The national law firm of Hinshaw & Culbertson LLP is pleased to announce the election of 12 attorneys as new partners of the firm, effective July 1, 2018. Located in nine of the firm's offices throughout the U.S., the new partners reflect Hinshaw's commitment to long-term client relationships and prioritizing the client's success by providing a wide variety of sophisticated legal advice and counsel.

Explore Hinshaw partner Jason Oliveri’s insights in Privacy Daily on the New York Child Data Protection Act. Learn how this first-of-its-kind law enhances privacy protections for minors, introduces age flag requirements, and what steps organizations should take to ensure compliance.

Hinshaw partner Jason Oliveri authored a byline in RAIL: The Journal of Robotics, Artificial Intelligence & Law titled, "Autonomous Weapons and Artificial Intelligence: The Regulatory Priority Should, for Now, Be the Latter." The article discusses the military application of artificial intelligence (AI) and potential regulatory responses.

Hinshaw partner Jason Oliveri recently authored an article titled "The Evolving Right to Privacy: From Religious Practice to International Tech Branding Tool."

Hinshaw partner Jason Oliveri will join other industry experts for a collaborative roundtable discussion at the Global GRC, Data Privacy & Cyber Security ConfEx event on May 21, 2025.

Hinshaw partner Jason Oliveri will participate as a panelist in a virtual GeneralCounsel360 discussion titled "Data Privacy in the Age of Digital Transformation" on December 3, 2024.

Hinshaw partner Jason Oliveri will participate in a collaborative live and virtual discussion with other industry experts at the Global GRC, Data Privacy & Cyber Security ConfEx event on November 21, 2024.

In a Privacy & Cyber Bytes Alert, we review takeaways from the recently concluded Mortgage Bankers Association's Conference on Legal Issues and Regulatory Compliance. Lenders and servicers with consumer-facing platforms that collect personal information need to initiate cybersecurity compliance efforts immediately.

Effective October 29, 2018, the New Jersey Paid Sick Leave Law will require that all private sector employers, regardless of size, provide forty (40) hours of paid sick leave each benefit year to employees working in New Jersey. If the employer already offers a minimum of 40 hours of paid time off, the employer is in compliance with the law as long as employees can use the time for the purposes stated under the law, e.g., personal days, vacation days, or sick days. If the employer is not currently offering this benefit, here are some of the things the employer needs to know in order to fashion a compliant policy:

A growing number of employers are offering student loan repayment assistance as a means of attracting and retaining talent. Industries like tech, financial services, and health services are among the early adopters, offering variations of the same general benefit:  the employer agrees to pay a certain amount—either a set figure or a percentage of salary—toward their employee’s student loan debt. Since student loan repayment benefits are relatively novel, the rules for both employers offering the benefit, and the student loan servicers administering it, are not yet explicit.

If you are a business operating in the Sunshine and/or Lonestar state, then this alert is for you. As discussed further below, Florida recently issued regulations, effective July 18, 2024, clarifying certain requirements set forth in the Florida Digital Bill of Rights (FDBR), which went into effect on July 1, 2024.

Whether your company is a new fintech or a traditional financial institution with deep roots, you should be taking notice of the Consumer Financial Protection Bureau's (CFPB) October 27, 2022 announcement concerning Section 1033 of the Dodd-Frank Act.[1] Among other things, Section 1033 mandates that financial services companies provide consumers with access to the data they generate, such as payment histories and transaction records, in a usable electronic format. It further provides that the right to access be "subject to rules prescribed by the Bureau."     

Augustus Caesar once said, "if you want a rainbow, you have to deal with the rain." Presumably, this was said—in Latin—after he overhauled all aspects of ancient Roman life. Thousands of years later, the same sentiment holds true for those struggling with the quagmire of data privacy and protection laws proliferating in the United States (U.S.) and seeking to understand what they can do with the data they have collected in light of those laws. While compliance and understanding may feel like a colossal chore, in the end, you and your business might find that it was well worth the effort. 

Read our latest Privacy, Cyber & AI Decoded alert covering key compliance deadlines involving five state privacy laws, along with enforcement of the DOJ's Bulk Sensitive Data Rule taking effect.

Dive into our latest edition of Privacy, Cyber, & AI Decoded to explore important updates on AI regulation, data privacy, bulk data controls, and enforcement trends.

Discover key insights from the IAPP 2025 Global Summit, focusing on FTC enforcement priorities, AI regulation, and state privacy challenges for compliance professionals.

Hinshaw summer associate Andrew C. Clausen contributed to the research and drafting of this alert.

Eleventh Circuit Requires Sender to Have Knowledge That Fax Violates TCPA in Order to Impose Treble Damages

Watch What You Say: The Hypothetical Least Sophisticated Consumer