July 2025

This Client Alert is a monthly update on privacy and cybersecurity developments as posted on our Privacy & Information Security Law Blog. If you would like to receive email alerts when new posts are published, please visit our blog and enter your email address in the subscribe field.

• China Issues a Notice on DPO Reporting Requirements
• Nebraska Attorney General Sues GM and OnStar Over Alleged Privacy Violations
• The PRC Amends its Anti-Unfair Competition Law, Impacting AI Compliance
• CPPA Finalizes CCPA Regulations on Automated Decision-Making Technology, Risk Assessments and Cybersecurity Audits
• Trump Administration Issues AI Action Plan and AI Executive Orders
• European Commission Launches New Adequacy Decision Process for the UK
• European Commission Issues Guidelines on the Protection of Minors
• Texas Enacts Electronic Health Record Data Localization Law
• OCR Reaches HIPAA Settlement with Behavioral Health Care Provider Over Alleged HIPAA Security Rule Violations
• CPPA to Hold Board Meeting on Proposed CCPA Regulations and DROP Requirements
• European Commission Publishes General-Purpose AI Code of Practice
• Connecticut Attorney General Announces First Settlement under Connecticut Data Privacy Act
• UK ICO Launches Consultations on Advertising and the Use of Cookies
• New York Passes the Responsible AI Safety and Education Act
• EDPB to Make Available New Tools and Undertake Initiatives to Facilitate and Simplify Compliance with the GDPR
• California AG Reaches Record $1.55 Million Settlement with Healthline.com for Alleged CCPA Violations
• U.S. Supreme Court Upholds Adult Entertainment Website Age Verification Law
• SEC and SolarWinds Seek Settlement in Securities Fraud Case
• Chile Cybersecurity Framework Law Now Fully Enforceable