Privacy & Cybersecurity Law Blog

On January 30, 2026, the Cybersecurity Administration of China released a Q&A document on policies and regulations for the security management of cross-border data transfers. 

On January 26, 2026, the Brazilian data protection authority (“ANPD”) announced that Brazil and the European Union agreed to mutually recognize the adequacy of each other’s data protection networks.

On January 15, 2026, the UK Information Commissioner’s Office published updated guidance on international transfers of personal data under the UK GDPR.

As we ring in the New Year, one thing remains the same: understanding the definitions and conditions in your insurance policy is critical. In a recent decision, a Florida federal court in Ohio Security Insurance Co. v. E Kelly Enterprises Inc. et al., No. 3:22-cv-24754, held that an insurer had no duty to defend or indemnify a general contractor and no duty to indemnify a subcontractor for damages from defective work on a naval base, based on the policy’s definition of “suit,” “property damage,” and allocation requirements. The decision highlights the importance of numerous issues in the context of commercial general liability policies, including the nuances of policy definitions, obtaining insurer consent when necessary, and allocation between covered and uncovered claims.