Every state, several federal agencies, and even territories of the United States have data breach notification statutes. The definition of what constitutes a data breach usually involves the terms “access” or “acquisition” of data. The terms have distinct meaning, but the definition of “acquisition” has slowly changed with guidance and […]
Technology & Intellectual Property Update
President Trump’s Executive Order Seeks to Guaranty Fair Banking for Americans
On August 7, President Trump signed an Executive Order (the “Order”) aimed at financial institutions and intended to prevent unlawful “debanking,” which the order defines as denying an individual access to financial services based on the individual’s constitutionally protected beliefs, affiliates, or political views. The Order requires that any decision […]
State Data Privacy Law Update – Two States Limit GLBA Exemptions
By paring back on the broad entity level GLBA exemption, Montana and Connecticut have joined California, Minnesota, and Oregon as states that do not include a broad entity level GLBA financial institution exemption within their respective consumer data privacy laws. Montana On May 8, Montana Governor Greg Gianforte signed Senate […]
Nebraska AG Sues GM and OnStar for Data Collection and Sale Practices
Earlier this month, the Nebraska Attorney General sued General Motors LLC (“GM”) and OnStar LLC (“OnStar”) for their role in collecting, processing, and selling the data of Nebraska residents without sufficient notice and consent. The suit alleges that GM collected and sold data regarding the driving habits of their customers, […]
Shopper’s Paradise or Nightmare?: The Implications of AI Shopping Agents and Agentic Payments
By now, most people are accustomed to – or at least have some familiarity with – static artificial intelligence (AI) agents such as ChatGPT and Copilot, which have seen widespread use for tasks like answering search engine questions or summarizing a meeting. However, a new AI tool is emerging that […]

