California has enacted SB 947, the No Robo Bosses Act. It adds new Labor Code requirements for employers that use automated decision systems (ADS) to make disciplinary and termination decisions, and it takes effect July 1, 2027. Importantly, the No Robo Bosses Act makes clear that the California Consumer Privacy Act (CCPA) also must be taken into account when
Latest from Workplace Privacy, Data Management & Security Report
California Limits Private Lawsuits Over Certain Online Tracking Claims
California has enacted Senate Bill (SB) 690, which narrows the circumstances under which private parties may bring lawsuits under the California Invasion of Privacy Act (CIPA), Cal. Penal Code Section 638.51.
The new law takes effect January 1, 2027, and notably includes a two-year look-back period for pending lawsuits commenced before the law was enacted.
Brief History
CIPA, enacted
ID Verification, Voiceprints, Vendors, and BIPA: When the Financial Services Exemption Does Not Apply
A recent Seventh Circuit decision offers a reminder to exercise caution when applying the financial services safe harbor under the Illinois Biometric Information Privacy Act (BIPA). In Cisneros v. Nuance Communications, Inc., No. 24-02982 (7th Cir. Aug. 28, 2026), the court held that the technology vendor’s storing of voiceprint data on behalf of a broker-dealer in securities fell within
AI On The Loose: What the Latest Cyber Incidents Mean for Your Organization
AI is accelerating cybersecurity threats. Learn how data minimization, incident response, data mapping, and vendor governance can help reduce risk.
Recent reports involving leading artificial intelligence (AI) developers have heightened concern about whether AI agents can operate beyond their intended boundaries and/or be used by cyber criminals to perpetuate attacks that are more difficult to prevent and contain. For organizations
TRAIGA: Texas’s New AI Law Now in Effect
On January 1, 2026, Texas’s newest law addressing the growing issues of data privacy and the use of Artificial Intelligence went into effect. The Texas Responsible Artificial Intelligence Governance Act (TRAIGA) was passed by the 89th Texas Legislature and signed into law by Gov. Greg Abbott in 2025.
The law’s central focus is on restricting and regulating the use of
Facial Recognition and AI in Hiring: A Reminder for Maryland Employers
As AI-powered hiring tools become more widespread, it is important to remember that some states have acted early and their laws should be reflected in an organization’s governance, risk, and compliance program. Maryland’s Labor and Employment Code Section 3-717 which became effective October 1, 2020, is one example. We break down the key requirements and highlight multistate considerations.
Q: Who
Delaware Consumer Privacy and Data-Breach Law Updates
On September 2, 2026, Delaware’s Governor signed House Bill (HB) 380 and HB 381. HB 380 amends the Delaware Personal Data Privacy Act (DPDPA), which was enacted in 2023 and became effective January 1, 2025. HB 381 separately amends Delaware’s computer security breach notification law.
In short, what changes were made to the Delaware privacy and data-breach laws?
Deadline Imminent for Connecticut’s Expanded Electronic Monitoring Law
On June 4, 2026, Connecticut Governor Ned Lamont signed Public Act No. 26-73 (SB 472), “An Act Concerning the Electronic Surveillance of Employees,” which repeals and replaces Conn. Gen. Stat. § 31-48d. The law takes effect October 1, 2026, and significantly updates Connecticut’s longstanding requirements governing electronic monitoring of employees by employers.
Connecticut has regulated workplace electronic monitoring
AI-Powered Sextortion: A Growing Threat Your Workforce Needs to Know About
A family’s ordinary afternoon was shattered when an unknown number added multiple relatives, including a teenager, to a group chat and shared what appeared to be AI-generated explicit images of a family member, the Wall Street Journal (WSJ) reported. The goal was simple: to extort money by threatening to release the images more widely. The scheme was sophisticated, leveraging
Cybersecurity Coalition Calls for Collective Action as AI Changes the Threat Landscape
A broad coalition of artificial intelligence developers, cybersecurity companies, financial institutions, technology providers, and other organizations has issued an open letter calling for a coordinated effort to strengthen cyber defenses.
“We have a limited window to strengthen cyber defenses.”
The letter warns that AI-enabled cyberattacks have become more widespread and sophisticated. At the same time, it argues that advances