Contact Robert Melton, Esq. or submit a business inquiry online.
-
SEC Recordkeeping Rules and AI-Generated Content: What Financial Firms Must Retain
- September 26, 2026
- Posted by: allan
- Categories: AI & Technology Law, Financial Regulation
No Comments
The SEC’s recordkeeping enforcement campaign cost financial institutions over $600 million in penalties — and AI-generated content faces the same analytical framework. This post explains what broker-dealers and investment advisers must retain under Rules 17a-4 and 204-2, and what a compliance audit should cover in 2026.
-
AI in Drug Discovery: IP, Regulatory Validation, and Licensing Considerations
- September 25, 2026
- Posted by: allan
- Categories: AI & Technology Law, Healthcare Law, Intellectual Property
AI is transforming drug discovery, but it raises complex legal questions around patent inventorship, FDA regulatory validation, and licensing agreement structure. This post works through all three systematically for biotech companies, pharma licensors, and their counsel.
-
AI and Biobank Consent: Why Historical Consent Forms Don’t Cover AI Training
- September 24, 2026
- Posted by: allan
- Categories: AI & Technology Law, Healthcare Law
Biobanks hold millions of samples collected under consent forms that predate AI — but pharmaceutical companies need that data for AI drug discovery training. This post examines the Common Rule and HIPAA consent gaps, the IP risks they create, and the remediation strategies institutions must deploy now.
-
Algorithmic Bias in Clinical Trial Patient Recruitment: FDA Diversity Guidance and AI Tools
- September 23, 2026
- Posted by: allan
- Categories: AI & Technology Law, Healthcare Law
AI patient recruitment tools trained on historically non-diverse datasets can systematically exclude underrepresented populations — directly undermining FDA’s FDORA diversity action plan requirements. This post examines the algorithmic bias risks, the regulatory exposure, and what sponsors must do to stay compliant.
-
Can You Audit Your Clinical Trial AI? What FDA Expects
- September 22, 2026
- Posted by: allan
- Categories: AI & Technology Law, Healthcare Law
FDA’s January 2025 draft guidance creates new audit and documentation obligations for every AI tool used in clinical trials. This post examines what inspectors will ask, what vendor contracts must include, and how sponsors can ensure their clinical trial AI is fully audit-ready.
-
Bias in AI Medical Devices: FDA Training Data Requirements and Product Liability Implications
- September 21, 2026
- Posted by: allan
- Categories: AI & Technology Law, Healthcare Law, Risk Management
Only 3.6% of FDA-cleared AI medical devices reported race or ethnicity data from their validation cohort. This post examines what FDA now requires for training data representativeness, and the product liability exposure manufacturers face when demographic bias causes patient harm.
-
AI in Drug Development: FDA’s Draft Guidance and What Pharma Companies Must Do Now
- September 20, 2026
- Posted by: allan
- Categories: AI & Technology Law, Healthcare Law
FDA’s January 2025 draft guidance on AI in drug development establishes a seven-step credibility assessment framework that pharma and biotech companies must apply to any AI used to support regulatory submissions. Here is what the context-of-use framework requires and what companies must do now.
-
Predetermined Change Control Plans: How to Update AI Medical Devices Without a New FDA Submission
- September 19, 2026
- Posted by: allan
- Categories: AI & Technology Law, Healthcare Law
The PCCP framework lets AI medical device manufacturers pre-authorize future algorithm updates without filing a new FDA submission for each change. Here is how the three required components work and why building your PCCP at submission time is a strategic necessity.
-
FDA Regulation of AI as a Medical Device: SaMD, CDS, and the Classification Decision
- September 18, 2026
- Posted by: allan
- Categories: AI & Technology Law, Healthcare Law
Whether your AI healthcare product is a regulated medical device under FDA rules is the most consequential classification decision you will make. Here is how the four-factor CDS test works, what falls inside regulation, and why getting this right at the start matters.
-
AI in Compliance Programs: How Agentic AI Is Transforming Healthcare Compliance Functions
- September 17, 2026
- Posted by: allan
- Categories: AI & Technology Law, Healthcare Law
Agentic AI is shifting healthcare compliance from periodic sampling to continuous monitoring. Here is what agentic compliance programs can do, and the governance architecture required to make them legally defensible.
-
Tennessee’s AI Mental Health Law: What Chatbot Developers and Digital Health Companies Must Know
- September 16, 2026
- Posted by: allan
- Categories: AI & Technology Law, Healthcare Law
Tennessee’s AI Mental Health Law bans marketing chatbots as licensed mental health professionals and creates a private right of action. Here is what the law requires, where it sits in the national patchwork, and what digital health companies must do now.
-
AI in Healthcare: Five Use Cases and Their False Claims Act Exposure
- September 15, 2026
- Posted by: allan
- Categories: AI & Technology Law, Healthcare Law
AI in healthcare creates real False Claims Act exposure across five key use cases — from clinical decision support to billing optimization. Here is what your compliance program needs to address before the government comes knocking.
-
AI Text Messaging in Digital Health: TCPA Compliance for Automated Patient Outreach
- September 14, 2026
- Posted by: allan
- Categories: AI & Technology Law, Healthcare Law
AI-powered patient text messaging sits at the intersection of the TCPA’s class action exposure, the FCC’s 2025 consent revocation rules, and the Supreme Court’s McLaughlin decision freeing courts to chart their own course on TCPA interpretation. Here’s the compliance architecture every digital health platform needs.
-
AI and Informed Consent in Clinical Settings: The Black Box Disclosure Problem
- September 12, 2026
- Posted by: allan
- Categories: AI & Technology Law, Healthcare Law
When AI assists clinical diagnosis, the physician faces a two-sided liability trap — and a black box they may not be able to explain to patients. This post examines the informed consent doctrine, malpractice exposure, and algorithmic bias risks that every health system deploying AI diagnostic tools must address.
-
Remote Patient Monitoring: Privacy, Liability, and Unauthorized Practice of Medicine in AI-Powered Wearables
- September 11, 2026
- Posted by: allan
- Categories: AI & Technology Law, Data Privacy & Cybersecurity, Healthcare Law, Risk Management
AI-powered wearables and remote monitoring platforms face a complex web of legal risks spanning HIPAA, the FTC Health Breach Notification Rule, state consumer health data laws, and unauthorized practice of medicine doctrine. This post maps the compliance architecture every operator in this space needs to build.
-
When AI Decides Medical Necessity: The Pennsylvania AG’s Lawsuit and What It Signals for Every Health AI Platform
- September 10, 2026
- Posted by: allan
- Categories: AI & Technology Law, Healthcare Law
The Pennsylvania AG’s lawsuit against Character.AI for unauthorized practice of medicine signals a new enforcement era for health AI platforms. Here’s what the action means for every company building AI systems that touch clinical decisions or coverage determinations.
-
AI Ambient Scribes in Healthcare: False Claims Act Risks from AI-Generated Medical Records
- September 9, 2026
- Posted by: allan
- Categories: AI & Technology Law, Healthcare Law
AI ambient scribes are generating clinical notes at scale — but AI hallucinations, documentation cloning, and systematic upcoding create serious False Claims Act exposure. This post explains the FCA risk landscape and the compliance framework every health system needs before deploying ambient AI.
-
AI De-Identification in Healthcare: When Masking and Synthetic Data Are Not Enough
- September 8, 2026
- Posted by: allan
- Categories: AI & Technology Law, Healthcare Law
Pseudonymization is not HIPAA de-identification. AI-generated synthetic data is not automatically outside HIPAA’s scope. This post explains what de-identification actually requires under HIPAA and where common AI healthcare data practices fall short.
-
Population Health AI and HIPAA: Four Lawful Pathways for Using Patient Data
- September 7, 2026
- Posted by: allan
- Categories: AI & Technology Law, Healthcare Law
HIPAA does not prohibit using patient data for AI-powered population health analytics — but it requires a lawful pathway. This post walks through the four available options: BAA-covered aggregation, shared vendor platforms, de-identification, and the TPO exception, with the real limits of each.
-
AI in Healthcare Contracting: Key Provisions Every BAA and Vendor Agreement Must Address
- September 6, 2026
- Posted by: allan
- Categories: AI & Technology Law, Business Law, Healthcare Law
Standard BAAs and SaaS vendor agreements were not built for clinical AI. This post covers the eight contract provisions healthcare organizations must negotiate before deploying AI tools that handle protected health information.
-
Oregon and Washington Chatbot Disclosure Laws: Compliance Guide for Multi-State Businesses
- September 5, 2026
- Posted by: allan
- Category: AI & Technology Law
Oregon SB 1546 and Washington HB 2225 take effect January 1, 2027, creating new chatbot disclosure, minor protection, and crisis protocol requirements. Here is what multi-state businesses need to know to comply.
-
California Worker AI Displacement Act: Employer Compliance and Litigation Risk
- September 4, 2026
- Posted by: allan
- Categories: AI & Technology Law, Employment Law
California SB 951 would require 90 days’ advance notice before AI displaces workers, with detailed disclosures and back pay penalties for noncompliance. The causation ambiguity at the bill’s center will generate significant litigation — and the document preservation obligations run backward into the AI procurement phase.
-
Shadow AI in the Workplace: Recording Consent, Privilege Waiver, and Trade Secret Risks
- September 2, 2026
- Posted by: allan
- Categories: AI & Technology Law, Data Privacy & Cybersecurity, Employment Law, Intellectual Property
Employees using unauthorized AI notetakers and consumer-tier AI tools create overlapping legal exposures for employers — from recording consent violations and privilege waiver to trade secret compromise and spoliation risk. This post explains each risk and what a compliant AI workplace policy must address.
-
The DOJ’s Disparate Impact Position and AI Hiring Tools: What Employers Must Recalibrate
- September 1, 2026
- Posted by: allan
- Categories: AI & Technology Law, Employment Law
The DOJ’s 2026 opinion challenging disparate impact theory is the most significant shift in federal civil rights enforcement in a generation — but it does not eliminate employer liability for discriminatory AI hiring tools. The risk has relocated to state agencies and private plaintiffs, not disappeared.
-
AI Screening Tools and Title VII: Why Legal Risk Doesn’t Disappear When Federal Enforcement Retreats
- August 31, 2026
- Posted by: allan
- Categories: AI & Technology Law, Employment Law
Federal enforcement of AI hiring bias claims has retreated, but legal exposure for employers has not. State laws are expanding, private litigation is accelerating, and the underlying federal statutes remain fully in force.
-
Why Prompt Injection Is the Phishing Attack of the AI Era: Legal Liability and Mitigation
Twenty years ago, phishing was an emerging threat that most corporate security programs barely addressed. IT departments treated suspicious emails as a user education problem. Legal teams had not yet processed what a successful phishing attack — leading to a breach, a wire transfer, or a data exfiltration — would mean for a company’s liability
November 15, 2026 Read more -
North Korean IT Worker Fraud: Deepfakes, Sanctions Risk, and Hiring Compliance
Over the past several years, a persistent and increasingly sophisticated threat has been quietly infiltrating American companies: North Korean nationals posing as freelance software developers and IT contractors, using fabricated identities, AI-generated deepfakes, and elaborate infrastructure to pass hiring screening and gain access to corporate systems, sensitive data, and a steady stream of American payroll
November 14, 2026 Read more -
AI Supply Chain Security: Prompt Injection, Data Poisoning, and Model Stealing
When a company installs traditional software, security teams know what to look for. They check for known vulnerabilities, review patch history, assess the vendor’s security posture, and run penetration tests. The attack categories are well-understood, the defenses are well-cataloged, and the tools for testing and monitoring have been refined over decades. AI systems do not
November 13, 2026 Read more -
AI-Enabled Cyberattacks: Emerging Legal Standards for Corporate Cybersecurity Programs
Cyberattacks were already expensive and frequent before AI. They have become cheaper, faster, and harder to detect since. The same AI tools that help businesses automate customer service, generate marketing copy, and analyze financial data are being used by threat actors to write more convincing phishing emails, generate deepfake audio of your CEO authorizing a
November 12, 2026 Read more
