Regulatory Oversight Blog

Make sure to visit Troutman Pepper Locke’s Regulatory Oversight blog to receive the most up-to-date information on regulatory actions and subscribe to our mailing list to receive a monthly digest.

Regulatory Oversight will provide in-depth analysis into regulatory actions by various state and federal authorities, including state attorneys general and other state administrative agencies, the Consumer Financial Protection Bureau (CFPB), and the Federal Trade Commission (FTC). Contributors to the blog will include attorneys with multiple specialties, including regulatory enforcement, litigation, and compliance.

In This Issue:


Troutman Pepper Locke Spotlight

Compliance in the Wild West — How State AGs Are Using Traditional Legal Frameworks to Address AI Business Practices

By Ashley L. Taylor, Jr., Clayton Friedman, Daniel Waltz, and Kyara Rivera Rivera

Newsfeeds are saturated with dramatic headlines about artificial intelligence (AI) — self-driving cars, AI-generated art, hallucinated legal briefs, and predictions of technological dystopia. The constant noise can obscure a more practical reality: Artificial intelligence is, at its core, a tool. However, it does not relieve companies of their longstanding obligations to treat consumers fairly or comply with existing state law.

Read more

State AGs Will Dominate Post-Chevron Litigation

By Ashley L. Taylor, Jr.

Ashley L. Taylor Jr., co-leader of Troutman Pepper Locke’s State AG Practice Group, appeared in the September–October 2026 issue of The Journal of Federal Agency Action for his article, “State Attorneys General Will Dominate Post-Chevron Litigation.” The article was co-authored with Paul Nolette, a professor at Marquette University, and Aaron M. Frey, the AG of Maine.

Read more

States Are Cracking Down on Algorithmic Pricing. Are You Ready?

By Clayton Friedman, Ashley L. Taylor, Jr., Namrata Kang, and Kyara Rivera Rivera

Clayton Friedman, Ashley L. Taylor, Jr., Namrata Kang, and Kyara Rivera Rivera, of the firm’s State AG Practice Group, were published in the July 22, 2026, Bloomberg Law for their article, “States Are Cracking Down on Algorithmic Pricing. Are You Ready?”

Read more

Justices’ Ruling Alters Playing Field for State Subpoena Suits

By Ashley L. Taylor, Jr., Matthew Berns, and Monica Coscia

For the recipient of a subpoena from a state AG or other state regulator, the prospect of successfully blocking the subpoena through litigation can seem dim.

State laws governing investigative subpoenas may be permissive, and state judges who hear motions to quash may be sympathetic to the regulator. Federal courts may offer an attractive alternative — at least when federal law provides a basis for challenging the subpoena — but subpoena recipients have been required to overcome significant procedural hurdles before federal courts even consider the merits of their claims.

Read more


Regulatory Oversight Podcast Updates

Point-of-Sale Finance Series: State AGs Filling the Federal Void in Point-of-Sale Finance Enforcement

By Michael Yaghi, Lane Page, and Taylor Gess

In this crossover episode of Regulatory Oversight and The Consumer Finance Podcast, Mike Yaghi and Lane Page join Taylor Gess from Troutman Pepper Locke’s Consumer Financial Services Practice Group to discuss the hottest areas of state regulatory activity in the point-of-sale space. With federal consumer protection enforcement pulling back in certain areas under the current administration, state regulatory agencies are stepping into the spotlight to take an industrywide approach to point-of-sale finance.

Read more

Regulatory Intelligence Platform: Using AI and Curated Data to Defend Clients and Support Proactive Compliance

By Stephen C. Piepgrass, David Navetta, and Daniel Waltz

In this episode of Regulatory Oversight, host Stephen Piepgrass sits down with colleagues Dave Navetta and Dan Waltz to explore how state AG enforcement is accelerating across privacy, cybersecurity, and AI, and to introduce Troutman Pepper Locke’s AI-fueled Regulatory Intelligence Platform. The discussion opens with a look at the evolving AG enforcement landscape, examining how state regulators have become more active, coordinated, and consequential for companies operating across the U.S.

Read more


Payments Pros Podcast Updates

Payments Compliance and the FTC’s Focus on Subscription Practices

By Keith J. Barnett

In this episode of Payments Pros, host Keith Barnett examines a recent FTC enforcement action involving alleged violations of the FTC Act and ROSCA. Keith discusses the FTC’s continued focus on negative option features, automatic renewals, subscription disclosures, free trial conversions, and cancellation practices, and explains why these issues remain important for companies operating in the payments ecosystem.

Read more


SEC Updates

SEC Forms New Retail Fraud Working Group to Target Investor Fraud

By Jay Dubow and Ghillaine Reid

On July 7, the U.S. Securities and Exchange Commission (SEC) announced the creation of a new Retail Fraud Working Group within its Division of Enforcement. The initiative represents a structural expansion of the SEC’s enforcement capabilities and has direct implications for broker-dealers, investment advisers, and other regulated entities that serve retail clients. This is consistent with prior statements made by SEC Chairman Paul S. Atkins about focusing the SEC’s Division of Enforcement on protecting retail investors.

Read more


Tobacco Updates

Advocacy Groups Sue FDA Over May 2026 Enforcement Guidance — What Industry Needs to Know

By Bryan Haynes, Agustin Rodriguez, and Nick Ramos

As our Tobacco + Nicotine team previously reported, FDA’s May 8, 2026 guidance (the 2026 Guidance or the Guidance) on enforcement priorities for certain unauthorized ENDS and nicotine pouch products created a path for products with pending premarket tobacco product applications (PMTAs) to remain on the market. That Guidance is now being challenged in federal court by advocacy organizations, threatening the viability of FDA’s enforcement discretion.

Read more

Federal Court Finds FDA Likely Failed to Assess Economic Impact of PMTA Rule on Small Nicotine Pouch Manufacturers

By Bryan Haynes, Agustin Rodriguez, Michael Jordan, and Val Fesenko*

In June, the U.S. District Court for the Middle District of Florida made public an order that stayed a Food and Drug Administration (FDA) refuse to file (RTF) determination, finding that the FDA likely violated the Regulatory Flexibility Act (RFA) and the Administrative Procedure Act (APA) when it promulgated its 2021 PMTA rule based on a small-business certification that the court described as “facially false.” The RTF letter is stayed pending final judgment.

Read more

FDA Proposes Foreign Manufacturing Establishment Registration and Product Listing Requirements

By Bryan Haynes, Agustin Rodriguez, Zie Alere, and Val Fesenko*

On June 29, 2026, the FDA published a notice of proposed rulemaking (NPRM) titled “Establishment Registration and Product Listing for Tobacco Products,” which would, for the first time, require foreign tobacco product manufacturers to register their manufacturing establishments and list their products with the agency. Domestic manufacturers are already subject to these registration and listing requirements; foreign manufacturers are not. This regulation, if finalized, would close that gap.

Read more


Gaming Updates

When ‘Skill-Based’ Isn’t: The Papaya Gaming Verdict and Its Implications for Mobile Gaming Operators

By Stephen C. Piepgrass and Ayana Brown

On July 28, U.S. District Judge Denise Cote of the Southern District of New York entered a judgment against Papaya Gaming Ltd. in Skillz Platform Inc. v. Papaya Gaming Ltd., No. 1:24-cv-01646. The ruling followed an April jury verdict of $420 million in damages; the court separately awarded $719 million in disgorgement — an alternative remedy the plaintiff may elect in lieu of damages — along with $10.1 million in attorneys’ fees. The lawsuit stemmed from Papaya’s alleged misrepresentation that its mobile cash tournament games rewarded player skill, when the outcomes were instead shaped by undisclosed bots designed to replicate a house advantage.

Read more


Privacy + Data Updates

Years in the Making, Suspended in a Day: DoD/W Halts CMMC Phase II but Keeps Baseline Cybersecurity Obligations

By Michael Barnicle, Hilary Cairnie, Peter Jeydel, Lu Reyes, Bryan Williamson, Bonnie Gill, Anthony Pappas, and Trey Smith

On July 13, 2026, the U.S. Department of Defense/War (DoD/W) announced the immediate suspension of Cybersecurity Maturity Model Certification (CMMC) Phase II requirements — scheduled to take effect on November 10, 2026 — pending a top-to-bottom review by a newly established CMMC Reform Task Force. The announcement, formally titled “Removing Barriers to Defense Industrial Base Expansion: Immediate Suspension and Strategic Review of Cybersecurity Maturity Model Certification Requirements,” came as a surprise reversal after years of rulemaking activity stretching back to 2019.

Read more

State AGs Reach Novel Multistate Settlement With Genetic Testing Company 23andMe

By Troutman Pepper Locke State Attorneys General Team, Kaitlin Clemens, and Bianca Nalaschi

On July 14, 2026, a multistate group of 42 state AGs announced a $150 million settlement with direct-to-consumer genetic data testing company 23andMe related to a 2023 data breach involving 6.9 million customers’ data. The actual settlement funds, however, are limited to $18 million to be split among the states due to related bankruptcy proceedings involving the company.

Read more

Regulatory Intelligence Platform: An Untapped Resource for Responding to Regulators and Proactively Mitigating Privacy, Security, and AI Regulatory Risk

By Stephen C. Piepgrass, David Navetta, and Daniel Waltz

At a high level, privacy, information security, and AI legal risks are influenced by three factors: (1) new legislation; (2) private litigation (often consumer class actions); and (3) regulatory enforcement. Troutman’s 360 approach combines the experience and knowledge of its RISE group and Privacy + Cyber + AI litigation and advisory teams to address all three prongs. We have taken it a step further using AI to analyze over 300 privacy, security, and AI regulator activities since 2020 conducted by state AGs and privacy regulators. Troutman’s resulting Regulatory Intelligence AI model provides insights that were previously untapped and gives our clients an advantage in addressing AG actions, as well as insights that support data-driven and risk-based compliance.

Read more

New Jersey Enacts the Nation’s Costliest Data Broker Law Yet

By Troutman Pepper Locke State Attorneys General Team, Laura Hamady, and Shelby Dolen

On June 30, 2026, New Jersey enacted legislation A5328 (P.L.2026, c.25), which will expose a broad swath of U.S. companies to data broker registration fees ranging from $5,000 to $1.5 million annually. The new legislation is not limited to data brokers in the conventional sense. It applies generally to any company that sells or licenses personal data of New Jersey residents, including those with direct customer relationships. Much of the law takes effect immediately, so companies should begin reviewing the requirements now to comply.

Read more

Florida AG and Roku Resolve Children’s Data Privacy Enforcement Action

By Troutman Pepper Locke State Attorneys General Team and Laura Hamady

On June 26, 2026, Florida AG James Uthmeier and Roku, Inc. announced a negotiated resolution of Florida’s enforcement action filed under the Florida Digital Bill of Rights (FDBR). Under the agreement, Roku will enhance its child protection features by giving parents greater control over their children’s streaming experience. The resolution includes no finding of wrongdoing and no civil fine.

Read more


Advertising + Marketing Updates

Bipartisan Coalition of State AGs Asks FCC to Strengthen Rules Against Illegal Robocalls

By Troutman Pepper Locke State Attorneys General Team

On July 7, a bipartisan coalition of 49 state AGs sent a letter to the Federal Communications Commission (FCC) urging the adoption of stronger measures to combat illegal robocalls. The letter represents another action by the state AGs’ Anti-Robocall Multistate Litigation Task Force, which was established in 2022 to crack down on illegal robocalls.

Read more

New Jersey Signals Focus on ‘Junk Fees’ Regulation and Enforcement

By Troutman Pepper Locke State Attorneys General Team

In June, New Jersey Governor Mikie Sherrill and AG Jennifer Davenport announced a new statewide initiative on “junk fees.” With this announcement, New Jersey joins other states that have targeted “junk fees” as part of a broader focus on affordability.

Read more


Consumer Protection Updates

New Jersey Consumer Fraud Act Now Covers Insurance Brokers, Agents, and Producers

By Troutman Pepper Locke State Attorneys General Team

On July 15, 2026, the New Jersey Supreme Court issued a decision overturning lower court rulings that had shielded “semi-professionals” — including insurance brokers, agents, and producers, among others — from regulation and litigation under the New Jersey Consumer Fraud Act (NJCFA).

Read more


Crypto Updates

States Push Back on the Clarity Act: What the Crypto Ethics and Enforcement Debate Means for Compliance Teams

By Troutman Pepper Locke State Attorneys General Team

On July 28, 2026, New York AG Letitia James submitted written testimony in connection with the pending federal Clarity Act, which aims to regulate the crypto market. In her testimony, she urged federal lawmakers to amend the Clarity Act to preserve the authority of the states to protect consumers, prosecute fraud, and hold government officials accountable for profiting from unlawful crypto-related activities.

Read more


Stephanie Kozol, Senior Government Relations Manager – State Attorneys General, also contributed to this newsletter.