Chambers 2026 Global Practice Guide for Cybersecurity – Sidley Austin

The Chambers Global Practice Guide for Cybersecurity 2026 has been published. The guide provides the latest legal information on cybersecurity law and regulation, including in relation to critical infrastructure, financial sector operation resilience, cyber-resilience, and ICT certification. The guide also covers the intersection of cybersecurity with data protection law, developments in AI and healthcare regulation.

The UK chapters of Cybersecurity 2026, covering “UK Law and Practice” and “UK Trends and Development,” were authored by Sidley lawyers William Long, Francesca Blythe, Eleanor Dodding, and Matthias Bruynseraede.
Click here to view the UK chapter.
This post is as of the posting date stated above. Sidley Austin LLP assumes no duty to update this post or post about any subsequent developments having a bearing on this post.
London
wlong@sidley.com
London
fblythe@sidley.com
London
edodding@sidley.com
London
mbruynseraede@sidley.com
The National Association of Insurance Commissioners (NAIC) held its Spring 2026 National Meeting (Spring Meeting) March 22–25, 2026. This blog post summarizes the highlights from this meeting in addition to interim meetings held in lieu of taking place during the Spring Meeting. Highlights include progress on addressing regulatory concerns related to indexed annuity illustrations, establishment of a new working group on market conduct modernization, exposure of a risk-based capital (RBC) adjustment framework for collateral loans, a Securities Valuation Office (SVO) report on resource strain caused by increased Private Letter Rating filings, multiple revisions to statements of statutory accounting principles (including guidance on sale-leasebacks, repurchase agreements and residential mortgage loans held in statutory trusts, and proposed disclosures for funding agreement-backed financing programs), and updates on the pilot phase of the AI Systems Evaluation Tool.
As courts have begun addressing generative AI in the privilege and work product context, they are also confronting related disputes in the context of protective orders. Recent decisions Morgan v. V2X, Inc. and Jeffries v. Harcros Chemicals, Inc. show that disagreements about how protective orders should address the use of AI in discovery — issues previously handled through negotiation — now will be informed by guidance from the courts.
For many years, the privacy community took the position that the state of California was the leading data privacy regulator. The state of New York, with its active cyber enforcement by the New York Department of Financial Services, was a close second. However, in the past two years, Texas has emerged not only as a significant privacy regulator but also as an aggressive enforcer of its laws.
David C. Lashway
Washington, D.C.
+1 202 736 8059
dlashway@sidley.com
William RM Long
London
+44 20 7360 2061
wlong@sidley.com
Francesca Blythe
London
+44 20 7360 2058
fblythe@sidley.com
Colleen Theresa Brown
Washington, D.C.
+1 202 736 8465
ctbrown@sidley.com
Thomas D. Cunningham
Chicago
+1 312 853 7594
tcunningham@sidley.com
Michael C. Hochman
Washington, D.C.
+1 202 736 8470
michael.hochman@sidley.com
Lauren Kitces
Washington, D.C.
+1 202 736 8097
lkitces@sidley.com
Stephen W. McInerney
Chicago
+1 312 456 3766
smcinerney@sidley.com
Catherine L. Muir
Washington, D.C.
+1 202 736 8921
catherine.muir@sidley.com
Ash Nagdev
Palo Alto
+1 650 565 7057
anagdev@sidley.com
Sheri Porath Rockwell
Century City
+1 310 595 9512
sheri.rockwell@sidley.com
Jennifer B. Seale
Washington, D.C.
+1 202 736 8640
jseale@sidley.com
Jonathan M. Wilan
Washington, D.C.
+1 202 736 8635
jwilan@sidley.com
John W. Woods Jr.
Washington, D.C.
+1 202 736 8060
jwoods@sidley.com

source