Data Privacy + Cybersecurity Insider
CYBERSECURITY
Phishing Now Top Method for Initial Unauthorized Network Access
According to Cisco Talus researchers, phishing is the primary method threat actors use to gain unauthorized access to networks, accounting for more than one-third of all incidents in the first quarter of 2026. This increase is attributed to threat actors using legitimate AI tools to enhance phishing campaigns, particularly against health care and government sectors. Read more]
ENFORCEMENT + LITIGATION
SCOTUS Hears the Next Big Fourth Amendment Fight Over Digital Location Data
Earlier this year, the Pennsylvania Supreme Court held that users generally lack a reasonable expectation of privacy in unprotected Google search records, underscoring how aggressively some courts are still applying third-party doctrine principles to digital data. Commonwealth v. Kurtz, 348 A.3d 133 (Pa. 2025); (our previous blog post on Kurtz is available here). The question of how much constitutional protection survives once a technology provider holds sensitive digital information is now before the United States Supreme Court in Chartie v. United States, No. 25-112, which heard arguments on April 27, 2026, on the question of whether a geofence warrant violates the Fourth Amendment to the Constitution. Read more
DATA PRIVACY
CCPA Employee Data Rulemaking Could Reshape Employer Privacy Compliance in California
The California Consumer Privacy Act (CCPA) continues to stand apart as the only comprehensive state privacy law in the U.S. that applies to personal information relating to employees, job applicants, and independent contractors. Since that coverage expanded in January 2023, many employers have had to navigate the difficult task of applying a consumer privacy framework to workforce data. That has created practical challenges, particularly in areas such as privacy notices, internal data practices, and responses to requests from workers seeking to exercise their privacy rights. Read more
ARTIFICIAL INTELLIGENCE
Tempus AI Faces Class Action Cases for Collection of Genetic Information in Acquisition
Multiple class action cases have been filed against Tempus AI alleging that, during its acquisition of Ambry Genetics, the company improperly collected and disclosed genetic information without obtaining prior written consent from individuals during its acquisition of Ambry. Read more
EU AI Act Update: Omnibus Talks Stall, but Clock Is Still Ticking
Talks between European Union legislators broke down on Wednesday as they tried to agree on proposed amendments to the EU AI Act. At the center of the debate is the Digital Omnibus on AI, first introduced in November 2025, which would delay several key compliance deadlines under the Act.
If approved, the Digital Omnibus would push back the compliance date for high-risk AI systems classified under Annex III from August 2, 2026, to December 2, 2027. Read more
What Legal AI Is Really Changing in Law Firm Economics
Legal commentary on artificial intelligence in law practice often focuses on speed: drafts that once took days can now be produced in hours, and research that once took hours can now be narrowed in minutes. Those gains are real, but they do not resolve the more important operational questions. Many firms still don’t know whether faster tools are producing better realization or improved profitability. In practice, time saved in drafting often reappears in verification, supervision, and coordination. A draft may be generated quickly, but lawyers still need to test it against matter history, client objectives, procedural posture, and jurisdiction-specific requirements. Read more
Privacy Tip #489
The Federal Trade Commission (FTC) recently reported that, in 2025, social media scams were the costliest of all scams against consumers, with a whopping $2.1 billion lost. Thirty percent of those who reported losing funds in 2025 indicated that the scam started over social media.
The number of 2025 scams beginning on social media increased more than eight times from those that started on social media in 2020. The data shows that the scams are successful against all age groups except for those over 80 years old.
Check out some FTC recommended tips to avoid becoming a victim to social media scams in this week’s Privacy Tip. Read more
RECENT EVENTS + NEWS
Linn Freedman Reacts to New CT Rule Proposed as a Result of Generative AI Hallucinations
Data Privacy + Cybersecurity team and AI practice chair Linn Freedman discussed a recently proposed rule from the Rules Committee of the Connecticut Superior Court in the Law360 article, “Conn.’s Proposed AI Rule Not A Shock To Attys,” published on April 23, 2026. The proposed rule would put attorneys at risk if they fail to verify citations and evidence produced by artificial intelligence (AI).
Linn said the rule is likely being put in writing because the court is concerned that lawyers continue to file hallucinations. “I think they’re reiterating to the entire bar what their obligations are, specifically with regard to the use of gen AI. I think it makes sense, because more and more lawyers are not aware, which I don’t understand at this point. They’re not aware of the consequences and the many examples of lawyers that have been sanctioned as a result of wasting the resources of both opposing counsel and the court when they are not providing accurate citations in cases.” Read the article.
