WilmerHale Blogs RSS Feed

Oklahoma Enacts Nation’s Twentieth State Comprehensive Privacy Law

Fri, 27 Mar 2026 13:00:00 Z

On March 16, the Oklahoma legislature passed SB 546, with Oklahoma Governor Kevin Stitt signing the bill into law on March 20. SB 546 is the twentieth state comprehensive law to be enacted and will take effect on January 1, 2027.

White House Releases National Policy Framework for Artificial Intelligence

Mon, 23 Mar 2026 16:30:00 Z

The White House’s National Policy Framework for Artificial Intelligence outlines a proposed unified approach to AI regulation, arguing that a patchwork of state laws hinders innovation and should largely be preempted by federal legislation.

Youth Sports Media Company to Pay $1.10 Million Fine in CPPA Enforcement Action

Thu, 19 Mar 2026 16:52:00 Z

CPPA fined PlayOn Sports $1.1M for CCPA tracking violations, reinforcing opt-out obligations and scrutiny of targeted ads and consent models.

UK Supreme Court Confirms No Sovereign Immunity for ICSID Award Enforcement

Thu, 12 Mar 2026 10:30:00 Z

The United Kingdom Supreme Court has held that Contracting States to the ICSID Convention cannot claim sovereign immunity to resist enforcement of ICSID awards against them.

California Attorney General Announces Largest CCPA Settlement

Mon, 09 Mar 2026 16:44:00 Z

On February 11th, California Attorney General Rob Bonta’s office (“CA AG”) announced a $2.75 million settlement—the largest settlement to date under the California Consumer Privacy Act (CCPA) —with the Walt Disney Company (“Disney”).

Investor State Award Enforced Despite Bribery Allegation but Costs Award May Be Resisted

Mon, 09 Mar 2026 13:14:00 Z

England’s High Court held that awards tied to fraud or bribery may be enforced, but costs awards may breach public policy if the winner engaged in misconduct.

Managing Legal Risk in the Age of Artificial Intelligence: What Key Stakeholders Need to Know Today

Tue, 17 Feb 2026 16:30:00 Z

2026 is poised to be a transformative year for artificial intelligence (AI) as businesses move beyond targeted pilot programs to enterprise-wide implementation. While AI is poised to unlock new efficiencies and drive innovation, it also has introduced new legal and regulatory risks.

UK Financial Sanctions Compliance and Enforcement Update

Tue, 17 Feb 2026 14:56:00 Z

January 2026 brought tougher UK sanctions enforcement, a single sanctions list, and new OFSI penalties emphasizing stronger screening and disclosure.

2025 Year in Review: California Shine the Light Request Trends

Thu, 05 Feb 2026 17:07:00 Z

Throughout 2025, we saw a noticeable uptick in requests from California residents invoking their rights under the state’s “Shine the Light” law, Cal. Civ. Code § 1798.83.

Year in Review: 2025 Artificial Intelligence-Privacy Litigation Trends

Mon, 02 Feb 2026 12:00:00 Z

In 2025, state and federal officials continued scrutinizing the data privacy aspects of artificial intelligence (AI) systems, with enforcement agencies focusing on deceptive marketing claims, opaque data use disclosures, and potential risks to children stemming from chatbots and AI enabled customer interaction tools.

US Supreme Court to Define Who Can Sue Under the Video Privacy Protection Act

Fri, 30 Jan 2026 11:30:00 Z

On Monday, January 26, the US Supreme Court agreed to take up a case about the breadth of the Video Privacy Protection Act.

Year in Review: The Top Ten US Data Privacy Developments from 2025

Wed, 28 Jan 2026 15:29:00 Z

In 2025, federal and state privacy activity grew through DOJ’s new Data Security Program and rising AI and child‑privacy laws, despite no new broad privacy bills.

2025 Year in Review: Web Tracking and the Wiretap Act Crime/Tort Exception

Wed, 28 Jan 2026 08:00:00 Z

Courts remain divided on whether the Wiretap Act’s crime/tort exception covers commercial web data capture, leaving an unsettled legal landscape entering 2026.

2025 Year In Review: Video Privacy Protection Act Litigation Trends

Fri, 23 Jan 2026 15:04:00 Z

Despite having been enacted decades ago – during the heyday of the neighborhood brick-and-mortar video store – the federal Video Privacy Protection Act remained as relevant as ever in 2025.

Kirk Nahra Authors an Article on "Privacy and Security Law for Business Lawyers"

Fri, 16 Jan 2026 14:00:00 Z

WilmerHale Partner Kirk Nahra examines the expanding and increasingly complex patchwork of U.S. privacy and security regulations in his recently published article, “Privacy and Security Law for Business Lawyers.”

FCA Enforcement Trends In 2025 And Expectations For 2026

Fri, 09 Jan 2026 06:30:00 Z

FCA aims for fewer probes, quicker resolutions, and stronger financial crime enforcement in 2026.

UK White Collar Crime: 2025 Year-End Roundup

Mon, 29 Dec 2025 14:00:00 Z

2025 was a watershed year in UK white collar crime enforcement and corporate compliance, with organisations facing a new and more dangerous landscape of criminal liability along with significant regulatory shifts.

Section 16 Reporting Requirements Expanded to Include Directors and Officers of Foreign Private Issuers

Tue, 23 Dec 2025 14:21:00 Z

The President signed a law requiring foreign issuer directors and officers to file Section 16 reports on ownership and securities transactions.

Kirk Nahra Authors an Article on “Trying to Make Sense of Health Privacy”

Wed, 03 Dec 2025 15:46:00 Z

Kirk Nahra has authored an article, which analyzes the recently introduced Health Information Privacy Reform Act.

Budget 2025: HMRC whistleblower scheme a welcome change

Tue, 02 Dec 2025 17:00:00 Z

The UK government, through HMRC, has announced a new whistleblower reward scheme in the 2025 Budget, wherein whistleblowers can receive up to 30% of tax amounts collected over £1.5 million based on their information.

New UK SFO Guidance on Evaluating Corporate Compliance Programmes

Mon, 01 Dec 2025 14:24:00 Z

On 26 November 2025, the UK Serious Fraud Office (“SFO”) published an updated version of its Guidance on Evaluating a Corporate Compliance Programme (the “Guidance”).

European Court of Justice to Review Challenge to EU-U.S. Data Privacy Framework

Mon, 01 Dec 2025 13:30:00 Z

The European Court of Justice will review a challenge to the EU-U.S. Data Privacy Framework, introducing uncertainty for companies that rely on the Framework for transatlantic data flows.

California’s Climate Disclosure Laws: Ninth Circuit Enjoins Enforcement of SB 261; CARB Updates Reporting Requirements

Fri, 21 Nov 2025 09:30:00 Z

The Ninth Circuit enjoined the January 1, 2026, reporting deadline in SB 261, leading challengers to withdraw their emergency Supreme Court petition. As a result, the first deadline in California’s climate disclosure laws will be August 10, 2026, at the earliest.

Supreme Court Likely to Consider SB 253 and SB 261 Reporting in 2025

Thu, 06 Nov 2025 14:30:00 Z

California has enacted two laws, SB 253 and SB 261, requiring companies with significant revenue to report greenhouse gas and climate-related financial risks starting in 2026. SB 261 applies to companies with annual revenue above $500 million while SB 253 applies to those above $1 billion.

Between EU Law and International Commitments: Two Rulings on Investment Arbitration from the German Federal Constitutional Court

Wed, 05 Nov 2025 13:37:00 Z

The FCC’s rulings offer important guidance on the intersection of EU law and international obligations in the context of investment arbitration.

Two Circuits Narrowly Construe the Video Privacy Protection Act

Mon, 20 Oct 2025 16:00:00 Z

Recent federal appellate decisions have narrowed the scope of the Video Privacy Protection Act, with he Second Circuit limiting what counts as “personally identifiable information” and excluding complex data strings and social media identifiers from VPPA protection.

California Privacy Protection Agency Issues Largest Monetary Penalty to Date

Fri, 17 Oct 2025 15:22:00 Z

On September 30, the CPPA announced a $1.35 million settlement – the largest in the agency’s brief history – with Tractor Supply Company, signaling that the CPPA is an increasingly active regulator and that compliance with it should continue to be an area of priority for companies.

Transparency in Frontier Artificial Intelligence Act (SB-53): California Requires New Standardized AI Safety Disclosures

Wed, 01 Oct 2025 13:30:00 Z

California has passed a new AI safety law (“the Transparency in Frontier Artificial Intelligence Act” or “TFAIA”) that requires developers of powerful AI systems to publicly share how they manage safety risks.

Non-Financial Misconduct: Navigating the Emerging Divergence between the U.S. and U.K.

Mon, 22 Sep 2025 13:14:00 Z

The UK and US are taking diverging paths on workplace misconduct and DEI, creating compliance challenges for global companies.

SEC Welcomes a “New Day” with the Release of its Spring 2025 Regulatory Agenda

Mon, 08 Sep 2025 17:40:00 Z

The SEC’s recently released Spring 2025 regulatory agenda emphasizes its continued focus on crypto assets and deregulation and simplification of rules.

Texas Expands and Modifies Data Broker Registration Law

Thu, 04 Sep 2025 16:00:00 Z

On June 20, 2025, the Texas governor signed two bills amending the Texas Data Broker Act (the “Act”) into law (SB 2121 and SB 1343).

PCAOB Delays Implementation of QC 1000 Until December 2026

Fri, 29 Aug 2025 16:40:00 Z

QC 1000’s effective date is delayed to Dec 15, 2026. Firms must still follow interim standards while preparing for full compliance.

EDGAR Next: Reminders and Considerations with Under a Month Remaining to Enroll

Thu, 21 Aug 2025 14:33:00 Z

Enroll in EDGAR Next by Sept 15, 2025, or lose filing access. Act now if you haven’t enrolled.

The Road Less Traveled: Which Potential Arbitral Reforms Were Left Out of the Arbitration Act 2025 and Why?

Mon, 18 Aug 2025 20:14:00 Z

The English Arbitration Act 2025 came into effect on 1 August 2025 and governs arbitrations seated within England, Wales and Northern Ireland.

AI and the EU Digital Markets Act

Mon, 18 Aug 2025 14:13:00 Z

AI is not yet a regulated 'core platform service' under the DMA but may be covered when integrated into such a service and in future revisions.

European Commission Releases Mandatory Template for Public Disclosure of AI Training Data

Wed, 13 Aug 2025 09:00:00 Z

The European Commission has introduced a mandatory template for providers of general-purpose AI (GPAI) models to publicly disclose detailed summaries of their training data. This requirement aims to enhance transparency and support copyright and data protection enforcement.

AI and GDPR: A Road Map to Compliance by Design - Episode 5: Using AI

Fri, 01 Aug 2025 09:30:00 Z

The use of AI requires organizations that act as controllers under the GDPR to determine the purposes and means of processing personal data.

AI and GDPR: A Road Map to Compliance by Design - Episode 4: The Deployment Phase

Thu, 31 Jul 2025 13:31:00 Z

AI deployment demands ongoing GDPR compliance, user rights support, and strong security to manage risks and ensure responsible real-world use.

AI and GDPR: A Road Map to Compliance by Design - Episode 3: The Development Phase

Wed, 30 Jul 2025 12:58:00 Z

AI development must respect GDPR: ensure data accuracy, enable user rights, and secure personal data with privacy-enhancing technologies.

AI and GDPR: A Road Map to Compliance by Design - Episode 2: The Design Phase

Tue, 29 Jul 2025 13:53:00 Z

AI design must embed GDPR safeguards—minimize and anonymize data, ensure transparency, and enable human oversight for responsible, lawful use.

AI and GDPR: A Road Map to Compliance by Design - Episode 1: The Planning Phase

Mon, 28 Jul 2025 10:00:00 Z

AI systems must align with GDPR: ensure lawful data use, assess risks, and apply safeguards from planning through deployment.

European Commission Issues Guidelines for Providers of General-Purpose AI Models

Thu, 24 Jul 2025 15:55:00 Z

EU issues GPAI guidelines under AI Act, detailing compliance for AI model providers, effective Aug 2, 2025, with focus on transparency and risk.

UK Independent Review of the Criminal Courts – Part 1

Tue, 22 Jul 2025 12:56:00 Z

On 9 July 2025, part 1 of the Independent Review of the Criminal Courts, chaired by Sir Brian Leveson was published.

Artificial Intelligence and Abuse of Dominance in EU Law

Tue, 22 Jul 2025 11:00:00 Z

AI’s autonomy and inference abilities may complicate enforcement of EU competition law, especially under Article 102 TFEU on market dominance abuse.

Texas Enacts New AI Law

Mon, 21 Jul 2025 18:38:00 Z

On June 22, 2025, the Texas governor signed the Texas Responsible Artificial Intelligence Governance Act into law, making Texas the second state to pass comprehensive artificial intelligence regulation (with Colorado).

Another EU AI Act Milestone – Nearly Final Version of the General-Purpose AI Code of Practice Published

Wed, 16 Jul 2025 08:30:00 Z

On July 10, 2025, the European Commission released a nearly final version of the General-Purpose AI (GPAI) Code of Practice (Code) under Regulation (EU) 2024/1689 (AI Act).

AI and EU Merger Control

Tue, 15 Jul 2025 13:11:00 Z

The integration of AI into EU merger control presents challenges due to complex deal structures, limitations of revenue thresholds, and evolving regulatory responses, prompting authorities to consider new mechanisms and thresholds to ensure fair competition and effective oversight in digital markets.

PCAOB Survives and Continues to Share Guidance with Audit Committees

Fri, 11 Jul 2025 17:24:00 Z

The PCAOB remains active, highlighting audit committee insights on auditor quality, AI risks, and global economic challenges.

California AG Issues Largest Monetary Penalty in Most Recent CCPA Enforcement Action

Tue, 08 Jul 2025 14:53:00 Z

On July 1, the California Attorney General announced a $1.55 million settlement – the largest penalty issued under the California Consumer Privacy Act (CCPA) to date – with Healthline, an online health and wellness knowledge platform.

Why UK Sanctions Review Recommendations Lack Substance

Fri, 27 Jun 2025 15:15:00 Z

On 15 May 2025, the UK Government published the conclusions of its cross-government review of UK sanctions implementation and enforcement.