Insights
Search Results
Client Highlights
9.14.26
Wilson Sonsini Advises Xapien on $56 Million Series B
On September 11, 2026, Xapien, an AI-native due diligence platform, announced a $56 million Series B investment round led by Spectrum Equity, with continued support from existing investor YFM Equity Partners. Wilson Sonsini Goodrich & Rosati advised Xapien on the transaction.
Podcasts
9.08.26
The Intersection of Law, Technology, and Business Risk
What happens when data privacy, AI, law, and risk management collide? In this episode of BDO's Legal Tech Talk, Daniel Gold and Eric Derk talk with Tamara Lemmon of Wilson Sonsini to explore why proactive planning is becoming one of the most important competitive advantages in legal and compliance teams.
Alerts
8.18.26
CalPrivacy Authorizes Rulemaking on Opt-Out Signals, Raises Data Broker Fees, and Starts the Clock on DROP Amendment Comment Period
At its August 6–7, 2026, board meetings, the California Privacy Protection Agency (CalPrivacy) Board directed staff to prepare formal rulemaking to name Global Privacy Control (GPC) in the California Consumer Privacy Act (CCPA) regulations and tighten how opt-out preference signals must be honored. It also advanced separate rulemaking on data broker deletion audits and Delete Request and Opt-out Platform (DROP) rule amendments. Finally, the Board raised annual data broker registration and DROP access fees from $6,000 to $9,500 for 2027 and previewed its audit program.
News Articles
8.17.26
Lexology Pro Quotes Cédric Burton and Laura Brodahl on EU's Cyber Resilience Act Requirements
While the bulk of the EU Cyber Resilience Act's (CRA's) requirements won't take effect until December 2027, the reporting duty takes effect earlier, on September 11, 2026. Under this duty, affected companies must notify authorities and, in some cases, users, of any actively exploited vulnerabilities or severe incidents affecting their products within 24 hours of becoming aware. Wilson Sonsini attorneys Cédric Burton and Laura Brodahl weighed in on the practical implications for companies in Lexology Pro's recent article "Organisations Must Prepare for Mandatory 24-Hour Reporting Under EU Cyber Resilience Act," offering steps companies can take now to prepare.
Case Studies
8.14.26
How Wilson Sonsini Helped Soleno Therapeutics Position Itself as an Attractive Acquisition Target
Soleno Therapeutics, a Neurocrine Biosciences company, focuses on the treatment of rare diseases by identifying, developing, and commercializing novel therapeutics. Its lead commercial program addresses Prader-Willi syndrome (PWS), which occurs in approximately one in every 15,000 live births. One of the common symptoms of PWS is hyperphagia, a chronic and life-threatening condition characterized by an intense, persistent sensation of hunger.
Alerts
8.07.26
Ninth Circuit Addresses CFAA and Agentic AI Tools in Groundbreaking Decision
On August 4, 2026, the U.S. Court of Appeals for the Ninth Circuit issued a groundbreaking decision in Amazon.com Services, LLC v. Perplexity AI, addressing the legal status of so-called “agentic AI” tools, which help users expedite various online tasks, including buying goods and services. The Ninth Circuit vacated a preliminary injunction that had barred the AI company Perplexity from enabling users of its Comet Browser’s AI assistant feature to access the Amazon Store. In so doing, it became the first circuit to weigh in on the intersection between agentic AI and federal laws—specifically the Computer Fraud and Abuse Act (CFAA), which prohibits unauthorized access to protected computer systems.
Alerts
8.03.26
EU AI Act Enforcement Phase Begins
On August 2, 2026, the European Commission (EC), acting through its European AI Office (EU AI Office), became formally entitled to exercise its powers to investigate and enforce the EU AI Act obligations imposed on providers of general-purpose artificial intelligence (GPAI) models, as well as rules on prohibited AI practices. These powers are significant and include requesting information and documentation, obtaining access to models for evaluation, requiring corrective or risk-mitigation measures, and imposing fines of up to the higher of €15 million or 3 percent of the provider’s worldwide annual turnover.
Client Highlights
7.20.26
Wilson Sonsini Advises Straiker on Series A
On June 29, 2026, Straiker, an agentic security company, announced the completion of its Series A round, bringing its total funding to $85 million. The financing was led by Marathon Management Partners, Citi Ventures, Illuminate Financial, and Workday Ventures, with continued support from Bain Capital Ventures and Lightspeed. Other investors include GTM Capital, Rain Capital, Neva SGR, Firebolt Ventures, and Sixty Degree Ventures. Wilson Sonsini Goodrich & Rosati advised Straiker on the transaction.
Alerts
7.17.26
Illinois Enacts AI Safety and Transparency Law for Frontier AI Developers
On July 6, 2026, Illinois Governor JB Pritzker signed into law Senate Bill 315, the Artificial Intelligence Safety Measures Act (AISMA), which will require large AI developers to publicly disclose how they plan to mitigate potentially “catastrophic risks” posed by advanced frontier AI models. In a first for a U.S. state AI law, AISMA also requires covered entities to retain independent auditors to assess their compliance. The Illinois legislature otherwise largely modeled AISMA after California’s Transparency in Frontier Artificial Intelligence Act (TFAIA) (discussed in a prior alert) and New York’s Responsible AI Safety and Education Act (RAISE Act). AISMA’s provisions will become effective in two waves, with most provisions effective January 1, 2027, and AI framework and independent audit provisions effective January 1, 2028.
Alerts
7.14.26
EU Commission Publishes AI Transparency Code of Practice
On June 10, 2026, the European Commission published a Code of Practice on marking and labeling of AI-generated content (the Code) following a public consultation that took place last year. The Code is divided into two sections:
Alerts
7.10.26
The FTC After Slaughter: What Businesses Need to Understand
On June 29, 2026, the U.S. Supreme Court issued its opinion in Trump v. Slaughter, where the six-Justice majority held that appointed agency officials who wield executive power are subject to presidential removal. In so holding, the Court overruled its 1935 decision in Humphrey’s Executor v. United States, 295 U.S. 602 (1935), which for nearly a century stood for the principle that Congress can create independent agencies whose leaders can only be removed for cause.
Alerts
7.08.26
SCOTUS Ruling Calls into Question EU-U.S. Personal Data Flows
On June 29, 2026, the Supreme Court of the U.S. (SCOTUS) held in Trump v. Slaughter that the U.S. President can dismiss members of the Federal Trade Commission (FTC) at will, rather than only for cause, overruling existing precedent regarding independent agencies. This decision of domestic constitutional law could also change the rules governing transfer of personal data from the European Economic Area (EEA, which includes the 27 European Union countries plus Iceland, Liechtenstein, and Norway) to the U.S.