Israeli Supreme Court Imposes Duties on Organizations Using AI

Transparency regarding the use of artificial intelligence (AI) and human oversight over AI outputs – these are some of the new duties imposed by the Israeli Supreme Court’s recent landmark decision on artificial intelligence (Administrative Appeal 63194-08-25 Cohen v. Ramat Gan Municipality et al. (March 23, 2026)). The decision was delivered on an appeal filed by a father of ...

Washington State and Oregon Pass Key AI Bills

Washington State’s legislature passed two AI bills. The first is Bill 2225, introduced at the request of Governor Ferguson. It regulates AI companion chatbots — defined as AI systems with natural language interfaces that provide adaptive, human-like responses, exhibit anthropomorphic features, and sustain relationships across multiple interactions. The definition excludes bots used solely for business operations, customer service, or technical ...

Launching our DPO Service!

We are pleased to announce the expansion of Pearl Cohen's Cyber, Privacy, and Copyright Group with the launch of comprehensive, tailored DPO (Data Protection Officer) services for organizations.

Who is required to appoint a DPO

Amendment 13 to Israel's Privacy Protection Law established a mandatory DPO appointment requirement, partly mirroring the GDPR’s longstanding requirements to appoint a DPO. Among the ...

California Issues $1.1 Million Fine for Privacy Violations Involving Students

On March 3, 2026, the California Privacy Protection Agency (CalPrivacy) Board issued a decision requiring PlayOn Sports to pay a $1.1 million administrative fine and overhaul its business practices, marking CalPrivacy’s first enforcement action addressing privacy violations involving students and California schools. The settlement, reached in January 2026, represents a significant escalation in state privacy enforcement and signals that CalPrivacy ...

EU Court of Justice Defines Limits to the GDPR Right of Access

On March 19, 2026, the Court of Justice of the European Union issued its judgment in *Brillen Rottler GmbH & Co. KG v. TC* (Case C-526/24), addressing whether a controller may refuse even a first request for access as “excessive” under Article 12(5) of the GDPR, and whether a data subject can claim compensation under Article 82(1) for infringement ...

EU Advances Simplification of the AI Act and the 2026 Compliance Date May Be Postponed

On March 18, 2026, the European Parliament’s Committee on the Internal Market and Consumer Protection (IMCO) and the Committee on Civil Liberties, Justice and Home Affairs (LIBE) adopted their joint negotiating position on the European Commission’s proposed Digital Omnibus on AI, which seeks to simplify the implementation of the EU AI Act. The Final Compromise Amendments will serve as the ...

Trump Administration Releases New National Cybersecurity Strategy and AI Policy

On March 6, 2026, the Trump Administration released “President Trump’s Cyber Strategy for America” alongside an Executive Order titled “Combating Cybercrime, Fraud, and Predatory Schemes Against American Citizens.” Together, these documents articulate the Administration’s comprehensive cybersecurity posture, organized around the offensive disruption of adversaries, the deregulation of industry, and the protection of American citizens from transnational cybercrime.

The strategy document ...