General

The Guidelines 03/2026 on web scraping in the context of generative AI, adopted by the European Data Protection Board “EDPB” for public consultation on 7 July 2026, are notable not only for what they require but for what they acknowledge. The document is unusually candid about three limitations: an epistemic one (the controller may

We are proud to celebrate the recognition of 10 attorneys in Lawdragon’s 2026 500 Leading Global Cyber Lawyers Guide, a prestigious listing that honors lawyers at the forefront of privacy, cybersecurity, data protection, incident response, and related regulatory and litigation matters. Lawdragon’s guide recognizes leaders who help organizations navigate an increasingly complex digital landscape and

Recently, we hosted an intimate dinner in Los Angeles with a group of general counsels and senior executive leaders to discuss the evolving challenges posed by artificial intelligence (AI), data privacy and cybersecurity, particularly as they relate to HR and production environments. The roundtable discussion was dynamic and insightful, reflecting the real-world risks and strategic

The UK’s data protection framework continues to evolve following the enactment of the Data (Use and Access) Act 2025 (DUAA). One of the more operationally significant developments for organisations is the introduction of a new statutory right for individuals to complain to controllers regarding infringements of the UK General Data Protection Regulation (GDPR), as well as a framework governing how controllers must handle those complaints.

The relevant provisions will apply from 19 June 2026, pursuant to the Data (Use and Access) Act 2025 (Commencement No. 6) Regulations 2026. On or before that date, organisations subject to the UK GDPR will need to update their privacy notices, and introduce formal data protection complaint handling processes that meet specific legal requirements.

Continue Reading The Data (Use and Access) Act 2025 and the new right for individuals to complain to controllers: What organisations need to do before 19 June 2026

SPB’s Alan Friel has previously explained here and here how consumer privacy law and online teen safety laws can go too far and be constitutionally suspect.  This issue has heated up in the courts as states rush to regulate. 

In a recent Network Advertising Initiative panel Alan moderates a speaker from Netchoice, an industry advocacy

Join the Los Angeles County Bar Association’s (“LACBA”) Privacy & Cybersecurity Section on May 21, 2026 (6:30–8:00 PM) at the Jonathan Club in Downtown Los Angeles for “Protecting Consumers & Promoting Innovation in a Data-Driven Economy.” The program features FTC Bureau of Consumer Protection Director, Chris Mufarrige, who will discuss evolving consumer protection enforcement priorities

One of our own is helping shape the conversation. Alan Friel, Partner, and contributing author to our blog, will serve as a featured speaker in an upcoming live CLE webinar tackling one of the most rapidly developing areas of digital privacy regulatory enforcement and litigation.

In the first hour of the webinar, “Cookie Banner