Please turn JavaScript on
Alston & Bird Privacy, Cyber & Data Strategy Blog icon

Alston & Bird Privacy, Cyber & Data Strategy Blog

Is this your feed? Claim it!

Publisher:  Unclaimed!
Message frequency:  0.15 / day

Message History

On 17 September 2026, the European Data Protection Board (EDPB) published its final guidelines on the interplay between the General Data Protection Regulation (GDPR) and the Digital Services Act (DSA) (available here). While the GDPR regulates the processing of personal data, the DSA seeks to create a safer and more transparent online environment by imposing […]

The po...


Read full story

State privacy laws are increasingly regulating how businesses collect, use, share, and govern personal information in practice, not just what they say in privacy notices. Compliance challenges now extend beyond disclosures to areas such as digital advertising, sensitive data, consumer rights, data governance, and technical compliance controls. Our latest client alert highligh...


Read full story

On September 30, 2026, California Governor Gavin Newsom signed Senate Bill 574, authored by Senator Thomas Umberg, which regulates the use of generative artificial intelligence (“GenAI”) by attorneys, arbitrators, judicial officers, and alternative dispute resolution providers. The California Legislature had passed the bill unanimously on August 31, 2026. SB 574 does not proh...


Read full story

On September 29, 2026, the President met with executives of several leading artificial intelligence developers at the White House. The parties announced a voluntary framework titled “The White House Accord on Super Intelligence” (the “Accord”). Under the Accord, signatories commit to adopt internal controls for frontier AI systems, engage independent external auditors, and es...


Read full story

On September 10, 2026, the New York State Department of Financial Services (“NYDFS”) published an Industry Letter (the “Letter”) to regulated entities (“Covered Entities”) addressing what is probably the most frequently asked Part 500 question: “How to Conduct and Use Risk Assessments Required by the DFS Cybersecurity Regulation.” The risk assessment is, by all accounts, […]<...


Read full story