On July 10, 2026, New York City Department of Consumer and Worker Protection (DCWP) finalized and adopted its “Click-to-Cancel Rule,” which takes effect on Oct. 1, 2026.
Continue Reading NYC Finalizes Click-to-Cancel and Hotel Junk Fees Rules, Proposes New Junk Fees Rule
Illinois’s new Artificial Intelligence Safety Measures Act imposes governance, audit, transparency, and incident-reporting obligations on frontier AI model developers, with key compliance deadlines beginning in 2027 and 2028.
Continue Reading Illinois Enacts Artificial Intelligence Safety Measures Act
The European Commission has proposed significant amendments to the EU Data Act as part of its Digital Omnibus package, touching on cloud switching, trade secret protections, and public sector data access. While several business-friendly changes are on the table, meaningful ambiguities remain unresolved.
Continue Reading EU Digital Omnibus Package Proposes Amendments to Data Act
Recent court decisions highlight how website design, conspicuous notice, and user assent can determine whether online terms are enforceable.
Continue Reading From Click to Contract: When Courts Enforce Online Terms
Elizabeth E. Georgiopoulos, a Litigation shareholder in global law firm Greenberg Traurig, LLP’s Boston office, was named a “Go To” Lawyer for Cybersecurity/Data Privacy by Massachusetts Lawyers Weekly.
Continue Reading Elizabeth Georgiopoulos Named a Massachusetts ‘Go To’ Lawyer for Cybersecurity/Data Privacy
The UK government has published its Smart Data 2035 Strategy, setting a target of five or more active smart data schemes by 2030 and 20 or more by 2035, backed by at least £36 million in public investment over four years.
Continue Reading UK Smart Data and the Data (Use and Access) Act 2025: Considerations for Businesses
Greenberg Traurig’s Data Privacy & Cybersecurity Practice has received dual recognition in the Chambers USA 2026 Guide and The Legal 500 United States 2026, underscoring the group’s depth of experience across privacy compliance, incident response, and cybersecurity litigation.
Texas Attorney General Ken Paxton sued Discord under the Texas Deceptive Trade Practices Act, alleging false safety representations and default settings that expose minors to exploitation risks.
China’s new Automotive Data Cross-border Transfer Guidelines are most useful when read through four practical questions for industry participants: what counts as automotive data, what conduct constitutes a cross-border transfer, which transfers may now benefit from exemptions, and which categories of data remain likely to attract heightened scrutiny as important data.
Continue Reading China’s 2026 Automotive Data Cross-Border Transfer Guidelines
Drawing on lessons learned from thousands of incident responses, this GT Advisory examines the most common and consequential mistakes organizations make when responding to a data breach. From lack of preparation to missteps in customer notification, understanding these pitfalls is the first step toward a more effective response.
Continue Reading Cyber Incident Response: 10 Lessons Learned from Thousands of Breaches