Cravath Data Privacy and Security Review: H1 2026

On February 25, 2026, Cravath published the latest edition of its Cravath Data Privacy and Security Review newsletter. The Review provides an overview of recent U.S. state and federal legislative and regulatory developments, alongside U.S. and global enforcement trends and takeaways, in data privacy and cybersecurity for the last six months of 2025. 

On September 18, 2025, Cravath published the fifth edition of its Cravath Data Privacy and Security Review newsletter. The Review provides an overview of recent U.S. state and federal legislative and regulatory developments, alongside U.S. and global enforcement trends and takeaways, in data privacy and cybersecurity for the first six months of 2025. It first presents an update on emerging and existing privacy and security legislation at the federal level, including amendments to the Children’s Online Privacy Protection Rule, then highlights notable legislative developments at the state level across the country. This edition also explores the heightened focus on cybersecurity- and privacy‑related enforcement at federal agencies, including the Federal Trade Commission, Securities and Exchange Commission and Department of Justice, and provides global enforcement updates from the European Union and China.

On January 13, 2025, Cravath published the fourth edition of its Cravath Data Privacy and Security Review newsletter. The Review provides an overview of U.S. state and federal legislative and regulatory developments, alongside U.S. and global enforcement trends and takeaways, in data privacy and cybersecurity for the last six months of 2024. The Review also provides an update on emerging and existing privacy and security legislation at the federal level, including the Video Privacy Protection Act, and highlights notable legislative developments at the state level, including in California, Illinois, New York and Pennsylvania. This edition highlights the heightened focus on cybersecurity and privacy‑related enforcement at federal agencies including the Federal Trade Commission, Securities and Exchange Commission, Department of Health and Human Services and Department of Justice, and provides global enforcement updates from the European Union, Australia and China.

On July 16, 2024, Cravath published the third edition of its Cravath Data Privacy and Security Review newsletter, which provides an overview of U.S. state and federal legislative and regulatory developments, alongside U.S. and global enforcement trends and takeaways, in the data privacy and security field for the first six months of 2024. The Review provides an update on emerging and existing privacy and security legislation at the federal level, including the American Privacy Rights Act, and highlights notable legislative developments at the state level across the country. This edition also highlights the heightened focus on cybersecurity and privacy‑related enforcement at federal agencies including the Federal Trade Commission and Securities and Exchange Commission, and provides global enforcement updates from China, the European Union, Germany and Chile.