The current statistics on how many people upload their medical information into a generative AI tool are staggering. It is clear to me that people are unaware of the risks of doing so, and if you are contemplating sharing your medical information with a generative AI tool, like ChatGPT, Gemini or Claude, please read this
CCPA Cybersecurity Audits Are Coming: What Companies Should Do Now
The California Consumer Privacy Act’s (CCPA) cybersecurity audit requirement marks a significant shift in privacy and security accountability. Beginning January 1, 2027, covered businesses will need to complete annual, independent, evidence-backed cybersecurity audits showing that their privacy and security controls are not only designed appropriately, but operating effectively over time. For many companies, this will…
Data Brokers Beware: California Settlement Highlights Risks in High-Friction Opt-Out Processes
California’s privacy regulator just sent a clear message to the data broker ecosystem: compliance failures will be viewed across both the California Consumer Privacy Act (CCPA) and the Delete Act. The California Privacy Protection Agency (CPPA) announced a $116,490 settlement with LocateSmarter LLC, an Iowa-based company that allegedly operated as a data broker without registering…
Philadelphia Casino Data Breach: Some Claims Win, Others Lose
By Roma Patel
A recent federal decision shows how data-breach claims can turn on the connection between the exposed information and the alleged harm. In Volio v. Sugarhouse HSP Gaming, L.P., No. 2:25-cv-00039 (E.D.Pa. Aug. 7, 2026), current and former employees and casino patrons sued after Rivers Casino Philadelphia allegedly discovered unauthorized access to its network and…
Gunra Ransomware Group Hitting Multiple Sectors
An advisory issued jointly this week by the Federal Bureau of Investigation, Cybersecurity and Infrastructure Security Agency, Department of Defense Cyber Crime Center, National Security Agency, U.S. Secret Service, and the Republic of Korea’s National Police Agency alerted organizations about an emerging threat from the Gunra ransomware group and provided guidance on detection and mitigation.…
DOJ’s 2026 Health Care Fraud Takedown Signals Medicaid Enforcement Priorities
This post is co-authored by Seth Orkand, co-chair of Robinson+Cole’s Government Enforcement + White-Collar Defense Team, and Abigail Clarke, a 2026 Summer Associate at Robinson+Cole. Abigail is not admitted to practice law.
The Justice Department’s (DOJ) June 23, 2026, announcement of its annual Health Care Fraud Takedown makes clear that Medicaid and state health…
Wound Care Under the Microscope: DOJ’s Data-Driven National Takedown Targets Fraudulent Reimbursements and Kickback Schemes
This post is co-authored by Seth Orkand, co-chair of Robinson+Cole’s Government Enforcement + White-Collar Defense Team, and Abigail Salcedo, a 2026 Summer Associate at Robinson+Cole. Abigail is not admitted to practice law.
On June 23, 2026, the U.S. Department of Justice (DOJ) announced that it charged 11 defendants in connection with over two billion…
Cyber-attacks Against State Water Supplies Continue—12 to Date
Following the coordinated attack against 30 Minnesota water and wastewater utilities from July 26-27, 2026, hackers have attacked at least 11 other state water systems in the last week. As of July 30, 2026, the Federal Bureau of Investigation (FBI) confirmed that at least seven states were affected and issued an alert detailing the hackers’…
Privacy Tip #502 – Kids’ Online Safety
The families of four teenagers who died by suicide recently sued Meta, TikTok, Snapchat, and YouTube, alleging that the teenagers’ use of the platforms over many years was addicting, and caused sleep deprivation, depression, anxiety, and suicidal ideation. The teenagers committed suicide at the ages of 13, 14, 17, and 18, respectively.
These are not…
AI Meeting Tools Face Wiretapping Wake-Up Call
A new California federal lawsuit against AI notetaking provider Granola highlights a growing privacy risk for companies using meeting transcription tools: consent cannot be an afterthought. According to the complaint, Granola’s software allegedly recorded a virtual meeting participant without giving notice that an AI notetaker was present or seeking permission to record. The plaintiff claims…