CYBERSECURITY

Hospitals + Critical Infrastructure Organizations on Alert During Iran Conflict

The American Hospital Association is advising hospitals and healthcare entities to “take precautionary measures in case Iran, its proxies or self-radicalized individuals attempt attacks in the U.S.” during the conflict between Israel, the United States and Iran. The precautionary measures include strengthening cybersecurity and physical security measures. Read more

Darktrace Issues Annual Threat Report

Cybersecurity firm Darktrace recently issued its Annual Threat Report which offered some startling statistics and findings. The Threat Report provides a “comprehensive assessment of the global cyber threat landscape and the trends shaping cyber risk in 2026.” Read more

ENFORCEMENT + LITIGATION

The Fifth Circuit Says You Can’t Write “Written” into the TCPA

The U.S. Court of Appeals for the Fifth Circuit recently issued a significant Telephone Consumer Protection Act (TCPA) decision in Bradford v. Sovereign Pest Control of TX, Inc., No. 24-20379, Doc. 85-1 (5th Cir. Feb. 25, 2026). The court affirmed summary judgment for the company and held that the TCPA’s “prior express consent” standard does not require “prior express written consent” for prerecorded or autodialed calls to wireless numbers, even if the calls are alleged to be telemarketing. Read more

DATA PRIVACY

A Compliance Wave Is Coming: Data Brokers Brace for DROP Deletion Requests Under the Delete Act

Data brokers are lining up to comply with California’s one-stop deletion tool requirement under the Delete Act, and the numbers signal a major shift in how privacy rights may be exercised and enforced in California starting this summer.

At its most recent meeting, the California Privacy Protection Agency reported that more than 575 data brokers have registered with its Delete Request and Opt-out Platform (DROP). DROP is the first tool of its kind in the United States. It allows California residents to submit a single request to delete personal information held by brokers registered in California. Read more

Privacy Tip #482

ShinyHunters Hits Wynn Resorts

ShinyHunters continues to wreak havoc against well-known brands; most recently, Wynn Resorts. Wynn Resorts has confirmed that “an unauthorized third party acquired certain employee data.” It is believed that the threat actor was ShinyHunters. Fortunately for Wynn, the incident is not affecting its operations, and its resorts remain fully functional.

This week’s Privacy Tip uses the Wynn Resorts breach to show why employee training and vigilance against vishing remain critical. Read more

NEWS + EVENTS

Kathryn Rattigan, Jim Merrifield + Liz Salsedo-Surovov to Discuss Information Governance and Cross Functional Collaboration at Law.com’s Legalweek 2026

Information Governance + Record Management team partner Kathryn M. Rattigan and Chief Data Officer Jim Merrifield, and Director of Knowledge and Information Resources Elizabeth Salsedo-Surovov will present at Law.com’s Legalweek 2026 on March 9, 2026, in New York City.

Kathryn and Jim’s program titled “Unlocking the Power of Information Governance: Essentials for Legal Professionals,” will discuss the core tenets of information governance (IG), how it drives organizational success while ensuring regulatory compliance, and how IG principals can enhance a law firm’s approach to data management.

Kathryn will also present a second session titled, “Managing Matter Mobility – Setting Defensible Rules for Data Leaving or Entering the Firm,” which will discuss practical, defensible frameworks for managing data during attorney onboarding and offboarding, in addition to, how information governance, risk, IT, and intake teams can collaborate to reduce bottlenecks, prevent inadvertent disclosures, and ensure smooth client transitions.

Liz’s session, titled “Cross Functional Collaboration: Who Really Owns the Data?” will discuss roles and responsibilities for data governance across teams to ensure attorney oversight and defensible decision-making; how to effectively build cross-departmental collaboration and accountability structures that protect privileged and sensitive information; and how to resolve conflicts when priorities and interpretations of data ownership clash, while maintaining compliance and professional responsibility standards.