The U.S. Supreme Court has accepted review of a case taking direct aim at “overregulation” by federal administrative agencies. Any client that routinely deals with federal administrative agencies—especially those who have experienced administrative overreach—should pay attention and consider weighing in.

The EU was in the process of implementing its AI Act, first proposed on April 21, 2021, before generative AI chatbots were widely released. This Update provides a fresh look at the AI Act’s legislative status and its substantive evolution before it becomes legally effective.

The U.S. Supreme Court ruled in two related cases that federal district courts have jurisdiction to hear structural constitutional challenges to the adjudicative authority of the Federal Trade Commission and the U.S. Securities and Exchange Commission, and that litigants need not wait until the appeal of an adverse agency decision in the adjudication to raise such arguments in court.

The Federal Trade Commission announced its first enforcement of the Health Breach Notification Rule against a digital health company, a case it brought against a company that shared user health data with third-party advertising platforms without the authorization of the affected users. This case signals the importance for digital health companies, whether or not covered by the Health Insurance Portability Accountability Act, of treating personal health information as sensitive and regulated by the HBNR and other FTC-enforced laws.

The European Commission released a draft adequacy decision approving the new EU-U.S. data privacy framework established in part by President Biden's Executive Order 14086.

After more than two years of litigation, Amazon and Microsoft won summary judgment in two class action lawsuits asserting violations of the Illinois Biometric Information Privacy Act (BIPA): Vance v. Amazon.com, Inc., Case No. C20-1084JLR and Vance v. Microsoft Corp., Case No. C20-1082JLR.

After a five-day trial and only an hour of deliberation, the nation’s first trial under the Illinois Biometric Information Privacy Act ended with a bang. The jury found that the defendant recklessly or intentionally violated BIPA 45,600 times resulting in a $228 million judgment.

The Federal Trade Commission filed a lawsuit on August 29, 2022, against data broker Kochava Inc., alleging that the company’s sale of precise geolocation data is an unfair act or practice that violates Section 5 of the FTC Act.

The Federal Trade Commission released an advance notice of proposed rulemaking on “Commercial Surveillance and Data Security” on August 11, 2022. The ANPRM, approved on a 3-2 party line vote, is the initial step in a process that could result in the adoption of the first federal regulation addressing privacy, data security, and algorithmic discrimination across broad sectors of the U.S. economy.

In its most recent open meeting, the Federal Trade Commission (FTC) unanimously (1) issued a COPPA policy statement directed at ed tech providers and (2) proposed amendments to the Endorsement Guides, which address influencer advertising on social media and consumer reviews.

Alvaro Bedoya was sworn in as a commissioner of the U.S. Federal Trade Commission (FTC) on May 16, 2022.

The Chinese Ministry of Industry and Information Technology (MIIT), together with other agencies in the Chinese government, launched a series of campaigns for the rectification of excessive personal information processing activities of mobile application developers, operators, and third-party service providers. Drawing on the insights from these campaigns, the MIIT, the Cyberspace Administration of China, the Ministry of Public Security, and the State Administration for Market Regulation jointly released the draft Interim Regulations on the Administration of Personal Information Protection for Mobile Internet Applications.

The Perkins Coie New York Digital Media & Entertainment, Gaming & Sports industry group celebrated Asian American and Pacific Islander Heritage Month with a fireside chat.