Perkins on Privacy
Privacy and Security related image, digital thumbprint

Perkins on Privacy

Perkins on Privacy keeps you informed about the latest developments in privacy and data security law. Our insights are provided by Perkins Coie's Privacy & Security practice, recognized by Chambers as a leading firm in the field. 
bell on front desk at hotel
November 7, 2024 Regulatory Enforcement Data Security Data Breach and Incident Response Federal Trade Commission

FTC and State Coalition Settle Data Breach Cases with Marriott

 In 2018, Marriott announced a data breach affecting its Starwood reservation system, thought at the time to have affected up to 500 million people worldwide. These settlements arise from that incident, as well as two smaller incidents that also affected Starwood and Marriott. The FTC alleges these incidents exposed payment card information, unencrypted passport numbers, and loyalty account information, along with other information like names, dates of birth, and contact information. View blog post
Artificial Intelligence Robotics Wave
November 6, 2024 Artificial Intelligence

California Governor Signs a Raft of AI and Privacy Bills

 California’s legislative session came to a close with the adoption of a torrent of bills concerning artificial intelligence (AI) as well as updates to the state’s broad consumer privacy law, the California Consumer Privacy Act (CCPA). Conversely, other AI and privacy legislation did not make it out of the legislature or was vetoed. In all, Governor Newsom signed over a dozen AI and privacy bills, while vetoing a handful. Below we summarize some of the most notable AI and privacy bills enacted and vetoed. View blog post
Artificial Intelligence Brain Compute
October 7, 2024 Artificial Intelligence

AB 2013: New California AI Law Mandates Disclosure of GenAI Training Data

 In the last 30 days, California Governor Gavin Newsom signed 17 artificial intelligence (AI) bills and vetoed AI safety bill SB 1047. One of the AI-related bills signed into law, AB 2013 “Generative Artificial Intelligence: Training Data Transparency,” imposes new disclosure requirements on the developers of generative artificial intelligence (GenAI) systems and services that are made available to Californians. View blog post
Columns
October 7, 2024 Artificial Intelligence

Implications of California Governor Newsom’s Veto of AI Safety Bill SB 1047

 Governor Gavin Newsom has vetoed SB 1047, the Safe and Secure Innovation for Frontier Artificial Intelligence Models Act, marking a significant development in California’s approach to AI regulation. Both the tech industry and policymakers had closely watched the bill due to its potential impact on the development and deployment of frontier AI models. View blog post
AI finger touch screen
September 30, 2024 Data Breach and Incident Response Data Security

2024 Breach Notification Law Update: Unique New State Obligations and Widespread New Federal Obligations

 Amid intense focus on AI and a flurry of consumer privacy law updates, legislative activity has continued to change data breach notification requirements in a variety of ways. Similar to 2023, a handful of changes to generally applicable state breach notification statutes were accompanied by steady sectoral activity at the state level and significant updates at the federal level, including new obligations from both the Federal Trade Commission (FTC) and the U.S. Securities and Exchange Commission (SEC). View blog post
Cellphone Privacy Security
September 25, 2024 Data Security

Cybersecurity for Lawyers: The NIST Cybersecurity Framework as a Tool and Reference

 In this post in our series on basic cybersecurity concepts for lawyers, we delve into the National Institute of Standards and Technology (NIST) Cybersecurity Framework (CSF) 2.0. View blog post
Computer server room
August 30, 2024 Data Security

Cybersecurity for Lawyers: Open-Source Software Supply Chain Attacks

In this post in our series on basic cybersecurity concepts for lawyers, we address open-source software (OSS) supply chain risk. 

 View blog post
Happy family together at home.
August 14, 2024 Data Security Regulatory Enforcement Children’s Privacy Federal Trade Commission

FTC Order Bans Anonymous Messaging App from Serving Minors

 The Federal Trade Commission (FTC) and the Los Angeles County District Attorney announced a complaint and proposed stipulated order concerning the “NGL: ask me anything” anonymous messaging app. View blog post
Conference group
July 25, 2024 CCPA Regulatory Enforcement Artificial Intelligence

CPPA Regulatory Delays and Enforcement Updates: Takeaways from July Board Meeting

 On July 16, the California Privacy Protection Agency (CPPA) held a public meeting of its Board (the Board). View blog post
Computer Lock Security
May 22, 2024 Data Security

Clarifying Guidance on Abundance-of-Caution Disclosures under SEC Cybersecurity Rule

 The Director of the U.S. Securities and Exchange Commission (SEC) Division of Corporation Finance issued a statement clarifying public companies' obligations to disclose cybersecurity incidents under Item 1.05 of Form 8-K. View blog post
Gavel on desk in courtroom
October 17, 2023 Artificial Intelligence

Generative AI: How Existing Regulation May Apply to AI-Generated Harmful Content

Among the many open questions about large-language models (LLMs) and generative artificial intelligence (AI) are the legal risks that may result from AI-generated content. 

 View blog post
Woman on a laptop
September 19, 2023 Data Security Data Breach and Incident Response

Updating Corporate and Cybersecurity Practices To Satisfy the SEC’s Final Cybersecurity Disclosure Rules: Assessing Materiality of Cybersecurity Incidents

 In the wake of the SEC's new rule requiring prompt disclosure of cybersecurity incidents, incident response (IR) teams have asked how they should modify IR plans to promote compliance with the new rule. View blog post
Cellphone Privacy Security
September 11, 2023 Data Security Data Breach and Incident Response

A Deep Dive Into the SEC’s Materiality Trigger for Cybersecurity Incident Disclosures

The U.S. Securities and Exchange Commission (SEC) adopted final rules relating to cybersecurity disclosure on July 26, 2023, which will take effect on December 18, 2023. 

 View blog post
© 2026 Perkins Coie LLP