Insights
Search Results
Alerts
6.05.26
Connecticut Updates Its Data Privacy Act, Imposing Significant New Privacy Requirements
Last month, the Connecticut legislature passed two bills that amend and expand the Connecticut Data Privacy Act (CTDPA): Senate Bill 4 (SB 4) and House Bill 5222 (HB 5222). SB 4 (which was signed into law on May 27, 2026) and HB 5222 (which amends parts of SB 4 and was signed into law on June 2, 2026) contain new requirements for businesses and data brokers operating in the Constitution State.
Alerts
5.19.26
Colorado Legislature Repeals and Replaces Colorado AI Act: What SB 189 Means for Your Business
On May 14, 2026, Colorado Governor Jared Polis signed SB 189 into law, which repeals and replaces the Colorado Artificial Intelligence Act (CAIA). SB 189 goes into effect on January 1, 2027.
News Articles
5.08.26
Wilson Sonsini Attorneys Named to 2026 Lawdragon Leading Global Cyber Lawyers Guide
On May 8, 2026, Lawdragon announced its 2026 Lawdragon 500 Leading Global Cyber Lawyers guide, recognizing world leaders in privacy, data, security, and incident response, as well as the deals and lawsuits that revolve around all things cyber. The Wilson Sonsini attorneys named to the list included:
Alerts
2.13.26
South Carolina Becomes Fifth State to Enact Age-Appropriate Design Code Law
On February 5, 2026, South Carolina Governor Henry McMaster signed H. 3431, Age-Appropriate Code Design (SC AACD) into law, becoming the fifth state to enact an age-appropriate design code law after California, Maryland, Nebraska, and Vermont.1 The law, which went into immediate effect upon the governor’s signature, adds to the steadily increasing patchwork of teens’ and children’s online safety legislation in the U.S. Notably, covered online services are liable for treble damages incurred as result of a violation of the statute. Further, officers and employees may be held personally liable for “wil[l]ful and wanton” violations of the SC AACD. The law is already facing a legal challenge by a trade association.
News Articles
12.18.25
Wilson Sonsini Named Among Global Elite in Lexology 100: Data 2026
On December 18, 2025, Lexology published the 2026 edition of the Lexology 100: Data 2026 (formerly GDR 100), a global ranking that captures the capabilities, track record, and market reputation of the top 100 leading law firms in the field. Wilson Sonsini Goodrich & Rosati has been ranked No. 13 overall among the “Global Elite,” a shortlist of the top 25 firms recognized for market-leading expertise. Wilson Sonsini also placed No. 2 for advisory work, No. 4 for investigations, and No. 10 for litigation.
Alerts
10.16.25
California Enacts Nearly a Dozen Key Privacy and AI Bills into Law
On October 13, 2025, California concluded a busy legislative term by enacting a slew of key privacy and AI-related bills, aimed at enhancing consumer protection and regulating emerging AI technology applications. These measures address a range of critical issues, including consumer opt-out signals, data broker transparency requirements, age assurance, minors’ safety, companion chatbots, and AI development. We summarize some of the most significant of these privacy and AI bills that were signed into law by California Governor Gavin Newsom, below.
Alerts
9.10.25
State AGs Unveil Investigation Sweep Targeting Businesses Ignoring Consumer Opt-Out Signals
On September 9, 2025, the attorneys general of California, Colorado, and Connecticut and the California Privacy Protection Agency (CPPA) announced a joint investigative sweep of potential failures by businesses to honor consumers’ rights to opt out of the sale and sharing of their personal information and targeted advertising under state comprehensive privacy laws. Notably, the sweep takes specific aim at whether companies are fulfilling consumer opt out requests sent via Global Privacy Control (GPC) signals.
Alerts
9.04.25
U.S. Federal Court Allows CIPA Class Action Against AI Customer Service Provider to Proceed
On August 11, 2025, the U.S. District Court for the Northern District of California denied a motion to dismiss a California Invasion of Privacy Act (CIPA) class action lawsuit filed against ConverseNow Technologies, Inc.
Alerts
7.30.25
CPPA Approves New CCPA Regulations on AI, Cybersecurity, and Risk Governance, and Advances Updated Data Broker Regulations
On July 24, 2025, the California Privacy Protection Agency (CPPA) Board voted to approve a long-awaited rulemaking package imposing substantial new compliance obligations on businesses subject to the California Consumer Privacy Act (CCPA). The package contains finalized rules on AI-related, automated decision-making technologies (ADMT), cybersecurity audits, and risk assessments, as well as updates to existing CCPA regulations. These regulations will impact a broad swath of businesses handling personal information of California residents.
Alerts
7.03.25
Texas District Court Vacates 2024 HIPAA Rule Designed to Enhance Reproductive Healthcare Privacy, Effective Nationwide
On June 18, 2025, the United States District Court for the Northern District of Texas vacated most of the rules designed to enhance reproductive healthcare privacy promulgated by the U.S. Department of Health and Human Services (HHS) in 2024. More specifically, the court ruled in Purl v. United States Department of Health and Human Services et al, No. 2:2024cv00228 (N.D. Tex. 2025) (the Decision) that the “Health Insurance Portability and Accountability Act Privacy Rule to Support Reproductive Health Care Privacy” (the “2024 HIPAA Rule”) is contrary to law because it unlawfully limits state public health laws; impermissibly redefines certain terms in contravention of federal law and in excess of statutory authority; and exceeds HHS’s authority. Regulations promulgated under HIPAA prior to the 2024 HIPAA Rule remain unchanged.