Clients are increasingly turning to AI before they speak with outside counsel, and sometimes after, by pasting legal advice, contract language, or other work product into a public AI model to ask follow-up questions. Used thoughtfully, these tools can help clients frame questions and organize information, but an answer that sounds confident is not necessarily
Data Privacy + Security Insider
Blog Authors
Latest from Data Privacy + Security Insider
California’s New AI Laws Put Workplace Safeguards on the Agenda
California is taking a leading role in regulating artificial intelligence at work. A newly signed package of laws limits employers’ use of AI in several high-stakes settings: employers may not rely entirely on AI to decide whether to fire a worker; use AI to predict employees’ emotional states; collect workers’ neural data; or use AI…
Privacy Tip #511 – The Dangers of Sharing Medical Information with AI Tools
I recently had the pleasure to participate in a podcast on Privacy Lawls about the dangers of sharing medical information with AI tools. In the September 21, 2026, episode, “The Dangers of Sharing Medical Information with AI,” Donata Stroink-Skillrud, President of Termageddon LLC, and I explored how consumers are increasingly using generative AI tools to…
Court Finds that MLB’s Arbitration Clause Doesn’t Cover the Bases
By Roma Patel
On September 30, 2026, a New York federal judge denied Major League Baseball’s digital-ticketing arm, MLB Advanced Media, L.P. (MLBAM), a chance to send to arbitration most claims over tickets that disappeared from the MLB Ballpark app after a cyberattack. Lanham v. MLB Advanced Media, L.P., No. 25-cv-7780 (AS), slip op. at 6–8 (S.D.N.Y. Sept.…
Personalized Pricing Puts Data Practices and Disclosures Under the Microscope
The Federal Trade Commission’s (FTC) proposed enforcement policy statement on personalized pricing signals that businesses may face scrutiny when they use consumer-specific data to set different prices for different customers without disclosing that practice. The statement is not binding law, but the FTC says it intends to use its existing Section 5 authority to address…
CA AG Subpoenas OpenAI
In the wake of two lawsuits against it, California Attorney General Rob Bonta recently served an investigative subpoena on OpenAI as part of the California Department of Justice’s (DOJ) ongoing investigation of incidents resulting from the operations of OpenAI and its artificial intelligence (AI) models.
According to the Attorney General’s press release, the…
Alleged ShinyHunters’ Leader Detained by Law Enforcement
Maybe attacking the FBI was not such a brilliant idea. Following the FBI attack, one of the suspected leaders of ShinyHunters has been detained and is in custody. Apparently, there is no honor among thieves, as he is reportedly assisting law enforcement by naming other members of the cyber gang.
The suspect, Saif al-Din Khader,…
OpenAI Sued for AI Agent Hacks
Following the hacking incidents of OpenAI agents of Hugging Face, Ruby Gems, and an Australian government website, two suits have been filed against OpenAI.
One suit was filed by not-for-profit Legal Advocates for Safe Science & Technology (LASST), which claimed “that the hack in which OpenAI ‘agents stole credentials, uploaded malicious files, and gained control…
AI Agents Need More Than Curiosity: They Need Our Trust
Consumer AI agents are software tools designed to do more than answer questions. They can break a request into steps, use external tools and apps, and carry out tasks such as comparing products, managing digital workflows, or booking travel. Some can also work in the background on repetitive tasks. That added autonomy may make agents…
Privacy Tip #510 – Social Engineering Vishing Campaigns Hitting Health Care Sector
The Health Information Sharing and Analysis Center (ISAC) recently warned that ShinyHunters is using voice-phishing attacks to target the healthcare sector. “The hackers used medical-themed impersonation domains to trick healthcare employees into exposing their credentials.” More than a dozen organizations have been hit by these social-engineering attacks.
Health ISAC recommends:
- Employee Training and Awareness: Implement
…