On December 24, New York Gov. Kathy Hochul (D) signed into law an amendment to section 899-aa of the N.Y. General Business Law, also known as The Shield Act, modifying the law’s data breach notification requirements. Continue Reading ›
In a significant move to regulate the growing impact of artificial intelligence, Oregon lawmakers recently passed Senate Bill 1571, requiring campaigns to disclose when they use AI to manipulate audio or video images, including deepfakes, to influence voters. Although SB 1571 applies only to political campaigns, the Attorney General has issued guidance that may be helpful to businesses seeking to minimize their legal risks in connection with the use of AI. Continue Reading ›
Just in time for setting a new year’s resolution, the New York Senate passed health privacy bill S-929. This bill was first introduced during the 2024 legislative session but failed to pass. Now in the early weeks of 2025, S-929 has passed without any changes since 2024. The bill will now move to the Assembly Codes and Science & Technology Committees for further consideration. Continue Reading ›
The Constangy Cyber Team continues to grow with the addition of five outstanding new attorneys, allowing us to quickly and effectively respond to our clients' data privacy and cybersecurity needs. Please join us in welcoming Ryan Steidl, Lindsey Smith, Rob Yang, Matthew Basilotto, and Seth Greenwald to the Constangy Cyber Team. Each brings a wealth of knowledge and experience, underscoring our commitment to providing top-tier legal counsel. Continue Reading ›
Tomorrow is International Data Privacy Day, so a happy day to all! Continue Reading ›
The California Privacy Protection Agency released proposed regulations in November 2024 that will, if finalized, create significant new hurdles for employers using artificial intelligence to assist with a variety of employment decisions. Continue Reading ›
Some FAQs about the law and the litigation that has ensued. Continue Reading ›
The NJ Data Privacy Act takes effect tomorrow. Continue Reading ›
A Written Information Security Plan, or “WISP,” is essential for any organization that handles sensitive personal information. Here’s a quick breakdown of who needs a WISP and why, as well as a checklist to develop one: Continue Reading ›
Amid the continued wave of consumer class action lawsuits targeting the use of cookies, pixels, beacons, and other tracking tools on organizations’ websites, a recent decision from the Massachusetts Supreme Judicial Court departed from other jurisdictions by holding that the state’s wiretap act did not apply to the use of these emerging technologies. Continue Reading ›
The Constangy Cyber Advisor posts regular updates on legislative developments, data privacy, and information security trends. Our blog posts are informed through the Constangy Cyber Team's experience managing thousands of data breaches, providing robust compliance advisory services, and consultation on complex data privacy and security litigation.










