Hearings on the merits of the Drug Enforcement Agency’s (DEA) proposed cannabis rescheduling, initially set to begin this month, have been cancelled. The preliminary hearing period has been littered with accusations that the DEA improperly excluded certain parties from participating, that the DEA itself does not adequately support rescheduling, and that the DEA engaged in improper ex parte communications with anti-rescheduling parties.

On January 7, the U.S. Court of Appeals for the Fourth Circuit found that Virginia’s hemp product restrictions do not violate federal law. The ruling is the latest defeat for the Virginia hemp industry’s efforts to overturn Virginia S.B. 903, a law intended to prohibit the sale of intoxicating hemp products like delta-8 and delta-10 tetrahydrocannabinol (THC) gummies and beverages in the Commonwealth.

The U.S. Supreme Court closed out 2024 by confirming states’ authority to regulate internet service providers. On December 16, 2024, the Court denied certiorari in New York State Telecommunications Association, Inc., et al. v. Attorney General Letitia James, Case No. 21-1975, allowing New York’s Affordable Broadband Act (ABA) to stand.

On January 6, the Department of Health and Human Services (HHS) Office for Civil Rights (OCR) published significant proposed amendments (proposed rule) to the Security Rule under the Health Insurance Portability and Accountability Act of 1996 (HIPAA). Key drivers for the proposed rule include the dramatic increase in cyberattacks, including ransomware, the rapid adoption of cloud computing, mobile devices, and other technologies, and inconsistent compliance with the existing Security Rule identified by the OCR’s investigations.

As one of her last acts in office, on December 24, 2024, Oregon Attorney General (AG) Ellen Rosenblum issued guidance for businesses deploying artificial intelligence (AI) technologies. The guidance highlights the risks associated with the commercial use of AI, and underscores that, despite the absence of a specific AI law in Oregon, a company’s use of AI must still comply with existing laws.

On December 17, 2024, Iowans for Alternatives to Smoking & Tobacco, Inc., Global Source Distribution, LLC, and others filed a complaint[1] and motion for a preliminary injunction[2] in federal district court against the Iowa Department of Revenue (the Department) challenging Iowa House File 2677 (HF 2677), a law imposing certification and directory requirements on vapor products sold in Iowa. A hearing on the plaintiffs’ motion for a preliminary injunction is scheduled for March 5. If the court rules in the plaintiffs’ favor, it could stay enforcement of the new law until the case is ultimately resolved. While the Department was previously scheduled to publish the vapor products directory on January 2 and begin enforcement on February 3, the Department has not published the directory, and its website indicates that it will not be enforcing the directory. The Department’s website states: “Publication and enforcement of Iowa’s vapor products directory is delayed until further notice. The Department will make an additional announcement before publication and enforcement of the vapor products directory begins. During the delay, manufacturers should continue to submit certification applications.”