Data Privacy & Cybersecurity

On Oct. 28, 2025, please join Greenberg Traurig and leaders from its Chambers USA Band 1 Retail Industry Group and Privacy & Cybersecurity Practice, along with a legal director from Scott’s Company LLC, for a CLE exploring the evolving landscape of data privacy and security laws and their impact on in-house legal teams.

This expert

Greenberg Traurig’s 2025 Data Privacy Symposium in Chicago gathered more than 100 professionals for interactive sessions exploring the latest in data privacy, cybersecurity, and technology. Expert speakers led conversations on AI, AdTech, breach response, privacy litigation, and more, while attendees enjoyed networking opportunities at a lively reception and dinner.


Continue Reading Highlights from the Data Privacy Symposium 2025

On May 31, 2025, the Texas Legislature passed House Bill 149, the Texas Responsible Artificial Intelligence Governance Act (TRAIGA). TRAIGA sets forth disclosure requirements for government entity AI developers and deployers, outlines prohibited uses of AI, and establishes civil penalties for violations. On June 2, 2025, the bill was sent to the governor of Texas for review and signed into law on June 22.

Continue Reading TRAIGA: Key Provisions of Texas’ New Artificial Intelligence Governance Act

Greenberg Traurig’s Data Privacy & Cybersecurity Practice is recognized in The Legal 500 United States 2025 edition for Media, technology and telecoms> Cyber law (including data privacy and data protection). The group is praised as “a large, highly qualified, geographically-dispersed team” that supports clients across industries including e-commerce, financial services, health care, retail, and

On Jan. 17, 2025, EU Regulation 2022/2554 on digital operational resilience for the financial sector (DORA) became applicable in the EU.

DORA focusses on risk management and resilience testing, with a strong focus on vendor risk management, incident management and reporting, and resilience testing of key systems.

DORA applies to financial institutions that are authorized

Six months after the SEC’s Cybersecurity Incident Disclosure Rule (SEC Rule) came into force, an April 2024 GT Alert summarized disclosure trends. The GT Alert identified that the companies who filed a mandatory form 8-K disclosing a cybersecurity incident had erred on the side of caution, hedged on whether the materiality threshold had been met