Jun. 3, 2026

Joint Guidance on AI Agent Security Carves a Path to International Standards

Developing greater use of AI agents has become a strategic business imperative for many companies, but they struggle to secure and govern their agent deployments because of a lack of neutral frameworks or guidance. The Cybersecurity and Infrastructure Security Agency, National Security Agency and four international counterparts filled that gap last month when they issued lengthy guidance (Guidance). The Guidance lists dozens of best practices for companies to adopt, while signaling raised government expectations for agent security. This article discusses the Guidance’s recommendations and impact, and provides insights on what companies should do while standards slowly develop, with perspective from practitioners at Freshfields, Jones Walker, Norton Rose and Panoptic Systems. See “Eyewitness Accounts and Recommended Actions to Counter AI’s Strain on Cyber Defense” (May 6, 2026).

Strengthening the Business Case for Privacy Investment

Privacy teams might become more effective at securing sufficient budget by linking privacy initiatives to measurable business outcomes rather than to a “the government’s going to get us” narrative. At this stage, underfunded C‑suites are aware of enforcement risk – they just have chosen to accept it. To secure more budget, CPOs should shift the pitch toward operational impact, suggested Aaron Weller, Privacy Innovation & Assurance Leader at HP, during a webinar on building a better business case for privacy. This article covers ways to position privacy as an element of business infrastructure rather than as a cost center, distilling insights from Weller and Ricoh USA’s former CPO. See “How CPOs Can Manage Evolving Privacy Risk and Add Value to Their Organizations” (Mar. 12, 2025).

A Quick Start Guide to Risk Assessments in Trump 2.0

Fast-moving policy and enforcement changes in 2026 are testing traditional risk assessment approaches. This guide shows how companies can adapt their processes to remain nimble and aligned with evolving priorities during the second Trump administration. See “Unifying Risk Assessments: Breaking Silos to Enhance Efficiency and Manage Risk” (Jan. 29, 2025).

Cooley Strengthens Cybersecurity, Data and Privacy Practice

Cooley has welcomed Meredith Halama and Katie Cramer to its litigation department’s cyber/data/privacy practice. Halama joins as a partner in the firm’s Washington, D.C., office, and Cramer is of counsel in the Denver office. Both attorneys arrive from Perkins Coie and specialize in the application of consumer privacy laws to advertising technology. For insights from Cooley, see “Eyewitness Accounts and Recommended Actions to Counter AI’s Strain on Cyber Defense” (May 6, 2026); and “Connected Cars: Privacy Compliance Guidance” (Apr. 8, 2026).

Privacy, Cybersecurity and AI Partner Joins McDermott in Brussels

Elisabeth Dehareng has joined McDermott Will & Schulte in its regulatory practice group as a partner based in Brussels. She arrives from Baker McKenzie. For insights from McDermott, see “Connected Cars: Addressing Cybersecurity Issues” (Apr. 22, 2026); and “Cookie Compliance Strategies for 2026” (Apr. 15, 2026).