The Data Chronicles

AI regulation in the United States is at an inflection point. A new executive order, emerging legislation, and shifting political dynamics are rapidly reshaping the policy landscape for AI developers and adopters.  In this episode of The Data Chronicles, we examine the administration’s latest executive order on AI innovation and security, which introduces a voluntary framework for pre-release revi...

State-level data regulation in the United States is accelerating, with a growing patchwork of laws reshaping how organizations approach privacy, artificial intelligence, and online safety.  In this episode of The Data Chronicles, we provide a 2026 legislative wrap-up, examining how new comprehensive privacy laws in states like Oklahoma and Alabama, alongside emerging frameworks in Louisiana, are r...

Data protection in the United Kingdom is entering a new phase of post‑Brexit divergence, introducing targeted but impactful changes across regulatory governance, enforcement, and day‑to‑day compliance.   In this episode of The Data Chronicles, we examine how the Data (Use and Access) Act 2025 is reshaping UK data protection through reforms to the ICO’s structure, new approaches to cookies, automat...

Cybersecurity regulation in Europe has entered a period of rapid expansion and fragmentation, moving well beyond traditional data protection into a complex framework governing enterprise security, product security, sector specific obligations, and supply chain risk.  In this episode of The Data Chronicles, we examine how evolving regimes such as NIS2, the Cyber Resilience Act, DORA, and proposed r...

AI enforcement in the United States is emerging through legacy laws, creative pleading theories, and increasing regulatory scrutiny rather than a single statute or regulator. In this episode of The Data Chronicles, we examine how AI-related risk materializes once it moves into litigation and enforcement — from copyright and privacy class actions to consumer protection claims, product liability, an...

Cybersecurity enforcement is entering a new phase – one where technical failures are increasingly reframed as fraud risk.   This episode of The Data Chronicles explores how the U.S. Department of Justice is using the False Claims Act to pursue alleged misrepresentations about cybersecurity controls, compliance, and incident disclosure in government contracts and grants.   We examine emerging enfor...

AI regulatory enforcement is accelerating – often under laws that were conceived well before the unstoppable emergence of AI. This episode of The Data Chronicles examines how regulators and courts across Europe and beyond are applying existing frameworks, from the GDPR to consumer and competition law, to AI development and deployment. We explore emerging enforcement patterns, including scrutiny of...

AI and intellectual property are evolving fast – and creating real uncertainty for companies building with or around AI.  This episode of The Data Chronicles breaks down the key IP claims emerging today, from copyright and DMCA theories to right of publicity, trademark, and output based risks.  We look at how early court decisions are treating AI training and outputs, why plaintiffs are pivoting t...

Data brokers sit at the center of a fast-shifting legal landscape.  This episode of The Data Chronicles breaks down the expanding patchwork of state data broker laws, from registration and public listings to how these obligations interact with broader privacy requirements. It also looks at the stigma tied to the “data broker” label, how regulators and plaintiffs’ lawyers are using registration dat...

In our annual “Look Back, Look Forward” edition of The Data Chronicles, Scott Loughlin and Eduardo Ustaran, co-leads of Hogan Lovells’ Global Data, Privacy and Cybersecurity practice, reflect on the most important developments in privacy, cybersecurity, and data regulation in 2025 and share their outlook for 2026. It has become the most popular episode of the year, drawing strong interest from lis...

What can businesses expect from the U.S. Federal Trade Commission on privacy and data enforcement as we move into 2026? In this episode of The Data Chronicles, host Scott Loughlin is joined by Cobun Zweifel-Keegan, Managing Director at the IAPP, for a practical year-end review of the FTC’s 2025 enforcement priorities and what they signal for the year ahead.   Together, Scott and Cobun break down h...

India has taken a major step in reshaping its digital future. After years of drafts and debate, the country has finalized the Digital Personal Data Protection Act (DPDPA) and issued detailed rules that bring the law fully to life. With implementation now scheduled over the next 18 months, organizations have clear timelines and a more definitive view of the significant compliance work ahead.  In th...

The U.S. Department of Justice’s Data Security Program is reshaping how companies manage cross-border data activities. This episode of The Data Chronicles breaks down what the rule does, why it was created, and the types of transactions it restricts or prohibits—from data brokerage to vendor access to bulk genomic data. Host Scott Loughlin is joined by Hogan Lovells partner James Denvil and associ...

In this episode of The Data Chronicles, host Scott Loughlin is joined by Hogan Lovells partners Eduardo Ustaran and Charmian Aw to examine how regulators are rethinking the relationship between AI, innovation, and privacy. They discuss why many regulators view data protection rules not as obstacles, but as guardrails that can support responsible AI development through tools like impact assessments...

How are U.S. states shaping the future of artificial intelligence? In this episode of The Data Chronicles, we unpack The State of State AI, the latest report from the Future of Privacy Forum (FPF) analyzing more than 200 AI-related bills introduced across 42 states.  Host Scott Loughlin is joined by Justine Gluck, a policy analyst at FPF, to discuss how lawmakers are shifting toward targeted, tran...

In this episode of The Data Chronicles, host Scott Loughlin welcomes Adam Smith, Regulatory Lead – Cybersecurity at Southwest Airlines, to explore the evolving landscape of cybersecurity in the transportation sector. Together, they fly through the real-world stakes of protecting critical infrastructure – from airports and railways to the systems that underpin national security. The conversation un...

Across the globe, governments are rethinking how to keep kids safe online. New laws in the UK and the U.S. are driving a wave of age verification and content regulation measures that could reshape how young people experience the internet and how platforms operate. In this episode of The Data Chronicles, host Scott Loughlin is joined by Hogan Lovells associates, Rob Fett and Georgia Crawford from L...

Discover how the latest U.S. health tech initiative is transforming patient data access and interoperability. In this episode of The Data Chronicles, host Scott Loughlin is joined by Hogan Lovells partner Melissa Bianchi to discuss the drive toward seamless digital health records, the rise of public-private partnerships, and the future of secure digital identity in healthcare. They explore what th...

Like many others, you have been scammed. Is all hope lost? Maybe not.    On this episode of The Data Chronicles, host Scott Loughlin is joined by Hogan Lovells colleagues, Lauren Berkebile and Byron Phillips, to break down today’s most common online fraud schemes and what to do if your organization gets hit.   They trace the shift from the internet’s initial gift card scams to today’s highly targe...

Consent is one of the most misunderstood concepts in digital privacy.  Every click, swipe, and scroll can trigger a data transaction, yet today’s reliance on cookie banners and CMPs leaves companies exposed. As regulators grow more sophisticated and laws like CIPA and VPPA add new risks, it’s clear consent needs a serious rethink.   In this episode of The Data Chronicles, host Scott Loughlin is jo...

In this episode of Data Chronicles, host Scott Loughlin explores the challenges of defining artificial intelligence (AI) under emerging laws, including under the EU AI Act. He is joined by Hogan Lovells partner Etienne Drouard and senior associate Olga Kurochkina to discuss the difficulties in drawing clear lines around what qualifies as AI, the importance of that definition under the EU AI Act fo...

In July 2025, the Trump administration made its first major move in shaping U.S. policy on artificial intelligence, releasing an AI Action Plan after revoking President Biden’s earlier executive order. Host Scott Loughlin is joined by Hogan Lovells partner Cybil Roehrenbeck to break down the plan and its accompanying executive orders, which aim to accelerate development of AI infrastructure, promo...

Can AI run the government?     In this episode of The Data Chronicles, Scott Loughlin talks with Taka Ariga, former Chief AI Officer at OPM and Chief Data Scientist at GAO, about how the US federal government is approaching its use of AI.  With a focus on the benefits and risks created by AI in the public sector, Scott and Taka explore the impact of AI on the public workforce, public services, nat...

As states race to define the rules of the digital road, 2025 is already proving to be a pivotal year for data legislation.   In this episode of The Data Chronicles, host Scott Loughlin is joined once again by Hogan Lovells colleague Harsimar Dhanoa to unpack the latest developments in state-level laws on privacy, AI safety, and more.   With surprising shifts and emerging trends reshaping how data...

In the latest episode of The Data Chronicles, Scott Loughlin, along with several members of the privacy and litigation team - Etienne Drouard, Vassi Iliadis, and Katie McMullan - are featured in a webinar that dives into the complex global legal, litigation, and regulatory challenges surrounding cookies. Covering topics such as banner design, sensitive data opt-ins, “accept or pay” models, and cro...