At the same time, the commercial insurance market is not merely lagging behind AI risk—it is actively beginning to retreat from it. Industry developments in 2025 and 2026 show insurers increasingly limiting or excluding coverage for AI-related losses, reinforcing the same structural gap identified in the Gallagher report.For technology lawyers and commercial teams negotiating AI
Mitigating Risk in the Influencer Economy: A Legal Guide to Avoiding FTC Penalties for Brand Partners
Countdown to Compliance: Navigating the DOJ and PADFAA Frameworks on Sensitive Data Transfers to Foreign Adversaries
The Take it Down Act: Federal Protections Against Digital Exploitation Bring Compliance Obligations for Online Platforms
Does MHMD apply to my entity?MHMD applies companies and non-profits that control “consumer health data” and do not fall within the exceptions noted below. “Consumer health data” is personal information that is linked or reasonably linkable to a Washington state resident or a person whose consumer health data is collected in Washington, and the personal
Does your business process sensitive data, such as data related to consumer health, precise geolocation, biometrics or children? As an initial matter, if you aren’t sure whether or how your business processes sensitive data, you should conduct a data inventory. In addition to helping to identify the company’s data practices, data mapping helps companies reasonably
Traditional Health Data Breaches Are ContinuingBreaches of healthcare systems are continuing at an aggressive pace. According to Emsisoft Malware Lab, so far this year, at least 25 healthcare providers operating 290 hospitals have been impacted by ransomware. A recently published security industry report by the Ponemon Institute and IBM Security states that, for the
FCC Rule Set to Require “One-To-One” Written Consent on Lead Generator Websites
FTC Adds Data Breach Reporting Requirement to Its GLB Safeguards Rule Applicable to Nonbank Financial Institutions
According to the settlement agreement, Verizon was awarded three GSA contracts to provide various telecommunications services, including MTIPS. Because of the nature of the services provided, the GSA required, among other things, that the contracts comply with all critical capabilities set forth in the U.S. Department of Homeland Security’s relevant reference architecture document for