Privacy & Information Security Law Blog

On April 8, 2025, the Department of Justice’s Final Rule restricting the bulk transfer of sensitive U.S. personal and government data to certain countries and persons of concern went into effect.

The Centre for Information Policy Leadership at Hunton recently released a white paper on Privacy-Enhancing and Privacy-Preserving Technologies in AI: Enabling Data Use and Operationalizing Privacy by Design and Default. CIPL is hosting a webinar on the key themes of the Paper on April 29, 2025.

On March 24, 2025, the U.S. National Institute of Standards and Technology published a report titled “Adversarial Machine Learning: A Taxonomy and Terminology of Attacks and Mitigations.”

On January 13, 2025, Texas Attorney General Ken Paxton announced lawsuits against Allstate and its subsidiary, Arity (together, “Allstate”), for the unlawful collection, use and sale of precise geolocation data collected through Allstate’s mobile apps, in violation of Texas’s comprehensive data privacy law. The AG’s office alleges that Allstate then used this covertly obtained data to justify raising insurance rates.