Apr. 8, 2026

Connected Cars: Privacy Compliance Guidance

Connected cars collect vast amounts of personal and sensitive passenger data, triggering complex and sometimes conflicting notice, consent, retention and data‑sharing obligations under privacy laws worldwide. This third article in a four-part series provides an overview of the privacy compliance challenges original equipment manufacturers face and offers guidance on best practices, with insights from experts at Toyota Motor North America, AlixPartners, Cooley, Foley & Lardner, Honigman, Mayer Brown, Morrison Foerster and Parker Poe. Part one covered FTC enforcement activity related to connected vehicles, part two discussed the legal framework and the final installment will examine the cybersecurity issues that connected cars present. See our two-part series on TV privacy: “Can Old Remotes Handle New Consent Requirements?” (May 18, 2022), and “Will the TV Industry Agree to Standardize Consent on Screen?” (May 25, 2022).

State Privacy Regulators Describe Collaboration and Priorities

State privacy regulators each have their own priorities but, as privacy laws evolve across the U.S., they are increasingly collaborating on shared issues. This article synthesizes commentary from California, Connecticut, Delaware and Indiana enforcers, all of whom are part of the Consortium of Privacy Regulators, on collaboration, cross-jurisdictional investigations, regulatory strategies and enforcement priorities. The discussion, moderated by Michael Macko, deputy director of enforcement at the California Privacy Protection Agency, took place during the IAPP Global Summit 2026 conference. See “State Privacy Enforcers Reveal Strategies, Priorities and Advice on Engagement” (Nov. 12, 2025).

Mitigating Cyber Risks From AI and Ever-Stealthier Adversaries

Today’s cyber threat landscape is marked by speed, scale and sustained evasion. Adversaries increasingly are using a combination of trusted access paths, AI-enabled acceleration and cross-domain movement to avoid detection, according to CrowdStrike’s 2026 Global Threat Report (Report). The key themes covered by the Report include AI issues, use of cross-domain attacks to deploy ransomware, China-nexus adversaries’ focus on network perimeters, use of supply chain attacks to evade traditional defenses, how adversaries’ objectives influence the zero-day vulnerabilities they exploit and increasing targeting of the cloud. This article synthesizes the significant takeaways from the Report and the insights provided by CrowdStrike senior vice president Adam Meyers in a related webinar. See “Defending Against Faster, Stealthier and More Sophisticated Cyber Adversaries” (Sep. 10, 2025).

Former Microsoft CPO Joins Manatt As National Advisor in Boston

Manatt, Phelps & Phillips has welcomed Julie Brill as a national advisor in the firm’s Boston office. She arrives from Microsoft, where she served as CPO and corporate vice president for global privacy, safety and regulatory affairs. For commentary from Brill, see “Tips From Big Tech Leaders on Navigating Global Privacy Regulations” (Dec. 3, 2025). For insights from Manatt, see “CPPA’s Tractor Supply Decision Offers Lessons As Enforcement Focus Moves From Education to Deterrence” (Oct. 22, 2025); and “Cookie Compliance Lessons From the Todd Snyder Settlement” (Jun. 11, 2025).