Contact Robert Melton, Esq. or submit a business inquiry online.
Data Privacy
-
State Privacy Laws: What US Businesses Need to Know Beyond California
- July 14, 2026
- Posted by: allan
- Categories: Data Privacy & Cybersecurity, Tax & Compliance
No Comments
A wave of state comprehensive privacy laws is sweeping the US. Beyond California’s CCPA, Virginia, Colorado, Texas, Oregon, and more than a dozen other states now have comprehensive consumer privacy laws in effect. This guide explains the key requirements and how businesses can build a compliance program that works across states.
-
Employee Data Privacy: What Employers Need to Know
- June 5, 2026
- Posted by: allan
- Category: Data Privacy & Cybersecurity
Employees generate enormous amounts of personal data in the workplace — and employers face a growing set of legal obligations around how that data is collected, used, and protected. This guide covers the key employee privacy issues every US employer should understand.
-
Telehealth and HIPAA: Compliance Requirements for Virtual Healthcare Providers
- June 3, 2026
- Posted by: allan
- Category: Healthcare Law
Telehealth has transformed how healthcare is delivered, but it has also created new HIPAA compliance challenges. This guide explains what virtual healthcare providers must do to protect patient information and comply with federal and state law.
-
Vendor Data Processing Agreements: What SMBs Need to Know
- May 31, 2026
- Posted by: allan
- Category: Data Privacy & Cybersecurity
If your business shares customer data with third-party vendors, privacy laws may require you to have a written data processing agreement in place. This guide explains what a DPA must contain and why getting this right matters for your business.
-
Data Retention Policies: What Businesses Need to Know
- May 26, 2026
- Posted by: allan
- Category: Data Privacy & Cybersecurity
How long should your business keep customer records, employee files, financial data, and other information? The answer varies by law, industry, and type of data — and getting it wrong can be costly in both directions.
-
HIPAA Business Associates: What They Are and Why They Matter
- May 23, 2026
- Posted by: allan
- Category: Healthcare Law
Many businesses that handle health information on behalf of healthcare providers are HIPAA business associates — and they may not know it. This guide explains who qualifies as a business associate, what obligations they carry, and why the Business Associate Agreement is so important.
-
CCPA and CPRA: A Practical Compliance Guide for Small Businesses
- May 21, 2026
- Posted by: allan
- Category: Data Privacy & Cybersecurity
California’s privacy laws are among the most demanding in the United States and apply to businesses that may not realize they are covered. This guide explains what the CCPA and CPRA require and how small businesses can achieve compliance.
-
HIPAA Basics for Small Businesses: What You Need to Know
- May 18, 2026
- Posted by: allan
- Category: Healthcare Law
If your business handles any kind of health information, HIPAA may apply to you — even if you are not a hospital or doctor’s office. This guide explains what HIPAA requires, who it covers, and what small businesses must do to comply.
-
State Privacy Laws in 2026: A Guide for US Small Businesses
- May 17, 2026
- Posted by: allan
- Category: Data Privacy & Cybersecurity
The United States now has more than a dozen comprehensive state privacy laws on the books. This guide explains what they require, which businesses they cover, and what small business owners need to do to comply.
-
AI Governance and Compliance Safeguards for Businesses Deploying Agentic AI
- April 7, 2026
- Posted by: rob
- Category: AI & Technology Law
-
Federal AI Procurement Under NSPM-11: What Government Contractors Need to Know
On June 5, 2026, President Trump signed National Security Presidential Memorandum 11 — known as NSPM-11 — establishing a sweeping new framework for artificial intelligence in the national security enterprise. The memorandum rescinds and replaces National Security Memorandum-25 issued by the Biden administration, signaling a decisive policy pivot: from cautious governance toward accelerated deployment. For
October 30, 2026 Read more -
CMMC and AI: Cybersecurity Certification Requirements for Defense Contractors Using AI
The Cybersecurity Maturity Model Certification program is no longer approaching — it is here. The CMMC 2.0 final rule took effect November 10, 2025, making CMMC requirements enforceable contract conditions for Department of Defense contracts. Since that date, the DoD has been inserting CMMC clauses into new contracts, Phase 2 third-party assessment requirements begin November
October 29, 2026 Read more -
California’s AI in Advertising: ADMT Obligations for Marketing Technology Platforms
The advertising technology industry has operated in a state of regulatory flux for years, navigating CCPA opt-out requirements, cross-context behavioral advertising restrictions, and an ongoing series of CPPA enforcement signals. With California’s final ADMT regulations now in effect as of January 1, 2026, many advertising technology companies assumed — with some relief — that they
October 28, 2026 Read more -
AI Governance Under State ADMT Laws: Impact Assessment Requirements Across 14 States
Automated decision-making technology has become central to how businesses operate. Credit decisioning, hiring screening, insurance underwriting, housing applications, healthcare triage — these are no longer processes that rely entirely on human judgment. AI and algorithmic systems now make or heavily influence outcomes that affect people’s fundamental life opportunities. State legislatures have noticed. As of mid-2026,
October 27, 2026 Read more
