Key points: Troutman Pepper Locke’s Regulatory Investigations, Strategy + Enforcement (RISE) and Privacy + Cyber + AI practice groups worked with the firm’s innovation team using AI to collect and curate five years of data concerning state AG activities and actions related to privacy, security, and AI. This Regulatory Intelligence offering provides firm clients…

On July 7, a bipartisan coalition of 49 state attorneys general (AGs) sent a letter to the Federal Communications Commission (FCC) urging the adoption of stronger measures to combat illegal robocalls. The letter represents another action by the state AGs’ Anti-Robocall Multistate Litigation Task Force, which was established in 2022 to crack down on illegal robocalls.

  • DoD suspended CMMC Phase II on July 13, 2026, halting the November 10, 2026, deadline and all related implementation milestones pending a comprehensive reform review by a newly established CMMC Reform Task Force. 
  • CMMC Level 2 (C3PAO) and Level 3 (DIBCAC) third-party assessment requirements are suspended, and active solicitations and contracts must be
…

In this episode of Regulatory Oversight, host Stephen Piepgrass sits down with colleagues Dave Navetta and Dan Waltz to explore how state AG enforcement is accelerating across privacy, cybersecurity, and artificial intelligence, and to introduce Troutman Pepper Locke’s AI-fueled Regulatory Intelligence Platform.

Published in Law360 on July 10, 2026. © Copyright 2026, Portfolio Media, Inc., publisher of Law360. Reprinted here with permission.

For the recipient of a subpoena from a state attorney general or other state regulator, the prospect of successfully blocking the subpoena through litigation can seem dim.

On July 7, the U.S. Securities and Exchange Commission (SEC) announced the creation of a new Retail Fraud Working Group within its Division of Enforcement. The initiative represents a structural expansion of the SEC’s enforcement capabilities and has direct implications for broker-dealers, investment advisers, and other regulated entities that serve retail clients. This is consistent with prior statements made by SEC Chairman Paul S. Atkins about focusing the SEC’s Division of Enforcement on protecting retail investors.

In this episode of Payments Pros, host Keith Barnett examines a recent FTC enforcement action involving alleged violations of the FTC Act and ROSCA. Keith discusses the FTC’s continued focus on negative option features, automatic renewals, subscription disclosures, free trial conversions, and cancellation practices, and explains why these issues remain important for companies operating in the payments ecosystem. He walks through the FTC’s allegations regarding insufficient disclosure of key subscription terms, including automatic renewal provisions and early cancellation fees, as well as concerns about burdensome cancellation processes for consumers. Keith also highlights how the action reflects a broader enforcement trend, with the FTC remaining active in the payments space despite increased attention on changes at the CFPB. The episode closes with practical takeaways for businesses, including the importance of clear disclosures, simple cancellation mechanisms, and careful internal communications regarding subscription and billing practices.

On June 30, 2026, New Jersey enacted legislation A5328 (P.L.2026, c.25), which will expose a broad swath of U.S. companies to data broker registration fees ranging from $5,000 to $1.5 million annually. The new legislation is not limited to data brokers in the conventional sense. It applies generally to any company that sells or licenses personal data of New Jersey residents, including those with direct customer relationships. Much of the law takes effect immediately, so companies should begin reviewing the requirements now to comply.

On June 26, 2026, Florida Attorney General (AG) James Uthmeier and Roku, Inc. announced a negotiated resolution of Florida’s enforcement action filed under the Florida Digital Bill of Rights (FDBR). Under the agreement, Roku will enhance its child protection features by giving parents greater control over their children’s streaming experience. The resolution includes no finding of wrongdoing and no civil fine.