Compliance Stuff

On November 24, 2025, the Trump Administration issued an Executive Order launching the  “Genesis Mission” , a national initiative led by the Department of Energy (“DOE”) to accelerate AI-driven scientific discovery. This executive order occurs at a time when the European Union recently delayed or scaled back regulation of AI through revisions to the EU AI Act (as well as GDPR) in its  omnibus package , while at the same time states have continued to introduce legislation to address AI while the federal moratorium on state AI laws has resurfaced. Many thought leaders and policy analysts are framing this as one of the most ambitious US science and technology initiatives in decades , often comparing it to – as does the executive order itself – the Manhattan Project. The order intends to position AI as a national strategic asset, akin to nuclear technology during the Cold War, where AI becomes central to US global competitiveness and national security . Timelines are aggressive: ...

Rhode Island businesses and any company with Rhode Island customers are officially on the clock. The Rhode Island Data Transparency and Privacy Protection Act (“RIDTPPA” or “the Act”) takes effect January 1, 2026 , meaning compliance deadlines are quickly approaching . Unlike many other state privacy laws, the Act provides no right to cure violations before penalties apply. With potential fines of up to $10,000 per violation, businesses should begin compliance efforts now by reviewing data practices, updating privacy notices, and preparing consumer rights workflows before year-end. Key Definitions: Controllers and Processors The Act follows the same framework used in other state privacy laws and the European Union’s General Data Protection Regulation (GDPR) by distinguishing controllers and processors: Controller : The individual or business that decides why personal data is collected and how it will be used. For example, a retailer deciding to collect customer email addresses for mark...

In today’s digital landscape, a website privacy policy is no longer just a legal formality—it’s a critical shield for your business and a trust-building tool for your customers.  Here’s why every company should prioritize providing your customers a comprehensive privacy policy: Legal Compliance is Non-Negotiable For businesses subject to them, multiple data protection laws and regulations worldwide – including GDPR in Europe, CCPA in California, and a growing set of laws in other states – mandate clear privacy disclosures .  Failing to have a compliant privacy policy can result in significant financial penalties, consumer protection claims, and reputational risks that could cripple your business.  These laws and regulations aren’t just suggestions—they’re legal requirements with real consequences. Build Customer Trust and Transparency Consumers are increasingly privacy-conscious.   A clear, transparent privacy policy demonstrates your commitment to protecting user d...

In today’s hybrid and remote work environment, organizations are increasingly turning to digital employee management platforms that promise productivity insights, compliance enforcement, and even behavioral analytics. These tools—offered by a growing number of vendors—can monitor everything from application usage and website visits to keystrokes, idle time, and screen recordings. Some go further, offering video capture, geolocation tracking, AI-driven risk scoring, sentiment analysis, and predictive indicators of turnover or burnout. While powerful, these platforms also carry real legal and operational risks if not assessed, configured, and governed carefully. Capabilities That Go Beyond Traditional Monitoring Modern employee management tools have expanded far beyond “punching in,” reviewing emails, and tracking websites visited. Depending on the features selected and how the platform is configured, employers may have access to: Real-time screen capture and video recording Automated t...