If you have heard of CIPA, BIPA, GIPA, or TCPA litigation, you may have an idea of where this post is headed. These acronyms reference federal and state laws that permit a private right of action for certain privacy-related claims, affording successful plaintiffs with statutory remedies. In a recent case, Bartholomew v. Parking Concepts,
Joseph J. Lazzarotti
Joseph J. Lazzarotti is a principal in the Tampa, Florida, office of Jackson Lewis P.C. He founded and currently co-leads the firm's Privacy, Data and Cybersecurity practice group, edits the firm’s Privacy Blog, and is a Certified Information Privacy Professional (CIPP) with the International Association of Privacy Professionals. Trained as an employee benefits lawyer, focused on compliance, Joe also is a member of the firm’s Employee Benefits practice group.
In short, his practice focuses on the matrix of laws governing the privacy, security, and management of data, as well as the impact and regulation of social media. He also counsels companies on compliance, fiduciary, taxation, and administrative matters with respect to employee benefit plans.
IRS Office of Professional Responsibility (OPR) Issues AI Guidance: Tax Professionals Also Face AI Ethics and Compliance Obligations
For much of the past two years, discussions regarding generative artificial intelligence (AI) in professional services seems to have focused on lawyers, and perhaps for good reason. Courts have sanctioned attorneys who submitted briefs containing fabricated case citations. In response to these and other mishaps, several state bars issued ethics opinions often applying existing professional…
Alabama State Bar Issues AI Ethics Guidance for Lawyers: Key Questions and Practical Answers
The Alabama State Bar has joined a growing number of jurisdictions providing formal guidance on lawyers’ use of artificial intelligence. Formal Opinion 2026-01, Artificial Intelligence Use: Best Practices Under Existing Professional Conduct Rules, does not create new ethical obligations. Instead, it explains how longstanding duties under the Rules of Professional Conduct apply when lawyers…
AI Glasses Not a Good Look in New York Courthouses
New York has become the first state to prohibit AI-enabled smart glasses and other recording-enabled eyewear in all state courthouses. The new policy reflects growing concern over the ability of these devices to discreetly capture audio, video, photographs, and AI-generated transcripts. Below are answers to some common questions about the new rule and what it…
AI in the Empire State, Two Bills Could Create New Compliance Obligations
New York organizations using artificial intelligence should keep a close eye on two pending state bills that could create new notice and reporting obligations. Both bills have passed the Senate and Assembly, but as of June 25, 2026, neither appears to have been signed by the Governor. Still, they offer a clear signal that New…
Green Mountain State Joins in State Privacy Effective 2028
Vermont has passed Senate Bill 71, a comprehensive privacy law that will regulate how covered entities collect, use, disclose, sell, and protect personal data.
The law is scheduled to take effect on January 1, 2028.
To whom does the law apply?
The law applies to people who conduct business in Vermont or produce…
New Louisiana Data Privacy Act Set to Take Effect in 2027
With the Governor of Louisiana’s signature on Senate Bill 386, Louisiana becomes one of the latest states to enact a comprehensive consumer privacy law, joining more than twenty states that have adopted similar frameworks in recent years. Like laws in Texas, Virginia, Colorado, and other states, the Louisiana Data Privacy Act (LDPA) adopts a…
AI Hallucinations in Court Filings Continue: Florida Supreme Court Responds with a New Certification Requirement
Artificial intelligence has quickly become part of the modern lawyer’s toolkit. Attorneys are using generative AI platforms to assist with legal research, drafting, editing, and document review. While these technologies can improve efficiency, a growing number of court filings across the country demonstrate a significant risk: AI-generated hallucinations, including fabricated case citations, nonexistent authorities, and…
Is a CCPA Risk Assessment Required When Using Productivity Management and Monitoring Platforms?
Key Takeaways
- Outlines key considerations for businesses using productivity management and monitoring platforms – such as, Teramind, ActivTrak, and Insightful – and whether their use may require a CCPA risk assessment.
- Identifies the specific CCPA risk assessment triggers most relevant to such productivity technologies.
Productivity management and monitoring platforms have become a fixture of the…
Is a CCPA Risk Assessment Required When Recording Customer Calls?
Key Takeaways
- Analyzes whether recording customer service and sales calls triggers the CCPA’s new risk assessment requirements.
- Identifies the specific CCPA triggers most relevant to call recording, particularly when AI analytics are applied to recordings.
- Notes related obligations under state wiretapping laws and other state privacy frameworks.
Recording customer calls is among the most common…