Who determines these “best practices?” Seems like it would be a huge First Amendment problem.

I’m incredibly honored that Eric brought me onto this project. I have been so fortunate to have him as a friend and mentor for over a decade, and he’s one of the smartest people I know. I’m thrilled to be working on a third project with Hopkins, which takes great care to produce excellent books.

I’m very excited to share that Eric Goldman and I have signed a contract with Johns Hopkins Press to publish a book, ‘Net Benefits, which explains how the Internet has improved humanity. It’s an argument that I feel strongly about, and in today’s debates it is vital to present it clearly.

Judge Bumatay cited my book, The United States of Anonymous, seven times in his dissent to the Ninth Circuit’s new opinion, Americans for Prosperity v. Meyer.

Living in Central time zone and scheduling a lot of calls with Pacific and Eastern time zones requires me to do far more math than I’d prefer.

Just found the third published citation to an article that sounds like something I would write but most certainly is not something that I wrote. All within the past six months. Odd!

Yes, we have 20-year-old state data breach notice laws that are very effective in ensuring you learn that your credit card number was stolen a few months ago.

People are becoming worried that the U.S. has no laws that are effective against AI-driven data breaches, but wait until they learn that the U.S. also has no laws that are effective against human-driven data breaches.

I published the fourth edition of my cybersecurity law textbook less than a year ago but I suppose I need to do a fifth edition like now.

I’m particularly curious about the Census Bureau incident - the agent obtained data from thr Census website using login credentials that it found online but it wasn’t a breach. So what data did it obtain? Was it already public data?

The video of my fireside chat with FCC Commissioner Anna Gomez is up.

“Facebook has this weird legal protection where they’re defined as a phone company.”

The new season of The Paper has a Section 230 reference!

Teaching cybersecurity law in fall 2026 means that you can’t really finalize your plans until the evening before class.

The judge has yet to indicate how he’ll rule on the motion, but so far he has seemed very hostile to xAI and particularly angry that the company took nearly 3 months to file this suit. So I wouldn’t be surprised if he denies the motion and the case bounces around in the d ct. for a while.

Important procedural updates in xAI’s lawsuit challenging MN’s AI nudification law. Last week the judge denied the preliminary injunction but avoided ruling on xAI’s (strong) First Amendment arguments. xAI now seeks an expedited injunction pending its appeal to CA8 The state has opposed xAI’s motion

Judge Donovan Frank today denied X.Ai’s motion for a preliminary injunction blocking Minnesota’s AI nudification law, but refrained from ruling on the law’s constitutionality (he focused on the likelihood of injury to X.Ai and other factors). X.Ai has appealed to the Eighth Circuit.