Privacy & Information Security Law Blog

On April 11, 2025, California Attorney General Rob Bonta appealed the U.S. District Court for the Northern District of California’s decision blocking enforcement of California’s Age-Appropriate Design Code Act.

Last year, the Federal Communications Commission issued a rule amending a portion of the Telephone Consumer Protection Act.

On April 11, 2025, the U.S. Department of Justice issued a compliance guide, FAQs and an Implementation and Enforcement Policy to assist organizations to comply with the DOJ’s final rule implementing Executive Order 14117 (Preventing Access to Americans’ Bulk Sensitive Personal Data and United States Government-Related Data by Countries of Concern). The guidance comes just days after certain of the final rule’s provisions became effective on April 8, 2025.

On April 10, 2025, the U.S. Senate confirmed Mark Meador as the newest Commissioner of the Federal Trade Commission. Meador was nominated on January 20, 2025, by President Donald J. Trump, and his term will expire on September 25, 2031.

The California Privacy Protection Agency recently released modified draft regulations in response to public feedback on its proposed updates to the California Consumer Privacy Act regulations.

On April 8, 2025, the Department of Justice’s Final Rule restricting the bulk transfer of sensitive U.S. personal and government data to certain countries and persons of concern went into effect.

The Centre for Information Policy Leadership at Hunton recently released a white paper on Privacy-Enhancing and Privacy-Preserving Technologies in AI: Enabling Data Use and Operationalizing Privacy by Design and Default. CIPL is hosting a webinar on the key themes of the Paper on April 29, 2025.

On April 1, 2025, the UK government published the Cyber Security and Resilience Policy Statement, which details the UK government’s legislative proposals for the Cyber Security and Resilience Bill.

On March 24, 2025, the U.S. National Institute of Standards and Technology published a report titled “Adversarial Machine Learning: A Taxonomy and Terminology of Attacks and Mitigations.”

On March 27, 2025, the Information Commissioner's Office announced that it had issued a fine against Advanced Computer Software Group for £3.07 million for non-compliance with security rules identified through an investigation following a ransomware attack.