Cybersecurity and AI Law Report

  • |

    Nov. 11, 2026

Meta’s $25‑Billion Verdict Lessons: Privacy Litigation Tactics

In late October 2026, a New Mexico judge entered a $25‑billion penalty against Meta after a jury found nearly 44 million violations of the state’s consumer protection law, including a decade-long pattern of deceptive claims about the company’s privacy and data practices. The case arose from the Cambridge Analytica controversy and included claims that Meta misrepresented its investigation of data misuse in the scandal’s wake. This first article in a two-part series provides perspective on the litigation tactics and standout trial aspects leading to the milestone verdict, with comments from the New Mexico AG’s outside counsel and Lowenstein partner Katherine McGee. Part two will provide governance lessons from the case for a broad set of organizations in an AI era. See “Google Verdict Expands Privacy Rights to Anonymized Data” (Oct. 1, 2025).

Building a Defensible AI “Exhibit A” Framework to Prepare for Litigation

A company’s use of AI can trigger litigation in numerous ways, including when a system produces discriminatory outcomes, mishandles data or operates without adequate oversight. When an AI tool becomes “Exhibit A” in a regulatory or litigation proceeding, a company defending itself will need to demonstrate that it has built a solid foundation, infrastructure and controls. This article offers practical tips on how to build that framework, distilling insights shared by experts from Future of Privacy Forum, Snap and White & Case during IAPP’s Privacy.Security.Risk. + AI Governance Global conference. See “Practical Guardrails for Employers’ Use of AI” (Oct. 28, 2026).

DOJ and FBI Officials Address the Intensifying Cybercrime Landscape

Cybercrime threats to organizations continue to multiply and become more damaging, according to Jason Cromartie, special agent in charge of the FBI’s Cincinnati office, and Deputy Assistant AG Josh Goldfoot. Speaking at the 25th Annual Compliance & Ethics Institute presented by the Society of Corporate Compliance and Ethics, the two officials examined rapidly evolving ransomware, social engineering and AI-enabled attacks; highlighted law enforcement efforts; and explained how cooperation with law enforcement can strengthen organizational security. This article distills their insights. See “Key Cyber Risks Shaping Security Strategy in 2026” (Sep. 23, 2026).

Former New York AG’s Office Special Counsel Joins Kelley Drye’s Privacy and Information Security Practice

Kelley Drye has welcomed Ashley Tan as special counsel in its privacy and information security practice group in New York. She arrives from the Office of the New York State AG. For insights from Kelley Drye, see “California Regulators Offer Insights Into Enforcement, Audit Priorities” (Oct. 28, 2026); and “Navigating an Increasingly Risky Health Data Landscape: Why the NAI’s Factor Analysis Matters” (Apr. 29, 2026).

Pierson Ferdinand Adds Former USSS Supervisory Special Agent As Partner in Philadelphia

Kim Detwiler has joined Pierson Ferdinand as a partner in Philadelphia. She arrives from Constangy, where she was a partner specializing in cybersecurity and data privacy.

Most-Read Articles