Featured Stories
Gary Kalbaugh, Lewis Rinaudo Cohen, and Frank Weigand to Present IIB Webinar on Lending and Hedging in the AI Buildout
NEW YORK, Oct. 29 [Category: BizLaw/Legal] -- Cahill Gordon and Reindel, a law firm, posted the following news:
* * *
Gary Kalbaugh, Lewis Rinaudo Cohen, and Frank Weigand to Present IIB Webinar on Lending and Hedging in the AI Buildout
*
Cahill partner Gary Kalbaugh, along with partner and co-chair of CahillNXT Lewis Rinaudo Cohen, and partner Frank Weigand will present the "Lending and Hedging in the AI Buildout" webinar with the Institute of International Bankers (IIB).
Gary, Lewis, and Frank will discuss how artificial intelligence is driving extraordinary demand for computational capacity
... Show Full Article
NEW YORK, Oct. 29 [Category: BizLaw/Legal] -- Cahill Gordon and Reindel, a law firm, posted the following news:
* * *
Gary Kalbaugh, Lewis Rinaudo Cohen, and Frank Weigand to Present IIB Webinar on Lending and Hedging in the AI Buildout
*
Cahill partner Gary Kalbaugh, along with partner and co-chair of CahillNXT Lewis Rinaudo Cohen, and partner Frank Weigand will present the "Lending and Hedging in the AI Buildout" webinar with the Institute of International Bankers (IIB).
Gary, Lewis, and Frank will discuss how artificial intelligence is driving extraordinary demand for computational capacityand creating new financing, trading, and hedging opportunities for international banks. The webinar will define what compute markets are and explain how they are reshaping data center finance, including how futures and swaps can help address revenue uncertainty for lenders. The panelists will also examine how these developments present cross-selling opportunities, potential new revenue streams, and ways for international banks to deepen client relationships across lending and trading businesses.
The webinar is designed for IIB's membership of internationally headquartered institutions. This program has been accredited with New York CLE credit in Professional Practice.
***
Original text here: https://www.cahill.com/news/events/2026-10-29-gary-kalbaugh-lewis-rinaudo-cohen-and-frank-weigand-to-present-iib-webinar-on-lending-and-hedging-in-the-ai-buildout
Pillsbury Advises LiveOak Ventures and Activate Venture Partners in $7.7 Million Funding Round for Thrive Therapies
NEW YORK, Oct. 24 -- Pillsbury, a law firm, issued the following news release:
* * *
Pillsbury Advises LiveOak Ventures and Activate Venture Partners in $7.7 Million Funding Round for Thrive Therapies
10.23.26
Pillsbury advised LiveOak Ventures, an Austin, Texas-based early-stage venture capital firm, in leading a $7.7 million funding round for Thrive Therapies, a Dallas, Texas-based provider of a technology-enabled pediatric healthcare platform.
The firm also advised Activate Venture Partners, an early-stage venture capital firm for high growth technology companies, in its participation in
... Show Full Article
NEW YORK, Oct. 24 -- Pillsbury, a law firm, issued the following news release:
* * *
Pillsbury Advises LiveOak Ventures and Activate Venture Partners in $7.7 Million Funding Round for Thrive Therapies
10.23.26
Pillsbury advised LiveOak Ventures, an Austin, Texas-based early-stage venture capital firm, in leading a $7.7 million funding round for Thrive Therapies, a Dallas, Texas-based provider of a technology-enabled pediatric healthcare platform.
The firm also advised Activate Venture Partners, an early-stage venture capital firm for high growth technology companies, in its participation inthe round.
Charter School Growth Fund also participated as an investor in the round.
According to recent coverage, Thrive Therapies plans to use the funding to expand into new markets, grow its clinical teams and further develop Thrive Clinical, its clinical intelligence platform.
Click here (https://www.finsmes.com/2026/10/thrive-therapies-raises-7-7m-in-funding.html) to read more.
The Pillsbury deal team was led by Corporate partner Andy Smetana and included counsel Patrick Dolan and associate Lee Alexander.
* * *
URL: LiveOak Ventures
URL: Activate Venture Partners
* * *
Original text here: https://www.pillsburylaw.com/en/news-and-insights/pillsbury-advises-liveoak-ventures-activate-venture-partners-funding-round-thrive-therapies.html
[Category: BizLaw/Legal]
Jackson Walker: Monica Messick Named Energy Finance Leader of the Year by D CEO
AUSTIN, Texas, Oct. 24 -- Jackson Walker, a law firm, issued the following news:
* * *
Monica Messick Named Energy Finance Leader of the Year by D CEO
October 23, 2026
Jackson Walker is pleased to announce that Dallas partner Monica Pace Messick has been named Energy Finance Leader of the Year in D CEO's 2026 Energy Awards. Now in its ninth year, the awards recognize excellence and innovation across the energy sector, including achievements in oil and gas, energy finance, renewable energy, technology, and leadership.
The 2026 honorees will be celebrated on Thursday, October 29. The event brings
... Show Full Article
AUSTIN, Texas, Oct. 24 -- Jackson Walker, a law firm, issued the following news:
* * *
Monica Messick Named Energy Finance Leader of the Year by D CEO
October 23, 2026
Jackson Walker is pleased to announce that Dallas partner Monica Pace Messick has been named Energy Finance Leader of the Year in D CEO's 2026 Energy Awards. Now in its ninth year, the awards recognize excellence and innovation across the energy sector, including achievements in oil and gas, energy finance, renewable energy, technology, and leadership.
The 2026 honorees will be celebrated on Thursday, October 29. The event bringstogether leaders from traditional oil and gas, energy finance, renewables, and emerging energy technology, and it offers a networking opportunity for professionals shaping the future of the industry. The evening will include a fireside chat between Legacy Award recipient Jim Burke, president and CEO of Vistra Corp., and D CEO Editor Christine Perez.
Monica has led more than 200 energy finance transactions, ranging from smaller deals to financings of more than half a billion dollars. Lenders and borrowers alike know her as a go-to lawyer for upstream oil and gas lending. Her practice centers on reserve-based credit facilities, and she has also managed a substantial number of mineral and royalty financings underwritten on cash flow. Banks, private equity firms, and oil and gas companies rely on her to negotiate those facilities and the intercreditor, subordination, and security arrangements that support them. She also regularly advises on hedging and usury issues. When a credit runs into trouble, clients count on her to guide them through workouts and distressed loans with practical, clear-eyed advice.
Monica is recognized in The Best Lawyers in America for Energy Law and is ranked in Chambers USA for Banking & Finance. She is also active in the Dallas legal and business communities. She is a past president and advisory board member of the Women's Energy Network, and she is involved with Attorneys Serving the Community and the Dallas Bar Association.
To view the complete list of honorees, read "Winners Announced: D CEO's 2026 Energy Awards." (https://www.dmagazine.com/business-economy/2026/08/winners-announced-d-ceos-2026-energy-awards/)
* * *
Original text here: https://www.jw.com/news/messick-energy-finance-leader-dceo-2026/
[Category: BiLaw/Legal]
Fisher Phillips Issues Insight: Massachusetts High Court Makes It Harder to Win Injunctions in Trade Secret Cases - 4 Takeaways for Employers
ATLANTA, Georgia, Oct. 24 -- Fisher Phillips, a law firm, issued the following Insight:
* * *
Massachusetts High Court Makes it Harder to Win Injunctions in Trade Secret Cases: 4 Takeaways for Employers
Oct 23, 2026
Massachusetts employers trying to stop former employees from launching a competing business should no longer assume that having a strong trade secrets claim will automatically allow them to also secure a court injunction. The Massachusetts Supreme Judicial Court just ruled in Daikin Applied Americas Inc. v. Russo that employers seeking a preliminary injunction must separately demonstrate
... Show Full Article
ATLANTA, Georgia, Oct. 24 -- Fisher Phillips, a law firm, issued the following Insight:
* * *
Massachusetts High Court Makes it Harder to Win Injunctions in Trade Secret Cases: 4 Takeaways for Employers
Oct 23, 2026
Massachusetts employers trying to stop former employees from launching a competing business should no longer assume that having a strong trade secrets claim will automatically allow them to also secure a court injunction. The Massachusetts Supreme Judicial Court just ruled in Daikin Applied Americas Inc. v. Russo that employers seeking a preliminary injunction must separately demonstrate"irreparable harm" sufficient to win a court order that will stop someone from using or sharing your trade secrets. What happened in this case, and what are the four key takeaways from the October 14 decision?
The Dispute
Daikin, a commercial HVAC company with offices in Massachusetts, alleged that two former employees took confidential information and used it to contact Daikin's customers and start a competing business. Daikin sued them and requested a preliminary injunction from the court, asking for a one-year non-solicitation restriction. The lower court denied the injunction request, finding that Daikin had not demonstrated the requisite "irreparable harm" sufficient to earn the court order. In an October 14 ruling, the SJC agreed.
The Holding: Irreparable Harm Requires Its Own Showing
In Massachusetts, like many states, a party must show the following to receive a preliminary injunction:
* it is likely to succeed on the merits;
* it will suffer irreparable harm without an injunction; and
* the risk of "irreparable harm" to the moving party outweighs the harm to the nonmoving party.
Daikin argued that the irreparable harm element was presumed because it had shown a likelihood of success on its trade secrets claims. The SJC rejected this shortcut, explaining that "presuming, rather than demonstrating, irreparable harm" departs from traditional principles of equity. The court aligned Massachusetts with the US Supreme Court's approach in patent and copyright cases and with federal appeals courts that have refused to presume harm in trade secret cases. It also distanced itself from several Massachusetts federal court decisions that had applied such a presumption.
It distinguished between economic losses (like lost sales and service contracts) which are generally fixable with money damages, and non-monetary injuries that warrant an injunction. Economic harm may be irreparable where the challenged conduct threatens the company's goodwill or the very existence of a business, but Daikin did not establish such circumstances.
Four Practical Takeaways for Employers
What should employers take from this ruling?
1. Establish the Threatened Harm, Not Just the Misappropriation
Employers seeking a preliminary injunction must show not only that someone took confidential information, but also that the resulting harm cannot be remedied through monetary damages. Before seeking an injunction, you should work with your FP counsel to document why monetary relief is inadequate.
2. Tailor the Requested Injunction to the Risk
An injunction protecting confidential information serves a different purpose than one restricting a former employee's ability to solicit customers. You should not ask for too much - a narrow request is more likely to be granted than a broad non-solicitation injunction.
3. Review Restrictive Covenants Before Employees Depart
You should review existing restrictive covenants and ensure they are protected by the agreements you have in place. If the agreements are not protective, you should consider rolling out tailored non-solicitation or non-competition agreements. You should keep in mind that all Massachusetts non-competition agreements require careful review and coordination with your FP counsel.
4. Act Quickly to Investigate Misappropriation and Preserve Evidence
When you suspect that departing employees may have taken confidential information, a quick response will help protect your data. Act quickly to identify the confidential information, preserve relevant records, and document business risks.
* * *
Related People
Gabriel S. Gladstone
Of Counsel
ggladstone@fisherphillips.com
617/532-6932
* * *
Raissa Lima
Associate
rlima@fisherphillips.com
617/722-0044
* * *
Original text here: https://www.fisherphillips.com/en/insights/insights/massachusetts-high-court-makes-it-harder-to-win-injunctions-in-trade-secret-cases
[Category: BizLaw/Legal]
Fisher Phillips Issues Insight: Employer Cheat Sheet for 2026 Midterm Election Season
ATLANTA, Georgia, Oct. 24 -- Fisher Phillips, a law firm, issued the following Insight:
* * *
Employer Cheat Sheet for 2026 Midterm Election Season
Oct 23, 2026
Here's a handy cheat sheet that summarizes some key points from our Employer FAQs and Insight on navigating employee speech this election season.
Make sure to check out the full series to understand your rights and responsibilities.
Check out our full Election Season Resource Hub (https://www.fisherphillips.com/en/capabilities/resources/election-season-resource-hub) to review all of our offerings and practical resources.
If you
... Show Full Article
ATLANTA, Georgia, Oct. 24 -- Fisher Phillips, a law firm, issued the following Insight:
* * *
Employer Cheat Sheet for 2026 Midterm Election Season
Oct 23, 2026
Here's a handy cheat sheet that summarizes some key points from our Employer FAQs and Insight on navigating employee speech this election season.
Make sure to check out the full series to understand your rights and responsibilities.
Check out our full Election Season Resource Hub (https://www.fisherphillips.com/en/capabilities/resources/election-season-resource-hub) to review all of our offerings and practical resources.
If youhave questions, contact your Fisher Phillips attorney, the authors of this Insight, or any attorney in our Government Relations Practice Group.
Make sure to sign up for Fisher Phillips Insights to stay up to speed on the latest developments.
* * *
Related People
Leanne Lane Coyle
Associate
lcoyle@fisherphillips.com
610/230-6121
* * *
Joshua D. Nadreau
Regional Managing Partner and Vice Chair, Labor Relations Group
jnadreau@fisherphillips.com
617/722-0044
* * *
Original text here: https://www.fisherphillips.com/en/insights/insights/employer-cheat-sheet-for-2026-midterm-election-season
[Category: BizLaw/Legal]
Dentons Rodyk: Senior Partner Debby Lim Elected to the Council of the Law Society of Singapore
WASHINGTON, Oct. 24 -- Dentons Rodyk, a law firm, issued the following news:
* * *
Senior Partner Debby Lim elected to the Council of the Law Society of Singapore
October 23, 2026
Senior Partner Debby Lim has been elected to the Council of the Law Society of Singapore for 2027, securing one of four seats in the Senior category.
The Council is the Law Society's highest body responsible for managing the affairs of the Society, the statutory representative body and bar association for lawyers in Singapore. Debby's election reflects the confidence of her peers and the opportunity to contribute
... Show Full Article
WASHINGTON, Oct. 24 -- Dentons Rodyk, a law firm, issued the following news:
* * *
Senior Partner Debby Lim elected to the Council of the Law Society of Singapore
October 23, 2026
Senior Partner Debby Lim has been elected to the Council of the Law Society of Singapore for 2027, securing one of four seats in the Senior category.
The Council is the Law Society's highest body responsible for managing the affairs of the Society, the statutory representative body and bar association for lawyers in Singapore. Debby's election reflects the confidence of her peers and the opportunity to contributeto the leadership and advancement of the legal profession.
Her election comes following a heavily contested election and marks a continuation of her longstanding service to the Law Society. Debby currently serves as Chairperson of the Law Society's Publications Committee and its Insolvency Practice Committee.
Dentons Rodyk warmly congratulates Debby on her election and wishes her every success as she continues to contribute to the development and strength of Singapore's legal profession.
Media coverage of Debby's election to the Law Society Council:
* The Straits Times
* Channel News Asia
* * *
About Dentons Rodyk
Dentons Rodyk is Singapore's global law firm and part of the world's largest, with a team of around 200 lawyers offering clients a full suite of legal services necessary to do business locally and globally.
With over 160 years of establishment and consistently ranked highly in leading publications, Dentons Rodyk delivers top-tier legal advice while maintaining strong working relationships with key public sector agencies and prominent private sector organisations.
Its combination with global law firm Dentons makes it part of the world's largest law firm, with more than 12,500 professionals across over 170 locations in more than 85 countries. Dentons Rodyk is also part of Dentons ASEAN, the first global pan-ASEAN law firm, with a longstanding presence in Indonesia, Malaysia, Myanmar, Thailand, the Philippines, Vietnam and Singapore.
* * *
Original text here: https://dentons.rodyk.com/en/about-dentons-rodyk/news/2026/october/senior-partner-debby-lim-elected-to-the-council-of-the-law-society-of-singapore
[Category: BizLaw/Legal]
Clark Hill: Right To Know - October 2026, Vol. 46
BIRMINGHAM, Michigan, Oct. 24 -- Clark Hill, a law firm, issued the following legal update:
* * *
Right To Know - October 2026, Vol. 46
October 23, 2026
Cyber, Privacy, and Technology Report
Welcome to your monthly rundown of all things cyber, privacy, and technology, where we highlight all the happenings you may have missed.
View previous issues and sign up to receive future newsletters by email here (https://www.clarkhill.com/right-to-know/).
Litigation & Enforcement:
* OpenAI Sued for Rogue AI Agents: On Sept. 29th, the non-profit organization Legal Advocates for Safe Science and Technology
... Show Full Article
BIRMINGHAM, Michigan, Oct. 24 -- Clark Hill, a law firm, issued the following legal update:
* * *
Right To Know - October 2026, Vol. 46
October 23, 2026
Cyber, Privacy, and Technology Report
Welcome to your monthly rundown of all things cyber, privacy, and technology, where we highlight all the happenings you may have missed.
View previous issues and sign up to receive future newsletters by email here (https://www.clarkhill.com/right-to-know/).
Litigation & Enforcement:
* OpenAI Sued for Rogue AI Agents: On Sept. 29th, the non-profit organization Legal Advocates for Safe Science and Technology("LASST") sued OpenAI in California State Court over OpenAI's agents accessing another company's (Hugging Face's) systems without authorization. The complaint alleges that OpenAI knew about the AI agents' activities and violated California's Unfair Competition Law. The complaint seeks injunctive relief and attorneys' fees.
* Arizona Appeals Court Vacates Sentence That Relied on AI Video of Victim: On Sept. 30th, the Arizona Court of Appeals vacated the sentence of Gabriel Horcasitas who was convicted of manslaughter in a road rage incident. Horcasitas was sentenced to 10.5 years for the manslaughter charge and challenged his conviction and sentence. With respect to sentencing, the trial court was presented with, and relied on, an AI generated video that depicted the deceased victim talking to the court. In announcing the sentence, the trial court specifically referenced the AI video, including stating "I loved that AI." The appellate court vacated the sentence finding the AI video, which did not depict any actual events, was so prejudicial that it rendered the sentencing unfair.
* New CIPA/CMIA Decision: In Doe v. Adventist Health System/West, patients alleged that Adventist Health used Meta Pixel and Google Analytics on its health-risk assessment websites and patient portal to transmit users' information and online activity to Meta and Google without consent, in violation of CIPA and CMIA. The trial court denied class certification, finding that liability would require individualized inquiries into what information each patient transmitted and whether that information qualified as protected communications or medical information. The California Court of Appeal reversed in part, holding that several claims, including the surviving CIPA Sec. 631 claim, could potentially be proven using common technical evidence regarding the operation of the tracking technologies and the information uniformly transmitted to third parties. The court therefore remanded for further certification proceedings. However, it affirmed denial of certification for the patient-portal CMIA claim because plaintiffs had not shown that all portal users necessarily transmitted protected medical information.
* Dartmouth Pays $750,000 Following Oracle Breach: Dartmouth College agreed to pay $750,000 to settle a class action lawsuit arising from a massive 2025 data breach involving Oracle's E-Business Suite software, which the college used for payroll, human resources, accounting, and other administrative functions. The lawsuit alleged that Dartmouth failed to adequately protect the personal information of more than 96,000 individuals, including Social Security numbers and bank account information, after a cyberattack linked to the Clop ransomware group exploited a previously unknown zero-day vulnerability in Oracle's software. Under the proposed settlement, affected individuals may either claim up to $5,000 for documented losses related to the breach or receive an estimated $75 cash payment without documentation, and they are also eligible for two years of credit-monitoring services. Dartmouth denied any wrongdoing and stated that the settlement does not constitute an admission of liability. A final court hearing on the settlement is scheduled for November 2026.
Industry Updates:
* Qilin Leaks Law Enforcement Files Stolen from the ATF: A cybercriminal group believed to be operating out of Russia published files that appear to have been stolen from the Justice Department's Bureau of Alcohol, Tobacco, Firearms and Explosives. The ransomware gang Qilin had earlier taken credit for the breach and began posting the data to its dark web leak site that Monday. A review by CNN and independent researcher Ron Fabela found material on subjects of past ATF investigations, analyses of their phone communications, and files tied to specific agents and prominent cases involving armed robbery, arson, explosives and homicide, with a significant share linked to the Houston Field Division. The agency had disclosed the intrusion the prior week as a "major" incident requiring notice to Congress.
* NIST Finalizes Identity and Access Token Security Guidance: On Sept. 15th, the National Institute of Standards and Technology (NIST), in collaboration with the Cybersecurity and Infrastructure Security Agency, finalized NIST IR 8587, "Protecting Tokens and Assertions from Forgery, Theft, and Misuse," which addresses security risks affecting identity and access tokens in cloud environments and digital identity systems.
Identity and access tokens authenticate users and authorize access to email, cloud applications, and enterprise systems. They underpin modern cloud services, single sign-on, and zero trust architectures by allowing access without repeated authentication. If compromised, however, they can give threat actors the same access as legitimate users. NIST highlights a recent incident in which attackers used forged tokens tied to a stolen signing key to access federal agency email systems and steal more than 60,000 emails from one agency.
The guidance applies to cloud service providers and their customers and sets out principles and implementation considerations to reduce token forgery, theft, misuse, and unauthorized access.
NIST IR 8587 reflects growing regulatory and industry attention to identity-based attacks and token security. Organizations using cloud authentication, single sign-on, or federated identity services should review their token management practices to guard against theft, forgery, and misuse. The NIST guidance provides a benchmark for strengthening identity security controls across public- and private-sector environments.
* Aesto Health Data Breach Exposes Information of 9.5 Million Individuals: Aesto Health, a healthcare technology company that provides data migration, electronic health record exchange, and legacy data archiving services, reported that a cyberattack affected more than 9.5 million individuals. The incident involved unauthorized access to portions of Aesto's Amazon Web Services environment between Dec. 2nd and Dec. 18th, 2025. Following a forensic investigation, Aesto determined that an attacker may have acquired protected health information and personally identifiable information, including names, dates of birth, Social Security numbers, driver's license numbers, financial account information, medical information, health insurance information, and taxpayer identification numbers. The company reported 9,540,683 affected individuals to the U.S. Department of Health and Human Services. At least two dozen healthcare provider clients were affected by the incident.
* WeChat Vulnerability Used, AI, to Allow Zero-Click Access: After finding a vulnerability in the popular communications platform, WeChat, research group, Calif, developed WeWorm, a zero-click worm that exploited a memory-corruption vulnerability in WeChat's VoIP system to spread between iOS and Android devices. By simply calling a contact, an attacker could take over the victim's WeChat account without the victim answering or interacting with the phone, then use that compromised account to target additional contacts. Calif says its AI-assisted team discovered the vulnerability and developed working exploits and a cross-platform worm in a matter of weeks, highlighting how AI can accelerate sophisticated offensive-security research. WeChat was notified in July 2026 and subsequently mitigated the vulnerability through software and server-side fixes; Calif argues that the episode demonstrates both the risks posed by AI-enabled attackers and the potential for AI to help defenders discover and fix vulnerabilities more quickly.
* FBI Confirms Investigation of fbijobs.gov Compromise: The FBI is investigating claims by hacking group ShinyHunters that it compromised the FBIJobs.gov portal and obtained sensitive personal information belonging to FBI employees and job applicants. The FBI has not determined whether the breach originated within its own systems or through a third-party provider and said it is working to mitigate potential risks. ShinyHunters claims to possess data on thousands of agents and applicants, though those claims have not been independently verified. The group also said it was offended by statements in a May FBI advisory describing ShinyHunters as a cybercriminal organization that uses real or exaggerated claims of access to sensitive information to pressure victims for payment and may falsely claim to possess compromising information. ShinyHunters demanded that the FBI retract those statements.
Regulatory:
* TikTok Reaches a Settlement with Alabama Regarding Teen Usage: Attorney General Steve Marshall announced that Alabama reached a settlement with TikTok that will provide the state with at least $100 million, with the possibility of receiving up to $300 million if certain conditions are met. The settlement resolves Alabama's lawsuit alleging that TikTok designed addictive platform features, exposed young users to mental health risks, and misled the public about the safety of its app. In addition to the financial payment, TikTok agreed to implement a series of child-safety measures, including a two-hour daily usage limit for minors, mandatory breaks during extended use, restrictions on overnight access, stronger age-verification requirements, enhanced parental controls, limits on adult interactions with teen accounts, a ban on cosmetic filters for teen users, and a default non-personalized content feed for minors. The agreement was reached just before Alabama was scheduled to become the first state to take TikTok to trial over these allegations, and state officials described the settlement as a significant step toward increasing protections for children and holding social media companies accountable for youth safety.
* HHS OCR Reaches $700,000 HIPAA Settlement with Ambry Genetics Following Phishing Attack Affecting 225,000 Individuals: On Sept. 17th, HHS' Office for Civil Rights announced a $700,000 settlement with Ambry Genetics Corporation following a HIPAA Security Rule investigation tied to a 2020 phishing attack that compromised an employee email account and potentially exposed the protected health information of 225,370 individuals. The information involved included names, addresses, dates of birth, identification numbers, financial information, diagnoses, lab results, medications, and treatment information. OCR identified potential compliance failures, including an inadequate risk analysis, insufficient procedures for terminating workforce access to electronic PHI, and failure to use unique user identification in systems containing ePHI. Under a two-year corrective action plan, Ambry must conduct a comprehensive risk analysis, implement a risk management plan, revise Security Rule policies and procedures, strengthen user identification controls, and provide workforce training.
International Updates:
* South Korea Raises Data Breach Fines to 10% of Revenue: South Korea has raised the stakes for companies that mishandle personal data. Under revisions to the Personal Information Protection Act that took effect Sept. 11th, a company that intentionally or through gross negligence leaks the data of 10 million or more people can be fined up to 10 percent of total revenue, up from the prior cap of 3 percent of sales. The maximum applies to repeat intentional or grossly negligent violations within three years, or to breaches that follow a failure to comply with a corrective order. The rules also reward preparation, allowing reductions of up to 40 percent for sustained investment in privacy budgets, staff and equipment, and a separate reduction of up to 40 percent for early detection, prompt notification and containment.
* Irish Regulator Fines Google Euros403 Million Over Location Data Practices: Ireland's Data Protection Commission has fined Google Euros403 million (roughly $463 million US) after finding that the company violated the EU's General Data Protection Regulation through its handling of location data. The investigation focused on Google's "Web & App Activity," "Location History," and "Location Accuracy" features between 2018 and 2020. Although Google maintains that the case concerns historical policies and that it has substantially improved its location-data controls since 2019, the regulator ordered the company to bring its practices into compliance within six months. The penalty is the fourth-largest imposed by the Irish regulator, which has levied more than Euros4 billion in GDPR fines and is currently conducting three other investigations involving Google.
* Rogue AI Attack by OpenAI Breaches Australian Medicare Statistics Portal: Australian Prime Minister Anthony Albanese recently addressed an incident in which an OpenAI AI agent gained unauthorized access to Australia's public-facing Medicare statistics portal in June 2026. The agent had been conducting research into public medical spending but, after encountering access restrictions, found ways around them and accessed both public and non-public files, while reportedly also writing files to an internal server. At the time of the press conference, there was no evidence that personal Medicare information had been accessed or that the broader Services Australia network had been compromised, although a forensic investigation was still underway. Albanese criticized OpenAI for taking until Sept. 10th to notify the Australian Government and said the company acknowledged that its protocols had not been adequate. In response, the government established a taskforce to investigate the incident, consider potential law-enforcement and legislative responses, and use the findings to inform Australia's planned AI standards, emphasizing the need for safeguards that keep humans in control of AI systems.
* TikTok Accepts pound sterling12.7 Million Children's Privacy Fine: TikTok has withdrawn its appeals and accepted a pound sterling12.7 million fine imposed by the U.K. Information Commissioner's Office (ICO) for violations involving children's personal data. The ICO found that TikTok allowed as many as 1.4 million U.K. children under the age of 13 to use its platform in 2020, despite its own rules prohibiting children under 13 from creating accounts. The regulator also found that TikTok failed to obtain parental consent for the use of their data and did not adequately identify and remove underage users. TikTok's withdrawal of its appeals also allows the ICO to move forward with a separate investigation into the company's use of children's personal information in its recommendation systems.
State Actions:
* Delaware Expands Privacy Law Requirements: On Sept. 2nd, Delaware enacted H.B. 380, significantly amending the Delaware Personal Data Privacy Act (DPDPA), with the changes taking effect on Jan. 1st, 2027. The amendments lower the law's applicability thresholds, expanding coverage to additional small and mid-sized businesses. The law also imposes stricter requirements for the processing and sale of "sensitive data," requiring such processing to be reasonably necessary and proportionate to disclosed purposes and limiting sales of sensitive data to circumstances where such disclosures are strictly necessary to provide requested products or services. In addition, HB 380 requires controllers to conduct reasonable due diligence of processors and third parties, implement specified contractual protections for data sharing arrangements, and respond to new consumer requests regarding disclosures of personal data to third parties. Organizations that process personal data of Delaware residents should evaluate whether the amended DPDPA applies to their operations and review their data governance, vendor management, contracting, and consumer rights processes before the Jan. 1st, 2027, effective date.
* * *
This publication is intended for general informational purposes only and does not constitute legal advice or a solicitation to provide legal services. The information in this publication is not intended to create, and receipt of it does not constitute, a lawyer-client relationship. Readers should not act upon this information without seeking professional legal counsel. The views and opinions expressed herein represent those of the individual author only and are not necessarily the views of Clark Hill PLC. Although we attempt to ensure that postings on our website are complete, accurate, and up to date, we assume no responsibility for their completeness, accuracy, or timeliness.
* * *
Original text here: https://www.clarkhill.com/news-events/news/right-to-know-october-2026-vol-46/
[Category: BizLaw/Legal]
