On December 2, 2025, the Court of Justice of the EU (CJEU) in X v Russmedia Digital SRL (C-492/23), ruled that the operator of an online marketplace, as a data controller, is responsible for the processing of personal data contained in advertisements published on its platform, and cannot rely on the hosting liability safe harbor
Wilson Sonsini Goodrich & Rosati
Wilson Sonsini Goodrich & Rosati's legacy closely traces the birth and evolution of Silicon Valley.
For nearly six decades, Wilson Sonsini has represented the technology pioneers associated with virtually every milestone innovation.
Today, the firm is synonymous with ushering promising, innovative companies through their business life cycle.
And as our clients have grown, so has our firm. Wilson Sonsini now represents many of the largest companies in the world—and thousands of the smallest ones, too.
Website:
https://www.wsgr.com/
Latest from Wilson Sonsini Goodrich & Rosati - Page 4
EU Unveils Next Five-Year Consumer Protection Strategy
Consumer protection has become a key policy focus in the EU, as policymakers modernize competition and consumer laws to reflect the realities of the digital economy. The EU has implemented landmark regulations designed to reshape the obligations of online platforms, focusing on promoting fair competition and enhancing user protections in digital markets. Key among these…
Price Check: The UK’s New Consumer Protection Push
The UK’s antitrust and consumer agency—the Competition and Markets Authority (CMA)—has announced its first enforcement actions under the country’s new consumer protection regime. On November 18, 2025, the CMA opened eight investigations into various pricing practices, issued advisory letters to 100 businesses across 14 sectors, and published new price transparency guidance. The actions send a…
The EU Omnibus Proposals Intend to Introduce More Flexibility in the GDPR, AI Act, and Other EU Digital Regulations
On November 19, 2025, the EU Commission (Commission) published a set of legislative proposals to introduce more flexibility into a number of EU digital regulations, including:
- the Digital Omnibus, which amends a number of provisions of the General Data Protection Regulation (GDPR) and the ePrivacy Directive, as well as the Data Act; and
- the
…
EdTech Provider Agrees to $5.1 Million Settlement with Three State Attorneys General over Student Data Breach
On November 6, 2025, the California, Connecticut, and New York Attorneys General (collectively, the “Attorneys General”) announced a settlement with Illuminate Education, Inc. to resolve allegations that the company violated state privacy laws following a student data breach. The settlement marks the first enforcement actions under the California K-12 Pupil Online Personal Information…
What’s Happening at the FTC During the Government Shutdown?
The federal government has been shut down for over a month. We previously reported on implications for the Federal Trade Commission’s (FTC) antitrust work here. What does the shutdown mean for the FTC’s consumer protection, privacy, safety, and AI work?…
California Enacts Nearly a Dozen Key Privacy and AI Bills into Law
On October 13, 2025, California concluded a busy legislative term by enacting a slew of key privacy and AI-related bills, aimed at enhancing consumer protection and regulating emerging AI technology applications. These measures address a range of critical issues, including consumer opt-out signals, data broker transparency requirements, age assurance, minors’ safety, companion chatbots, and AI…
Connecting Competition and Privacy: EU Regulators Release Draft Guidance on DMA and GDPR Interplay
On October 9, 2025, the European Commission (EC) and the European Data Protection Board (EDPB) published Draft Guidance on the interplay between the Digital Markets Act (DMA) and the General Data Protection Regulation (GDPR, and the Draft Guidance).…
Legal Framework for AI in Mental Healthcare
Introduction
Artificial intelligence (AI) is increasingly being used in mental healthcare for functions such as clinical decision support, notetaking and transcription, symptom screening and triage, administrative and operational improvements, augmenting the provider-patient relationship, post-visit remote monitoring, and companionship.…
California Enacts Major AI Safety Legislation for Frontier AI Developers
On September 29, 2025, California Governor Gavin Newsom signed into law Senate Bill 53, the Transparency in Frontier AI Act (TFAIA), the first-of-its-kind AI legislation in the U.S. that will require large AI developers to publicly disclose how they plan to mitigate potentially “catastrophic risks” posed by advanced frontier AI models. The law builds…