Privacy & Information Security Law Blog

On April 10, 2025, the U.S. Senate confirmed Mark Meador as the newest Commissioner of the Federal Trade Commission. Meador was nominated on January 20, 2025, by President Donald J. Trump, and his term will expire on September 25, 2031.

The California Privacy Protection Agency recently released modified draft regulations in response to public feedback on its proposed updates to the California Consumer Privacy Act regulations.

On April 8, 2025, the Department of Justice’s Final Rule restricting the bulk transfer of sensitive U.S. personal and government data to certain countries and persons of concern went into effect.

The Centre for Information Policy Leadership at Hunton recently released a white paper on Privacy-Enhancing and Privacy-Preserving Technologies in AI: Enabling Data Use and Operationalizing Privacy by Design and Default. CIPL is hosting a webinar on the key themes of the Paper on April 29, 2025.

On April 1, 2025, the UK government published the Cyber Security and Resilience Policy Statement, which details the UK government’s legislative proposals for the Cyber Security and Resilience Bill.

On March 24, 2025, the U.S. National Institute of Standards and Technology published a report titled “Adversarial Machine Learning: A Taxonomy and Terminology of Attacks and Mitigations.”

On March 27, 2025, the Information Commissioner's Office announced that it had issued a fine against Advanced Computer Software Group for £3.07 million for non-compliance with security rules identified through an investigation following a ransomware attack.

On March 28, 2025, the Cyberspace Administration of China issued draft amendments to the Cybersecurity Law for public comment.

On March 27, 2025, the Federal Trade Commission announced that it had reached a $17 million settlement with Cleo AI, Inc., an online cash advance company, over alleged deceptive representations regarding the company’s services and subscription cancellation process.

Update: On April 2, 2025, the Virginia legislature declined to adopt Governor Youngkin’s amendments to S.B. 854, and returned the bill back to the Governor for consideration.

On March 24, 2025, Virginia Governor Glenn Youngkin asked the Virginia state legislature to strengthen the protections provided in a bill passed by the legislature earlier this month that imposes significant restrictions on minors’ social media use.