Contact Robert Melton, Esq. or submit a business inquiry online.
-
AI and Biobank Consent: Why Historical Consent Forms Don’t Cover AI Training
- September 24, 2026
- Posted by: allan
- Categories: AI & Technology Law, Healthcare Law
No CommentsBiobanks hold millions of samples collected under consent forms that predate AI — but pharmaceutical companies need that data for AI drug discovery training. This post examines the Common Rule and HIPAA consent gaps, the IP risks they create, and the remediation strategies institutions must deploy now.
-
AI and Informed Consent in Clinical Settings: The Black Box Disclosure Problem
- September 12, 2026
- Posted by: allan
- Categories: AI & Technology Law, Healthcare Law
When AI assists clinical diagnosis, the physician faces a two-sided liability trap — and a black box they may not be able to explain to patients. This post examines the informed consent doctrine, malpractice exposure, and algorithmic bias risks that every health system deploying AI diagnostic tools must address.
-
Why Prompt Injection Is the Phishing Attack of the AI Era: Legal Liability and Mitigation
Twenty years ago, phishing was an emerging threat that most corporate security programs barely addressed. IT departments treated suspicious emails as a user education problem. Legal teams had not yet processed what a successful phishing attack — leading to a breach, a wire transfer, or a data exfiltration — would mean for a company’s liability
November 15, 2026 Read more -
North Korean IT Worker Fraud: Deepfakes, Sanctions Risk, and Hiring Compliance
Over the past several years, a persistent and increasingly sophisticated threat has been quietly infiltrating American companies: North Korean nationals posing as freelance software developers and IT contractors, using fabricated identities, AI-generated deepfakes, and elaborate infrastructure to pass hiring screening and gain access to corporate systems, sensitive data, and a steady stream of American payroll
November 14, 2026 Read more -
AI Supply Chain Security: Prompt Injection, Data Poisoning, and Model Stealing
When a company installs traditional software, security teams know what to look for. They check for known vulnerabilities, review patch history, assess the vendor’s security posture, and run penetration tests. The attack categories are well-understood, the defenses are well-cataloged, and the tools for testing and monitoring have been refined over decades. AI systems do not
November 13, 2026 Read more -
AI-Enabled Cyberattacks: Emerging Legal Standards for Corporate Cybersecurity Programs
Cyberattacks were already expensive and frequent before AI. They have become cheaper, faster, and harder to detect since. The same AI tools that help businesses automate customer service, generate marketing copy, and analyze financial data are being used by threat actors to write more convincing phishing emails, generate deepfake audio of your CEO authorizing a
November 12, 2026 Read more