Perkins on Privacy
Perkins on Privacy
Perkins on Privacy keeps you informed about the latest developments in privacy and data security law. Our insights are provided by Perkins Coie's Privacy & Security practice, recognized by Chambers as a leading firm in the field.
AI Governance—Key Takeaways From the 2026 IAPP Global Summit
AI dominated the conversation at the IAPP Summit 2026, as it has in the last several years.
This post distills themes about AI governance from across the summit into practical guidance for businesses navigating high-stakes AI compliance questions.
State Privacy Enforcers Discuss Collaboration and Enforcement Priorities: Key Takeaways From IAPP Global Summit 2026
At the 2026 IAPP Global Summit in Washington, D.C., a panel titled “State Collaboration on Privacy” brought together state privacy enforcers to discuss how they are working together and what businesses should expect.
The panelists were:
Where Privacy Is Headed Next: Key Takeaways From the 2026 IAPP Global Privacy Summit
Privacy law doesn’t stand still, and neither do the regulators shaping it.
FTC Signals Renewed Focus on Quantifying Privacy Harms and Benefits
During the first Trump administration, the Federal Trade Commission hosted a workshop on informational injuries, and on February 26, 2026, the agency revisited the issue in a workshop on “Consumer Injuries and Benefits in the Data-Driven Economy.”
Inside the FTC’s Age Verification Workshop
The Federal Trade Commission recently convened stakeholders, including researchers, academics, industry representatives, consumer advocates, and government regulators, for a public workshop to discuss age verification, a concept implemented in regulations worldwide as a tool to advance online safe
Privacy Law Recap 2025—State Enforcement
While 2025 saw no new state comprehensive privacy laws enacted, state enforcement activity accelerated—individually and collaboratively—reflecting trends likely to intensify in 2026.
Key enforcement focus areas included youth privacy and online safety, consumer rights, and data brokers/data sales. This post discusses highlights from 2025 and looks at expected trends in 2026.
Privacy Law Recap 2025—FTC Enforcement
This past year saw significant change at the Federal Trade Commission, as Andrew Ferguson was appointed chairman by President Donald Trump, replacing Lina Khan, who served as chair during the Biden administration.
SEC Dismisses Cyber Disclosure Case Against SolarWinds and CISO
Key Takeaways
- The SEC’s agreement with defendants to dismiss, with prejudice, its case against SolarWinds Corporation (SolarWinds) and its chief information security officer (CISO) signals a retreat from aggressive, novel enforcement theories in cybersecurity disclosure cases.
- Although technical cybersecurity violations without investor harm
The FTC and Utah Attorney General Focus on Online Safety: Takeaways for All Platforms
The Federal Trade Commission and Utah Attorney General recently announced a settlement with Aylo Group Ltd.
Preparing for the California Cyber Audit Regulations
On September 23, 2025, the California Privacy Protection Agency confirmed that their cyber audit regulations will at long last go into effect on January 1, 2026.
You can be forgiven for losing track since these were first proposed in September 2023, but now is the time to start considering how they will apply to your company and budgeting for that impact.
2025 Breach Notification Law Update
State Updates, Security Mandates, and the Federal Regulatory Horizon
Lessons From the FTC’s First Privacy Enforcement Actions During Trump 2.0
“A New Era of Privacy Enforcement”: CPPA Signals Intensified Oversight while Advancing New Regulations
150 consumer complaints per week. A consortium of privacy regulators. “Hundreds of open investigations.”
Minor Coordinates, Major Concerns: FTC Case Signals Collecting Location Data Isn’t Child’s Play
On September 2, 2025, the Federal Trade Commission filed a complaint and proposed order against toy manufacturer Apitor Technology Co., Ltd.
DOJ Posts New FAQ for the “Bulk Data” Rule
The U.S. Department of Justice (DOJ) “Data Security Program” (DSP), also known as the “Sensitive Data Rule” or “Bulk Data Rule,” has prompted numerous questions about its scope and application.