Dear Mary,

Each of the 50 states has its own definition of what constitutes a reportable data breach. For some, it requires “unauthorized access” to personal information. For others, it requires “unauthorized acquisition.” And then, some states have further qualifications to their definition, such as whether that unauthorized access or acquisition “compromises” or “materially compromises” the integrity, security, or confidentiality of the data. No states (apart from New York) define access or acquisition, and no state defines compromise vs. material compromise. How would you suggest analyzing all these varying terms?

– PatchworkContinue Reading Understanding Access vs. Acquisition

In 2024, the landscape of state attorneys general (AGs) is poised for significant change, with numerous elections and regulatory actions reshaping priorities and enforcement strategies. This dynamic environment reflects the critical role AGs play in addressing key issues across various sectors, from environmental regulations and consumer protection to health care and privacy. As state AGs continue to influence policy and legal frameworks, their actions will have far-reaching implications for businesses and consumers alike. Troutman Pepper’s State AG team is pleased to provide you with this mid-year review summarizing the activities in this regulatory space over the past six months.Continue Reading 2024 Mid-Year Review: State AGs Shaping Regulatory Landscapes

The Circuit Court of Cleburne County, Arkansas, denied TikTok and its parent company ByteDance’s motion to dismiss a lawsuit brought by Arkansas Attorney General Tim Griffin. In the complaint, the AG alleges that TikTok engages in deceptive trade practices and has unjustly profited from the data of minors.Continue Reading Court Permits Arkansas Attorney General’s Lawsuit Against TikTok to Proceed

On May 17, 2024, Colorado Governor Jared Polis signed into law Senate Bill 24-205, the Colorado Artificial Intelligence (AI) Act, making Colorado the first U.S. state to enact comprehensive legislation regulating the use and development of AI systems. The act is designed to regulate the private-sector use of AI systems, particularly addressing the risk of algorithmic discrimination arising from the use of so-called “high-risk AI systems.” The law will take effect on February 1, 2026, and the Colorado attorney general (AG) has exclusive enforcement authority.Continue Reading Colorado Enacts Groundbreaking Artificial Intelligence Act

State attorneys general (AGs) have increased their scrutiny of the use of artificial intelligence (AI), particularly in relation to data privacy laws, consumer protection statutes, and anti-discrimination laws. Our state AG team has issued a new white paper examining this trend, including a detailed look at the recent advisory opinion issued by the Massachusetts AG’s office, which provides guidance on how existing laws apply to AI. Understanding the potential legal implications of AI use is important to any consumer-facing business, include private equity firms and other investors.Continue Reading AGs Focus on AI Has Implications for Private Equity Investors

On May 8, attorneys general (AG) from 14 states and the District of Columbia sent a letter to Congressional leadership opposing provisions of the recently proposed federal American Privacy Rights Act (APRA). In addition to the District of Columbia, the signatory states include California, Connecticut, Delaware, Hawaii, Illinois, Maine, Massachusetts, Maryland, Minnesota, Nevada, New York, Oregon, Pennsylvania, and Vermont. Their objections primarily center on the APRA’s preemption clause, which would nullify 16 state comprehensive data privacy laws that have been enacted since 2018.Continue Reading State AG Coalition Opposes Current Federal Privacy Legislation

Massachusetts Attorney General (AG) Andrea Joy Campbell issued an advisory to provide guidance on how state consumer protection, anti-discrimination, and data security laws apply to artificial intelligence (AI). The advisory emphasizes that these existing laws apply to emerging technology, including AI systems.Continue Reading Massachusetts AG Issues Advisory on AI and Consumer Protection Laws

On February 16, the Federal Communications Commission (FCC) made a significant move to combat consumers’ receipt of unwanted communications. The Telephone Consumer Protection Act (TCPA) already regulates automated calls and texts absent an exemption or the prior express consent of the called party. The FCC has now adopted new measures aimed at empowering consumers with the option to further prevent automated calls and texts.Continue Reading FCC Establishes New Rules to Enhance Consumer Control Over Automated Calls and Texts

This article was originally published on September 18, 2023 in Westlaw Today and is republished here with permission.

Ketan Bhirud, Drew Mann and Trey Smith of Troutman Pepper discuss the Federal Trade Commission’s role in competition enforcement, contextualize the FTC’s analysis of the generative AI industry and provide key takeaways for stakeholders to consider during a period of regulatory uncertainty.Continue Reading Addressing Competition Concerns in the Developing Generative AI Industry: Key Insights From the FTC’s Analysis