New California law on lawyer use of generative AI and Connecticut prompt injection ruling Data Protection Report