September 2026 Privacy, Security, and Artificial Intelligence Developments
The Blank Rome bulletin announced new legal steps including CIPA regulatory developments in California, AI rules for attorneys, and the New Jersey Kids Code Act.
The new bulletin published in September 2026 across the fields of privacy, cybersecurity, and artificial intelligence brought to light a series of important state-level legal and regulatory changes.
California Privacy and CIPA Regulations
In California, Senate Bill 690 (SB 690) was introduced to restrict the private right of action in CIPA lawsuits related to website tracking technologies. In this context, the oversight authority is intended to be vested in the California Attorney General.
Artificial Intelligence and Social Media Rules
The California Legislature approved Senate Bill 574 (SB 574), which imposes new obligations on lawyers and arbitrators using generative artificial intelligence, and Assembly Bill 1709 (AB 1709), which bans addictive social media features for minors.
Cyber Defense and Infrastructure Security
Governor Gavin Newsom announced the AI Cyber Defense Program, a first-of-its-kind initiative nationwide, aimed at protecting critical infrastructure against AI-driven cyber threats.
New Jersey Kids Code Act Law
Signed into law by Governor Mikie Sherrill, the New Jersey Kids Code Act established strict privacy and design requirements for minors, along with a private right of action on behalf of injured children.
Colorado and Washington Updates
The Colorado Attorney General's Office introduced automated decision-making technology and chatbot safety rules, while the Washington Attorney General released its first Data Privacy Report to the public.