Tech & Sourcing @ Morgan Lewis

A February 2026 IT disruption illustrates how technology dependencies can affect cruise operations. Carnival Cruise Line said the issue arose during planned maintenance and affected embarkation, disembarkation, and other technology tools. Reports of the disruption also identified impacts to Wi-Fi and the Carnival HUB app, while navigation and safety systems remained operational.

The use of robotics in warehouses has become prevalent in the last few years. With improved software and the rise of artificial intelligence (AI), warehouse automation can handle inventory, shipping, and orders. Robotics can improve accuracy, be cost-effective, and optimize space, which can benefit both the warehouse operator and the customer. While the rise of robotics has changed the way warehousing services are performed, the terms and conditions of warehousing agreements have not always kept pace with the significant changes resulting from these developments.

Join partners Alexander Hastings, Amanda Robinson, and Jaclyn Whittaker, on Tuesday, June 16, 2026 at 12:00 pm ET for a webinar discussing key considerations for startups and established companies when contracting with the government.

In our May 2025 blog post, Study Finds Average Cost of Data Breaches Significantly Increased Globally in 2024, we highlighted the key findings of the Ponemon Institute’s Cost of a Data Breach Report 2024. The Ponemon Institute has now published its Cost of a Data Breach Report 2025, showing a decrease in data breach costs, driven by faster identification and containment. Each year, the report sets forth a vast dataset analyzing data breaches at hundreds of organizations to spot trends and developments in security risks and best practices.

Kari Krusmark, a partner in our technology transactions, outsourcing, and commercial contracts practice, is a leading advisor in complex technology initiatives, outsourcing arrangements, and digital transformation projects. With deep background guiding global companies through high-value technology deals, evolving regulatory requirements, and vendor ecosystem shifts, Kari has a unique perspective on how organizations should prepare for the rapidly changing technology and outsourcing landscape. Her insights highlight the key trends shaping 2026 and what businesses should be doing now to stay ahead.

The Maryland Online Data Privacy Act (MODPA or the Act) took effect on October 1, 2025, making Maryland the most recent state to join the nationwide network of states with legislation protecting consumer data privacy. As part of our Spotlight series, Ezra Church, the leader of our privacy and cybersecurity litigation practice shares his insights into the MODPA requirements and nuances that companies should know.

On October 29, Morgan Lewis will be hosting the annual Tech & Sourcing Summit in New York. This full-day event will bring together our lawyers and industry leaders, focusing on this year’s theme: Navigating the Global Landscape through Innovation. A reception will follow the substantive portion of the program.

According to a 2025 report on cyber insurance trends published by Munich Re, the global cyber insurance market totaled $15.3 billion in 2024, and is expected to reach $16.3 billion by the end of 2025. Although these amounts are substantial in an absolute sense, the 2024 market valuation represents less than 1% of the global premium volume for property and casualty insurance in 2024. Cybersecurity’s comparative lack of representation in the global insurance premium market may stem from slower growth in the cybersecurity insurance market in the past few years. However, likely as a result of continued increases in digitization, cyber events occurring more frequently, and the regulatory framework evolving, cybersecurity insurance appears poised to grow at a more sustained pace, with Munich Re predicting the global premium volume for cybersecurity to average an annual growth rate of 10% per year through 2030.

In a recent LawFlash, a team of Morgan Lewis lawyers discussed new regulations concerning automated decision-making technology (ADMT), cybersecurity audits, and risk assessments that were finalized by the board of the California Privacy Protection Agency (CPPA). While the CPPA also revised existing regulations, the new regulations impose additional requirements on businesses operating in California, particularly with respect to those using ADMT to make significant decisions without human involvement.

Published in August 2025, the CrowdStrike Global Threat Report 2025 provides a detailed overview of the evolving cyber threat landscape, drawing on data from millions of endpoints and cloud workloads worldwide.