In January 2026, new regulations under the California Consumer Privacy Act (“CCPA”) took effect establishing requirements for risk assessments, automated decision-making, and cybersecurity audits. Many companies have understandably prioritized requirements impacting product design and consumer rights....

AI products need data to improve, and the easiest data to obtain is what’s already flowing through a product — things like customer calls, chat logs, or meeting transcripts. But collecting and training on that...

On July 1, the Federal Trade Commission released a proposed policy statement addressing “the suppression of accuracy” in AI systems. The statement takes the position that consumers expect AI systems to produce “accurate” outputs, and...

As our clients prepare for automated decision-making (ADM) requirements beginning in 2027 in California, Colorado, and Connecticut, we’d like to clear up a few myths about ADM. For this article, we use “ADM” as shorthand...

Most discussions of “AI red-teaming” still conjure an image of someone typing clever prompts into a chat window, while trying to coax a model into saying something it shouldn’t. That process is real and useful...

On June 30, 2026, New Jersey quietly enacted one of the most onerous and sweeping data broker regimes in the nation. The law, A5328 (P.L.2026, c.25), requires entities that qualify as “data brokers”—or entities that sell...