Cravath Data Privacy and Security Review: H1 2025

On September 18, 2025, Cravath published the fifth edition of its Cravath Data Privacy and Security Review newsletter. The Review provides an overview of recent U.S. state and federal legislative and regulatory developments, alongside U.S. and global enforcement trends and takeaways, in data privacy and cybersecurity for the first six months of 2025. It first presents an update on emerging and existing privacy and security legislation at the federal level, including amendments to the Children’s Online Privacy Protection Rule, then highlights notable legislative developments at the state level across the country. This edition also explores the heightened focus on cybersecurity- and privacy‑related enforcement at federal agencies, including the Federal Trade Commission, Securities and Exchange Commission and Department of Justice, and provides global enforcement updates from the European Union and China.

Please click here to read the full report.