024
/ Biometric Information ,
CFIUS ,
Cybersecurity Information Sharing Act (CISA) ,
Data Protection ,
Department of Justice (DOJ) ,
International Data Transfers ,
International Emergency Economic Powers Act (IEEPA) ,
National Security ,
Personal Data ,
Popular ,
Proposed Rules
The children’s privacy and online safety regulatory landscape is evolving quickly. To keep up, companies subject to U.K. law should understand their users, enhance safety features and conduct risk assessments, all while...more
We were honored to host a conversation about the future of AI policy last week in Orrick’s San Francisco office -- and would like to share five takeaways with our clients and friends. The conversation featured:
Tom Kemp,...more
This week, we hosted a conversation about the future of AI regulation across the 50 states following California Governor Gavin Newsom’s veto of the controversial AI safety bill, SB 1047. Key takeaways are below....more
We've really seen an explosion of AI laws at the state level in the last year. In 2024 alone, there have been over 600 bills proposed at the state level on AI.
This is really challenging for companies to keep on top of the...more
TAKEAWAY: California Gov. Gavin Newsom has vetoed SB 1047 – the controversial AI regulation bill that both chambers of the California legislature passed by wide margins. The veto is a good outcome for the nascent AI industry....more
The U.S. Department of Justice (DOJ) and eight state attorneys general filed an antitrust lawsuit against real estate software company RealPage on August 23, 2024. The lawsuit alleges that RealPage’s algorithmic pricing...more