On September 21, 2026, New York Governor Kathy Hochul announced New York’s next steps in implementing the Responsible AI Safety and Education (RAISE) Act, which establishes new safety, transparency and reporting requirements for developers of frontier models. New York is not alone, as California, Connecticut and Illinois have also enacted similar laws. The RAISE Act has significant overlap with California’s Transparency in Frontier Artificial Intelligence Act (SB 53), a law we discuss, along with other recent California AI legislation, in our prior article, New California AI Laws.
Articles Posted in Cybersecurity
Unpacking the House Homeland Security Subcommittee on Cybersecurity and Infrastructure Protection Hearing on AI Security
On June 4, 2026, the House Homeland Security Subcommittee on Cybersecurity and Infrastructure Protection held a hearing on “The AI Security Landscape: How Frontier Models, Agentic AI, and AI Coding Tools Are Reshaping Cybersecurity and Critical Infrastructure Resilience.” The hearing focused on how advanced AI systems are changing both sides of the cybersecurity equation: giving defenders new tools to identify, prioritize and remediate vulnerabilities, while also giving adversaries the ability to scale vulnerability discovery, exploitation, reconnaissance and malware development.
In “House Homeland Security Hearing Highlights Growing Cybersecurity and Critical Infrastructure Risks of AI,” colleagues Shruti Bhutani Arora, Brian Finch and Nathan Banks identify the key takeaways from the hearing, potential policy and rulemaking signals, and the main issue areas for clients developing, deploying or relying on AI-enabled cybersecurity, coding or infrastructure tools.
California AG Announces Largest CCPA Penalty to Date in First Data Minimization Case
On May 8, 2026, California Attorney General Rob Bonta, joined by district attorneys from San Francisco, Los Angeles, Napa and Sonoma counties, announced a proposed $12.75 million settlement with a connected vehicle services provider over alleged CCPA violations involving the collection, retention, use and disclosure of vehicle data. The California Privacy Protection Agency’s Enforcement Division assisted in the investigation, which followed a broader CPPA sweep of connected vehicle privacy practices.
Consumer Protection Dispatch


