John Pavolotsky: California legal updates, Colorado AI reset, data breach clauses revisited

About this episode

John Pavolotsky discusses recent legal updates in California and Colorado regarding data privacy and artificial intelligence.

Our repeat guest is a partner at Stoel Rives in San Francisco. John is co-lead of the firm’s Technology Industry Group. He counsels clients on data privacy, information security, artificial intelligence, and other technology dispute, compliance, and transactional matters. John has taught Technology Transactions Law at the UC Davis School of Law and Comparative Privacy Law at the Santa Clara University School of Law. John has also guest lectured on technology and privacy law topics at the University of California, Berkeley, Haas School of Business; the University of San Francisco School of Management; and Stanford University. References: * John Pavolotsky: The Long Arc of Data Breaches: 2006-2026 (May 14, 2026) * Colorado SB 26-189 , repealing and replacing Colorado’s original 2024 AI Act New laws being discussed in California, or just approved: * AB 1542 : to prohibit a business, service provider, or contractor from selling or sharing sensitive personal information to a third party. * AB 1898 : to require an employer to maintain an updated list of all workplace AI tools currently in use and to provide the list to workers annually. * AB 2021 : whistleblower complaints. * AB 2169…

People in this episode

Host: Sergio Maldonado

Guest: John Pavolotsky

Topics covered

• data privacy
• information security
• artificial intelligence
• technology law
• California legislation
• Colorado AI Act
• data breach

Keywords

• data privacy
• California laws
• Colorado AI Act
• data breach clauses
• technology law
• artificial intelligence
• information security

Mentioned in this episode

Organizations: Stoel Rives

Places: California, Colorado, San Francisco, UC Davis School of Law, Santa Clara University School of Law, University of California, Berkeley, Haas School of Business, University of San Francisco School of Management, Stanford University

More episodes of Masters of Privacy

• Malcolm Bain: copyright protection of AI-generated works and protection of copyrighted works from AI training · June 9, 2026 · 34 min
• Tim Turner: The DPO Daily Challenge, recent updates to the UK legal framework · May 24, 2026 · 35 min
• Newsroom: Spring 2026 · May 17, 2026 · 33 min
• Tom Kemp (CalPrivacy): on the SECURE Data Act, CCPA whistleblowers, DROP, and AB 566 · May 10, 2026 · 42 min
• Mark Webber: a law firm’s perspective on AI governance · May 3, 2026 · 30 min
• Iain Henderson: MyTerms as the missing universal opt-in signal (After The Magic repost) · April 26, 2026 · 52 min