<?xml version="1.0" encoding="UTF-8"?><rss xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:atom="http://www.w3.org/2005/Atom" version="2.0"><channel><title><![CDATA[XL Law & Consulting P.A.]]></title><description><![CDATA[XL Law & Consulting]]></description><link>https://www.xllawconsulting.com/insights</link><generator>RSS for Node</generator><lastBuildDate>Thu, 18 Jun 2026 17:26:52 GMT</lastBuildDate><atom:link href="https://www.xllawconsulting.com/blog-feed.xml" rel="self" type="application/rss+xml"/><item><title><![CDATA[Canvas Data Breach: Data Privacy Implications for IHEs]]></title><description><![CDATA[In early May 2026, criminal threat actors gained unauthorized access to the Canvas LMS and claimed to have exfiltrated 3.65 TB of data.  The threat actors issued ransom demands first targeting Instructure, the company that owns and operates Canvas, and then targeting over 300 IHEs.  Though the immediate threat against IHEs appears to have been resolved through an “agreement” reached between Instructure and the cybercriminals, affected IHEs should continue to implement their breach response...]]></description><link>https://www.xllawconsulting.com/post/canvas-data-breach</link><guid isPermaLink="false">6a1dcbc8750a0d7337171684</guid><category><![CDATA[Data Privacy]]></category><pubDate>Mon, 01 Jun 2026 18:47:36 GMT</pubDate><enclosure url="https://static.wixstatic.com/media/d3999e_bcf0316b4c6049b5bc510a78499e0917~mv2.jpg/v1/fit/w_1000,h_1000,al_c,q_80/file.png" length="0" type="image/png"/><dc:creator>Alan Grose and Emma Bahner, XL Law Consulting</dc:creator></item><item><title><![CDATA[China Issues New Regulations on Countering Extraterritorial Jurisdiction Measures by Foreign States]]></title><description><![CDATA[On April 13, 2026, the State Council of the PRC published new Regulations to counter foreign sanctions measures it deems to be improper assertions of extraterritorial jurisdiction.  The new Regulations could target organizations and individuals who, by virtue of their compliance with foreign sanctions measures, particularly measures that scrutinize the control of Chinese entities, may be accused of implementing such measures.  IHEs with research collaborations or academic programs in China...]]></description><link>https://www.xllawconsulting.com/post/china-issues-new-regulations</link><guid isPermaLink="false">69ef7be5e72f74b1ddaafcf6</guid><category><![CDATA[International Higher Education]]></category><category><![CDATA[International Research]]></category><category><![CDATA[China]]></category><pubDate>Mon, 27 Apr 2026 15:42:53 GMT</pubDate><enclosure url="https://static.wixstatic.com/media/d3999e_e0a8d93667a644eaadf581823d8764cc~mv2.jpg/v1/fit/w_1000,h_768,al_c,q_80/file.png" length="0" type="image/png"/><dc:creator>Alan Grose, XL Law Consulting</dc:creator></item><item><title><![CDATA[Tracking Cookies and Similar Technologies: Ordinary Uses Give Rise to Extraordinary Risks for Colleges and Universities]]></title><description><![CDATA[Litigation based on the use of tracking cookies and similar technologies, brought under various federal and state wiretap and other privacy laws, has increased steadily over the past several years. While most litigation to date has involved for-profit businesses, a proposed class action lawsuit against a non-profit college was recently settled after surviving a motion to dismiss. Colleges and universities should review the tracking cookies and similar technologies installed across their...]]></description><link>https://www.xllawconsulting.com/post/tracking-cookies-and-similar-technologies</link><guid isPermaLink="false">69d83ba8c55f668b53084fb3</guid><category><![CDATA[Higher Education]]></category><pubDate>Fri, 10 Apr 2026 00:20:05 GMT</pubDate><enclosure url="https://static.wixstatic.com/media/d3999e_283b05c191ae4428ae0970d69343c4d1~mv2.jpg/v1/fit/w_1000,h_1000,al_c,q_80/file.png" length="0" type="image/png"/><dc:creator>Emma Bahner, XL Law &amp; Consulting</dc:creator></item><item><title><![CDATA[Highest Chinese Court Issues Uniform Standards for Employment Relationships, Including Foreign Employees]]></title><description><![CDATA[On August 1, 2025, the PRC Supreme People’s Court issued the Interpretation II on Issues Concerning the Application of Law in the Trial of Labor Dispute Cases, which establishes uniform legal standards in several employment situations that have raised questions in recent years, including the employment relationship in affiliation arrangements, foreign employees, double wages, and two consecutive fixed-term contracts. U.S. institutions with an RO or WFOE in the PRC should review and update...]]></description><link>https://www.xllawconsulting.com/post/chinese-court-issues-uniform-standards-for-employment-relationships</link><guid isPermaLink="false">698431211e55646770020bf5</guid><category><![CDATA[China]]></category><pubDate>Thu, 05 Feb 2026 06:58:11 GMT</pubDate><enclosure url="https://static.wixstatic.com/media/f2d01a_fc290b89a5f0445f8258ea8cd7efa545~mv2.jpg/v1/fit/w_1000,h_1000,al_c,q_80/file.png" length="0" type="image/png"/><dc:creator>Rose Li, XL Law &amp; Consulting</dc:creator></item><item><title><![CDATA[China Releases Measures for Cybersecurity Incident Reporting]]></title><description><![CDATA[On September 11, 2025, the Cyberspace Administration of China released the Measures for Cybersecurity Incident Reporting, which clarify the specific requirements for network operators regarding cybersecurity incident reporting. The Measures require network operators to report certain incidents within one to four hours, depending on the type of entity involved.   On September 11, 2025, the Cyberspace Administration of China (“ CAC ”) released the Measures for Cybersecurity Incident Reporting ...]]></description><link>https://www.xllawconsulting.com/post/china-releases-measures-for-cybersecurity-incident-reporting</link><guid isPermaLink="false">692716c6e132343177f3cf2f</guid><category><![CDATA[China]]></category><category><![CDATA[Data Privacy]]></category><pubDate>Thu, 29 Jan 2026 17:16:12 GMT</pubDate><enclosure url="https://static.wixstatic.com/media/f2d01a_6b90539ebe804884bcf176998f4c4418~mv2.jpg/v1/fit/w_1000,h_1000,al_c,q_80/file.png" length="0" type="image/png"/><dc:creator>Rose Li, XL Law &amp; Consulting</dc:creator></item><item><title><![CDATA[Children’s Data Privacy: PRC and U.S. State Law Updates for Colleges and Universities]]></title><description><![CDATA[Following a December 29, 2025 notice published by the Cyberspace Administration of China, institutions that handle personal information of children in China must report on their handling activities by January 31 each year (starting January 31, 2026); Several recently effective U.S. state comprehensive data privacy laws impact whether/how institutions may engage in targeted advertising to minors; The same U.S. state laws also impact whether/how institutions may “sell” minors’ personal...]]></description><link>https://www.xllawconsulting.com/post/childrens-data-privacy</link><guid isPermaLink="false">696a66b2aeca3f666fbc44be</guid><category><![CDATA[Data Privacy]]></category><category><![CDATA[China]]></category><category><![CDATA[USA]]></category><pubDate>Fri, 16 Jan 2026 20:48:16 GMT</pubDate><enclosure url="https://static.wixstatic.com/media/d3999e_0e4f16ef66614f26bcc9e091d6799bf3~mv2.jpg/v1/fit/w_1000,h_1000,al_c,q_80/file.png" length="0" type="image/png"/><dc:creator>Emma Bahner, XL Law &amp; Consulting</dc:creator></item><item><title><![CDATA[ China Penalizes Dior for PIPL Violation]]></title><description><![CDATA[China’s Ministry of Public Security (“MPS”) penalized Dior Shanghai for breaching personal information protection obligations, following an investigation into a data breach incident. MPS identified the following violations during the investigation: failure to implement a cross-border transfer mechanism; failure to fully inform data subjects about how their personal information would be handled by an overseas recipient; failure to obtain separate consent for cross-border transfer; and failure...]]></description><link>https://www.xllawconsulting.com/post/china-penalizes-dior-for-pipl-violation</link><guid isPermaLink="false">6924bdc33ba9ce1c9252167c</guid><category><![CDATA[Data Privacy]]></category><category><![CDATA[China]]></category><category><![CDATA[PIPL]]></category><pubDate>Mon, 15 Dec 2025 18:01:48 GMT</pubDate><enclosure url="https://static.wixstatic.com/media/807e63_1a581980ecf64f459906518b476d4807~mv2.jpg/v1/fit/w_1000,h_1000,al_c,q_80/file.png" length="0" type="image/png"/><dc:creator>Rose Li, XL Law &amp; Consulting</dc:creator></item><item><title><![CDATA[EU AI Act Approach to General-Purpose AI Models Takes Shape: Takeaways for IHEs]]></title><description><![CDATA[On August 2, 2025, provisions of the EU AI Act addressing large “general-purpose AI” (GPAI) models took effect. The provisions include transparency and copyright compliance obligations for all GPAI models and heightened safety and security obligations for GPAI models with “systemic risk.” For institutions of higher education adopting and using AI tools powered by large GPAI models, these provisions will likely produce useful information for conducting due diligence and framing AI governance...]]></description><link>https://www.xllawconsulting.com/post/eu-ai-act-approach-to-general-purpose-ai-models-takes-shape-takeaways-for-ihes</link><guid isPermaLink="false">691e0e3ce613782880dfa176</guid><category><![CDATA[Artificial Intelligence]]></category><pubDate>Tue, 09 Dec 2025 14:31:32 GMT</pubDate><enclosure url="https://static.wixstatic.com/media/f2d01a_75a892a3ae3942139b0f0b2476d42262~mv2.png/v1/fit/w_1000,h_996,al_c,q_80/file.png" length="0" type="image/png"/><dc:creator>Alan Grose, XL Law Consulting</dc:creator></item><item><title><![CDATA[The DOJ Sensitive Data Rule: A Race to Compliance Maturity]]></title><description><![CDATA[On October 6, 2025, the final provisions of the DOJ Sensitive Data Rule took effect, completing the framework for the DOJ’s Data Security Program.  Institutions engaging in relevant data-sharing activities should move quickly to ensure compliance.    On October 6, 2025, the last provisions of 28 C.F.R. Part 202, “ Access to U.S. Sensitive Personal Data and Government-Related Data by Countries of Concern or Covered Persons ” (“DOJ Rule”) took effect, completing the regulatory foundation of the...]]></description><link>https://www.xllawconsulting.com/post/the-doj-sensitive-data-rule-a-race-to-compliance-maturity</link><guid isPermaLink="false">692f01a2ee21510c2ee521a5</guid><category><![CDATA[International Research]]></category><category><![CDATA[Cybersecurity]]></category><category><![CDATA[China]]></category><pubDate>Tue, 02 Dec 2025 17:17:36 GMT</pubDate><enclosure url="https://static.wixstatic.com/media/f2d01a_f4a25a5ddcf04568a8016c233408419f~mv2.jpg/v1/fit/w_1000,h_1000,al_c,q_80/file.png" length="0" type="image/png"/><dc:creator>Alan Grose, XL Law Consulting</dc:creator></item><item><title><![CDATA[China Issues New Requirements for Handling of Sensitive Personal Information]]></title><description><![CDATA[On April 25, 2025, TC260 issued the recommended standard Data Security Technology – Security Requirements for Handling of Sensitive...]]></description><link>https://www.xllawconsulting.com/post/china-issues-new-requirements-for-handling-of-sensitive-personal-information</link><guid isPermaLink="false">68936403e55579268fb5e452</guid><category><![CDATA[China]]></category><category><![CDATA[PIPL]]></category><category><![CDATA[Data Privacy]]></category><pubDate>Wed, 06 Aug 2025 17:38:31 GMT</pubDate><enclosure url="https://static.wixstatic.com/media/910ae2_00f98d475f144905b2f4020454db2106~mv2.jpg/v1/fit/w_1000,h_1000,al_c,q_80/file.png" length="0" type="image/png"/><dc:creator>Rose Li, XL Law &amp; Consulting</dc:creator></item><item><title><![CDATA[China Releases Guidelines on Reporting the Appointment of Data Protection Officers]]></title><description><![CDATA[On July 18, 2025, the CAC issued guidance on reporting the appointment of personal information protection officers. Handlers that reached...]]></description><link>https://www.xllawconsulting.com/post/china-releases-guidelines-on-reporting-the-appointment-of-data-protection-officers</link><guid isPermaLink="false">688b9c5745ab709d6d054fb5</guid><category><![CDATA[China]]></category><category><![CDATA[Data Privacy]]></category><category><![CDATA[PIPL]]></category><pubDate>Thu, 31 Jul 2025 17:17:48 GMT</pubDate><enclosure url="https://static.wixstatic.com/media/910ae2_3407a569edaf4c44bf4f3783bea1bd10~mv2.jpg/v1/fit/w_1000,h_1000,al_c,q_80/file.png" length="0" type="image/png"/><dc:creator>Rose Li, XL Law &amp; Consulting</dc:creator></item><item><title><![CDATA[China Releases Draft Amendment to Cybersecurity Law]]></title><description><![CDATA[On March 28, 2025, the Cyberspace Administration of China released a draft amendment to the Cybersecurity Law(“Draft Amendment”) for...]]></description><link>https://www.xllawconsulting.com/post/china-releases-draft-amendment-to-cybersecurity-law</link><guid isPermaLink="false">68408f57827bcdfa93236ac6</guid><category><![CDATA[Data Privacy]]></category><category><![CDATA[China]]></category><pubDate>Wed, 04 Jun 2025 18:49:12 GMT</pubDate><enclosure url="https://static.wixstatic.com/media/910ae2_85320d55b252494b80b8d24daa38ac13~mv2.jpg/v1/fit/w_1000,h_1000,al_c,q_80/file.png" length="0" type="image/png"/><dc:creator>Rose Li, XL Law &amp; Consulting</dc:creator></item><item><title><![CDATA[Education Highlights from China’s 2025 Two Sessions ]]></title><description><![CDATA[The 2025 Government Work Report emphasizes integration of vocational education and general (i.e., non-vocational) education, further...]]></description><link>https://www.xllawconsulting.com/post/education-highlights-from-china-s-2025-two-sessions</link><guid isPermaLink="false">681238c81cc052b94e6a1bcf</guid><category><![CDATA[China]]></category><pubDate>Tue, 27 May 2025 03:55:30 GMT</pubDate><enclosure url="https://static.wixstatic.com/media/910ae2_a691ca36fce242ffb8619e7909dd993c~mv2.jpg/v1/fit/w_1000,h_1000,al_c,q_80/file.png" length="0" type="image/png"/><dc:creator>Rose Li, XL Law &amp; Consulting</dc:creator></item><item><title><![CDATA[State Privacy Enforcement Officials Argue for Strong State Role in Federal Privacy Law]]></title><description><![CDATA[• In a letter to a congressional Privacy Working Group, officials from California and New Jersey argued against preemptive federal...]]></description><link>https://www.xllawconsulting.com/post/state-privacy-enforcement-officials-argue-for-strong-state-role-in-federal-privacy-law</link><guid isPermaLink="false">68123bc880e2422fe50bd590</guid><category><![CDATA[Data Privacy]]></category><pubDate>Tue, 20 May 2025 00:29:39 GMT</pubDate><enclosure url="https://static.wixstatic.com/media/910ae2_a607d03e6b7b4d1b84676fa51fb647d2~mv2.jpg/v1/fit/w_1000,h_1000,al_c,q_80/file.png" length="0" type="image/png"/><dc:creator>Alan Grose, XL Law Consulting</dc:creator></item><item><title><![CDATA[China Announces Special Measures to Strengthen PIPL Enforcement in 2025]]></title><description><![CDATA[The CAC and three additional departments jointly announced plans to strengthen PIPL enforcement in 2025 by applying special measures to...]]></description><link>https://www.xllawconsulting.com/post/china-announces-special-measures-to-strengthen-pipl-enforcement-in-2025</link><guid isPermaLink="false">6812351980e2422fe50bc02d</guid><category><![CDATA[PIPL]]></category><category><![CDATA[Data Privacy]]></category><category><![CDATA[China]]></category><pubDate>Mon, 12 May 2025 19:04:21 GMT</pubDate><enclosure url="https://static.wixstatic.com/media/910ae2_12d80de0919a4ea7862c0d5396fa150c~mv2.jpg/v1/fit/w_1000,h_1000,al_c,q_80/file.png" length="0" type="image/png"/><dc:creator>Rose Li, XL Law &amp; Consulting</dc:creator></item><item><title><![CDATA[New Executive Order Signals Heightened Section 117 Enforcement Priority]]></title><description><![CDATA[On April 23, 2025, President Trump issued an Executive Order directing the Secretary of Education to step up enforcement of Section 117...]]></description><link>https://www.xllawconsulting.com/post/new-executive-order-signals-heightened-section-117-enforcement-priority</link><guid isPermaLink="false">68190d191ad005b31715b87e</guid><category><![CDATA[International Research]]></category><category><![CDATA[China]]></category><category><![CDATA[Higher Education]]></category><pubDate>Mon, 05 May 2025 23:38:46 GMT</pubDate><enclosure url="https://static.wixstatic.com/media/910ae2_940011a125fe47f2824dc12021ee4829~mv2.jpg/v1/fit/w_1000,h_1000,al_c,q_80/file.png" length="0" type="image/png"/><dc:creator>Alan Grose, XL Law Consulting</dc:creator></item><item><title><![CDATA[DOJ Publishes Guidance, Announces Additional 90-Days for Good Faith Efforts to Comply with Sensitive Data Rule]]></title><description><![CDATA[On April 11, 2025, the DOJ National Security Division published new guidance regarding the U.S. Sensitive Personal Data and...]]></description><link>https://www.xllawconsulting.com/post/doj-publishes-guidance-announces-additional-90-days-for-good-faith-efforts-to-comply-with-sensitive</link><guid isPermaLink="false">68113dfd56f2d5d893641c03</guid><category><![CDATA[International Research]]></category><category><![CDATA[Cybersecurity]]></category><category><![CDATA[China]]></category><pubDate>Tue, 29 Apr 2025 23:20:43 GMT</pubDate><enclosure url="https://static.wixstatic.com/media/910ae2_d2eb3dd05397414c97f70edbb4a83b9c~mv2.jpg/v1/fit/w_1000,h_1000,al_c,q_80/file.png" length="0" type="image/png"/><dc:creator>Alan Grose and Emma Bahner, XL Law Consulting</dc:creator></item><item><title><![CDATA[House Passes Bill That Would Expand Section 117 Reporting Requirements for Higher Education Institutions ]]></title><description><![CDATA[On March 27, 2025, the House of Representatives passed H.R.1048, the DETERRENT Act (H.R.1048), which would expand oversight and...]]></description><link>https://www.xllawconsulting.com/post/house-passes-bill-that-would-expand-section-117-reporting-requirements-for-higher-education-institut</link><guid isPermaLink="false">680bd2b66be0a2b59f0a2446</guid><category><![CDATA[International Higher Education]]></category><category><![CDATA[Higher Education]]></category><pubDate>Fri, 25 Apr 2025 18:37:12 GMT</pubDate><enclosure url="https://static.wixstatic.com/media/910ae2_2700bd5653f84baa9da4096cb4725fec~mv2.jpg/v1/fit/w_1000,h_1000,al_c,q_80/file.png" length="0" type="image/png"/><dc:creator>Anne Wilder, XL Law &amp; Consulting</dc:creator></item><item><title><![CDATA[China Releases Final Measures for Compliance Audits on Personal Information Protection]]></title><description><![CDATA[Recently, the CAC released the final Measures for the Administration of Compliance Audits on Personal Information Protection...]]></description><link>https://www.xllawconsulting.com/post/china-releases-final-measures-for-compliance-audits-on-personal-information-protection</link><guid isPermaLink="false">67d30ff961a6e15ea708dcdf</guid><category><![CDATA[China]]></category><category><![CDATA[Data Privacy]]></category><pubDate>Tue, 08 Apr 2025 02:50:19 GMT</pubDate><enclosure url="https://static.wixstatic.com/media/910ae2_fb8a1298f5c24246aa99387306551d49~mv2.jpg/v1/fit/w_1000,h_1000,al_c,q_80/file.png" length="0" type="image/png"/><dc:creator>Rose Li, XL Law &amp; Consulting</dc:creator></item><item><title><![CDATA[Legal Considerations for Drafting and Negotiating AI Contracts in Higher Education]]></title><description><![CDATA[AI agreements pose many legal risks, including in the areas of data privacy, intellectual property, liability, and bias. Counsel can...]]></description><link>https://www.xllawconsulting.com/post/legal-considerations-for-drafting-and-negotiating-ai-contracts-in-higher-education</link><guid isPermaLink="false">67ed50ee7ee00aa3084f70c3</guid><category><![CDATA[Data Privacy]]></category><category><![CDATA[Artificial Intelligence]]></category><category><![CDATA[Higher Education]]></category><pubDate>Wed, 02 Apr 2025 15:32:26 GMT</pubDate><enclosure url="https://static.wixstatic.com/media/910ae2_0e460cbca4944550bf1d529339685d2b~mv2.jpg/v1/fit/w_1000,h_1000,al_c,q_80/file.png" length="0" type="image/png"/><dc:creator>Anne Wilder and Emma Bahner, XL Law &amp; Consulting</dc:creator></item></channel></rss>