Feb. 11, 2026

When Thoughts Go Digital: Securing the Rise of Neurotechnology

Neurotechnology, anchored by brain‑computer interfaces (BCIs) that translate neural activity into machine‑interpretable signals, is rapidly moving from research labs into real‑world use, blurring the line between biology and computing. While BCIs promise transformative medical and functional benefits, they also introduce significant “neurosecurity” concerns as devices collect, transmit and store uniquely sensitive neural data. These risks mirror familiar challenges from other connected technologies but with higher stakes, given the intimate nature of the information at issue. In this guest article, Cooley partner Kristen Mathews and associate Nathaniel Kim outline key BCI capabilities, potential security vulnerabilities, state‑level protections for neural information and practical measures the industry is pursuing to mitigate cyber threats. See our two-part series on the sale of 23andMe’s genetic data: “Implications of the Motions for a Privacy Ombudsman and State Laws” (Apr. 16, 2025), and “Lessons for Companies Around Sensitive Data” (Apr. 23, 2025).

How Companies Can Meet Growing Regulatory Scrutiny Around Sharing Children’s Data

Handling minors’ data has become more complex as enforcement attention increases. That pressure grew last week when an FTC commissioner warned the agency is preparing to act against the “mass monetization” and profiling of children. Further underscoring these concerns, newly released research shows that children’s personal data is commonly shared without consent, while recent FTC and California enforcement actions reveal deep probes into companies’ controls around such sharing, including oversight of third-party software development kits. This article examines recent regulatory focus on the sharing of minors’ data, distills research findings and offers practical data management steps, including guidance on data-flow inventories and key contracting terms, with input from practitioners at Foley Hoag, Hunton and Pixalate. See “Enforcement Lessons From Disney and Four Other FTC Children’s Privacy Actions” (Jan. 28, 2026).

Managing Off‑Channel Communications in Internal Investigations

In virtually any organization, employees sometimes send work-related messages through channels other than those that are officially condoned. Such off-channel communications can make collecting evidence in an internal investigation difficult. At a panel during SCCE’s 24th Annual Compliance & Ethics Institute, experts shared advice on constraining and tracking off-channel communications. This article distills their insights. See “SEC Penalizes Adviser for Failing to Preserve Off-Channel Communications” (Sep. 18, 2024).

CPPA Welcomes Former Meta Executive As Its First Chief Auditor

Sabrina Ross has joined the California Privacy Protection Agency (CPPA) as chief auditor of the agency’s newly formed audits division. Ross most recently served as director of public policy at Meta. For insights from the CPPA, see “State Privacy Enforcers Reveal Strategies, Priorities and Advice on Engagement” (Nov. 12, 2025); and “Touring California’s New Dashboard for Permanent Erasure of Personal Information” (Nov. 12, 2025).

Technology and Privacy Partner Joins Alston & Bird in Silicon Valley

Alston & Bird has welcomed Cynthia Cole to its Silicon Valley office as a partner in its technology & privacy group. She arrives from Baker McKenzie. For commentary from Cole, see “Cookie Compliance Lessons From the Todd Snyder Settlement” (Jun. 11, 2025). For insights from Alston & Bird, see “Strategies for Addressing Cybersecurity Threats to a Prime Critical Infrastructure Target – Data Centers” (Sep. 24, 2025); and “Strengthening Cyber Defenses in an Ever-Evolving Threat Landscape” (Jun. 4, 2025).