Contact Robert Melton, Esq. or submit a business inquiry online.
-
Welcome to My New Blog
- March 6, 2016
- Posted by: rob
- Category: Personal News
No Comments
-
What is the difference between GDPR and CCPA? A CCPA vs GDPR Comparison
The CCPA and GDPR both aim to protect personal data, but GDPR is broader, stricter, and more prescriptive, while CCPA is more consumer‑rights‑focused and applies specifically to California residents. Below is a clear, structured comparison to help you see the practical differences. 🔍 CCPA vs. GDPR: A Side‑by‑Side Breakdown 🌎 Scope & Who They Protect
March 12, 2026 Read more -
Do you need a BAA with every Vendor? What should happen after the BAA is signed?
To the surprise of some: a Business Associate Agreement (BAA) is not needed with every vendor. A BAA is only required when a vendor meets the definition of a business associate—that is, when they create, receive, maintain, or transmit Protected Health Information (PHI) on behalf of a HIPAA-covered entity. 🧾 When a BAA Is
March 11, 2026 Read more -
Examining Data Protection Audit Rights in Privacy Laws and Contracts
Audit rights exist in data‑protection laws for one core reason: a controller remains legally responsible for personal data even when a processor handles it. Because the controller cannot entirely “outsource” compliance, the law gives it the tools to verify that processors are meeting required standards. 1. Controllers Retain Legal Accountability Under laws like the GDPR,
March 9, 2026 Read more -
How I negotiate a Data Processing Addendum (DPA) for Vendors
I have spent thousands of hours as a privacy lawyer since the GDPR went into effect in May 2018 negotiating data protection agreements (DPA) for clients, many of whom are software vendors (either SaaS, on premises or somewhere in between). Although I typically think of them as a data processing addendum, I have also seen
March 9, 2026 Read more
