Published on: | by

The timeline for corporate cybersecurity compliance is contracting. For years, corporate boards, general counsel, and compliance officers treated quantum computing as a distant technical problem. That approach is becoming increasingly difficult to defend as federal agencies, standards bodies, and major infrastructure providers accelerate their post-quantum cryptography roadmaps.

In 2024, the National Institute of Standards and Technology (NIST) finalized its first three post-quantum cryptography standards: FIPS 203 / ML-KEM for key establishment, FIPS 204 / ML-DSA for digital signatures, and FIPS 205 / SLH-DSA as an additional stateless hash-based digital signature standard. NIST has advised organizations to begin migrating systems to quantum-resistant cryptography and has identified a transition pathway that will deprecate and ultimately remove quantum-vulnerable algorithms from its standards by 2035, with high-risk systems moving earlier.

Industry leaders are also accelerating their own schedules. For example, Cloudflare announced a 2029 target for full post-quantum security across its product suite, including authentication, and has separately tied the urgency to recent research developments and federal transition deadlines. The practical message for enterprise leaders is straightforward: post-quantum migration is no longer merely an IT modernization project. It is a legal, contractual, regulatory, and governance issue.

Continue Reading ›

Published on: | by

Quantum computing is becoming a serious legal, cybersecurity, and business risk-management issue. Although practical quantum computers capable of defeating widely used cryptographic systems are not known to exist today, businesses should not wait until the risk becomes immediate before planning for it. The migration from existing cryptographic systems to quantum-resistant systems may take years, and in some cases the risk already exists because sensitive encrypted data can be collected now and decrypted later when stronger quantum capabilities become available.

For companies that store confidential information, process personal information, use cloud services, rely on digital signatures, operate e-commerce platforms, manage intellectual property, or maintain regulated data, quantum computing should be part of the cybersecurity and legal compliance conversation. This includes businesses subject to privacy laws, cybersecurity requirements, vendor-management obligations, data retention duties, contractual security commitments, and regulatory oversight.

What Is Quantum Computing?

Continue Reading ›

Published on: | by

The internet has made it easier than ever for private images, videos, and personal information to be copied, posted, shared, and republished across multiple online platforms within minutes. Artificial intelligence has made the problem even more dangerous. Today, a person can be targeted not only by the unlawful posting of real intimate images, but also by AI-generated “deepfake” images or videos that falsely appear to depict that person in an intimate or sexually explicit manner.

This is no longer a fringe problem. Victims of nonconsensual intimate images, revenge porn, sextortion, cyber harassment, and AI-generated deepfakes often face immediate reputational damage, emotional distress, financial harm, employment consequences, family disruption, and personal safety concerns. In many cases, victims also struggle to determine where the content was posted, who posted it, whether copies have been made, and which platform has the legal responsibility to remove it.

The federal TAKE IT DOWN Act is designed to address this problem by creating a clearer legal framework for removing nonconsensual intimate images from covered online platforms. The statute was enacted on May 19, 2025 as Public Law 119-12, and the Federal Trade Commission began enforcing the Act’s platform notice-and-removal obligations on May 19, 2026.

Continue Reading ›

Published on: | by

Artificial intelligence is no longer just a software, automation, or innovation issue. It is now a cybersecurity, privacy, governance, and legal compliance issue. As businesses deploy AI tools into customer service, hiring, healthcare, finance, marketing, legal operations, cybersecurity, and enterprise decision-making, California lawmakers are moving toward a more formal regulatory framework for artificial intelligence systems.

One of the most important developments is California Senate Bill 53, also known as the Transparency in Frontier Artificial Intelligence Act. Governor Gavin Newsom signed SB 53 on September 29, 2025, and the law establishes new transparency, safety, reporting, and whistleblower-related obligations for certain developers of frontier artificial intelligence models.

For businesses in California, especially technology companies, AI vendors, cybersecurity providers, software developers, and companies integrating AI into regulated workflows, SB 53 signals a major shift. AI risk is no longer limited to intellectual property ownership, hallucinations, biased outputs, or data privacy. It now includes critical safety incidents, model security, catastrophic risk, cybersecurity controls, internal reporting, and government enforcement.

Continue Reading ›

Published on: | by

California’s Digital Financial Assets Law (“DFAL”) is about to become a much bigger issue for the crypto industry. Beginning July 1, 2026, certain companies serving California residents may not engage in covered digital financial asset business activity unless they are licensed by the California Department of Financial Protection and Innovation (“DFPI”), exempt, or have submitted a completed application on or before July 1, 2026 and are awaiting approval or denial. The law is not limited to large exchanges. Depending on the business model, it can affect crypto trading platforms, custodians, transfer services, stablecoin-related businesses, and digital asset transaction kiosk operators, including so-called crypto ATMs.

For California businesses, the message is straightforward: July 1, 2026 is not a soft milestone. It is the date on which the state’s licensure framework becomes operational for many digital asset businesses. For consumers, the law is also significant because it creates disclosure, custody, and conduct rules aimed at a market that has too often been defined by opacity, operational failures, and fraud.

What is California’s Digital Financial Assets Law?

Continue Reading ›

Published on: | by

California businesses that use artificial intelligence, automated scoring, profiling tools, or large-scale consumer data practices cannot afford to treat the California Privacy Protection Agency’s 2026 regulations as a future problem. The rules governing Automated Decision-Making Technology (ADMT), privacy risk assessments, and cybersecurity audits are already reshaping compliance expectations. Businesses that wait until regulators come knocking may discover that they are missing the documentation, internal controls, and governance structure needed to defend their data practices.

This article was drafted to serve as practical guidance for businesses, executives, compliance teams, privacy professionals, and technology counsel trying to understand what California’s 2026 privacy regulations require. While many organizations focus on consumer-facing privacy notices, the more consequential issue in 2026 is operational readiness. Companies need to know when a risk assessment is required, when an automated decisionmaking workflow may trigger opt-out or access obligations, and when an annual cybersecurity audit becomes mandatory.

The reality is that many businesses already use tools that can fall within California’s automated decisionmaking framework. Hiring software, lead-scoring systems, fraud tools, underwriting models, identity verification services, recommendation engines, and internal profiling tools may all create compliance exposure depending on how they are used. In other words, a company does not need to market itself as an “AI business” to face AI-related privacy obligations.

Continue Reading ›

Published on: | by

This article was drafted to serve as legal guidance for artificial intelligence and machine learning technologies. Artificial intelligence (AI) and machine learning (ML) are transforming nearly every industry, from healthcare and finance to marketing, employment, cybersecurity, and consumer services. As organizations increasingly rely on automated decision-making systems, predictive analytics, and generative AI tools, the legal and regulatory risks associated with these technologies have grown just as rapidly.

AI and ML law is an emerging legal discipline that addresses the complex intersection of technology, data, privacy, intellectual property, consumer protection, and regulatory compliance. Businesses deploying AI systems must navigate evolving legal standards while managing ethical, operational, and reputational risks. Hence, experienced legal counsel is critical to ensuring responsible innovation and regulatory compliance.

What Is AI & Machine Learning Law?

Continue Reading ›

Published on: | by

Cryptocurrency fraud has become one of the fastest-growing forms of consumer financial crime. As digital assets gain mainstream adoption, criminals increasingly exploit confusion around blockchain technology, online anonymity, and cross-border transactions. Many consumers assume that once cryptocurrency is stolen, the perpetrators are impossible to identify or pursue. That assumption is often incorrect.

In reality, there are legal, forensic, and investigative methods available to track down cryptocurrency criminals, including those who target consumers in California and throughout the United States. While not every case results in full recovery, modern blockchain transparency and legal tools make crypto fraud far more traceable than many victims realize.

Understanding the Myth of Cryptocurrency Anonymity

Continue Reading ›

Published on: | by

Drones—also called UAVs (unmanned aerial vehicles) or UAS (unmanned aircraft systems)—are now standard tools for photography, surveying, inspection, agriculture, public safety, and logistics. But as drone adoption expands, so do regulatory requirements. For anyone flying internationally—whether as a hobbyist or a commercial operator—understanding international drone rules and regulations is essential for safety, legality, and risk management. This article provides a practical, high-level guide to common regulatory themes across jurisdictions, how rules differ by region, and what you should do before flying in another country. It is not legal advice, but it will help you develop an effective compliance checklist.

Why International Drone Regulations Matter

Drone laws are not harmonized globally. A flight that is legal in one country may be unlawful in another due to differences in:

Continue Reading ›

Published on: | by

Artificial intelligence (AI) has fundamentally transformed drone technology, shifting unmanned aerial systems (UAS) from remotely piloted tools into increasingly autonomous, data-driven platforms. What were once simple flying cameras are now capable of real-time decision-making, object recognition, predictive navigation, swarm coordination, and automated data analysis. This technological shift has not only expanded the commercial and governmental use of drones but has also created new legal, regulatory, privacy, and cybersecurity challenges. Understanding how AI has reshaped drone technology is essential for businesses, government agencies, and individuals operating in airspace, data-intensive environments, or regulated industries.

Evolution of Drones: From Manual Control to Intelligent Systems

Early drones relied almost entirely on human operators for navigation, stabilization, and mission execution. While GPS and basic sensors improved flight control, decision-making remained human-centric. Artificial intelligence introduced a new paradigm: autonomy.

Continue Reading ›