Data Protection, Cybersecurity, and AI


 

World Cup Games Put Facial Recognition Technology Regulations on Display for Municipalities in MA

by Matthew Bowser, Christopher E. Hart, Sadie Keller

Facial recognition technology (FRT) is a powerful tool that scans human faces and matches them to facial features to identify individuals. While FRT preceded the advent of generative artificial intelligence (“GenAI”), using GenAI allows FRT to quickly sift through hundreds of hours of footage or photographs, processing information… READ MORE

“Small” Registered Investment Advisors May Have Big Compliance Requirements under Reg S-P: What Firms Need to Do Now

by Christopher E. Hart, Sadie Keller

As of June 3, 2026, smaller registered investment advisers (RIAs) must now comply with significant amendments to Regulation S-P (“Reg S-P”), the Securities and Exchange Commission’s primary rule governing the protection of customer records and information. The undertakings are significant and may require organizations now… READ MORE

If You Have a Website, You Are a Wiretap Litigation Target: What to Know About the Current State of Privacy Litigation, and How to Mitigate Your Risk

by Christopher E. Hart, Martell L. Johnson

If you have received a demand letter or complaint alleging that your website is violating state wiretap laws and that you owe tens or hundreds of thousands of dollars (or more), you are not alone.  Over the past few years, litigants have been creatively using state wiretap laws… READ MORE

Convergence Among Comprehensive State Privacy Laws Points to Practical Data Risk Management Strategies

by Christopher E. Hart

Summary: While there are multiple comprehensive state privacy laws with varying features, there are also significant areas of convergence. Those areas of convergence—such as risk assessments, notice and consent, and privacy rights—point to data mapping and governance as key data risk management priorities. Comprehensive data privacy laws demand… READ MORE