CYBERSECURITY

CISA + Partners Issue Microsoft Exchange Server Security Best Practices Guidance

Recently, the National Security Agency (NSA), Cybersecurity and Infrastructure Security Agency (CISA), Australian Signals Directorate’s Australian Cyber Security Centre (ASD’s ACSC), and Canadian Centre for Cyber Security (Cyber Centre) issued guidance outlining security best practices for administrators on hardening on-premises Exchange servers. Read more

DATA PRIVACY

Out-of-State Sony TV Users Can’t Sue Under California Privacy Laws

A recent ruling from the U.S. District Court for the Northern District of California underscores the limits of state privacy statutes, particularly when plaintiffs reside outside the state and the alleged misconduct lacks a clear connection to California. The decision by Judge Jacqueline Scott Corley dismissed a proposed class action against California-based analytics company Samba TV Inc., clarifying the reach of both state and federal privacy protections. Steve Dellasala, et al., v. Samba TV, Inc., No. 3:25-CV-03470-JSC, 2025 WL 3034069 (N.D. Cal. Oct. 30, 2025). Read more

Home Depot Facial Scan Lawsuit Voluntarily Dismissed—What’s Next for Biometric Privacy Compliance?

A recent federal class action lawsuit challenging Home Depot Inc.’s use of facial scanning technology at self-checkout kiosks has come to a sudden halt. The plaintiff, Benjamin Jankowski, voluntarily dropped the case, with the U.S. District Court for the Northern District of Illinois granting dismissal without prejudice. Jankowski v. The Home Depot, No. 1:25-cv-09144 (N.D. Ill. Oct. 31, 2025). The underlying reasons for this move remain unclear, as neither Jankowski nor Home Depot have commented publicly. Read more

ENFORCEMENT + LITIGATION

Drawing the Line: Section 230’s Protections Under Scrutiny

Section 230 of the Communications Decency Act, 47 U.S. Code § 230, has played a critical role in shaping the modern internet, but the boundaries of its protections remain a persistent point of discussion in law and policy. Ongoing litigation is testing just how far Section 230 stretches when it comes to the design and operation of today’s social media platforms. Read more

Privacy Tip #466

Consumer Reports Evaluates the Security of Connected Devices

In today’s increasingly digital world, connected devices are an integral part of daily life. From smart speakers and thermostats to fitness trackers and home security cameras, these devices offer convenience and automation—but they also present new privacy and security challenges. Recognizing the growing concern among consumers, Consumer Reports (CR) has undertaken comprehensive testing to evaluate how well these devices protect user data and defend against potential cyber threats. Read more

RECENT EVENTS AND NEWS

Roma Patel to Speak on “AI Foundations for Women”
Artificial Intelligence team lawyer Roma Patel will be among the speakers facilitating at the “AI Foundations for Women” webinar hosted by Empressa and The WIT Network, in collaboration with The Geena Davis Institute on November 7, 2025. Roma will discuss the skills women need to succeed in the “Era of AI,” including AI fundamentals, how to evaluate AI metrics and data, ethical considerations for AI use, and how AI can provide women more equity in the future of work.