For SaaS companies working with healthcare organizations, one of the most common contracting questions is whether a Business Associate Agreement (BAA) is actually required. The answer is not always straightforward. Many healthcare customers automatically request a BAA as part of…
As privacy regulation continues to shape enterprise procurement, GDPR and CCPA/CPRA provisions have become standard components of SaaS negotiations — particularly in enterprise and regulated-industry deals. For growing SaaS companies, privacy and security reviews are no longer isolated legal exercises.…
HIPAA ed-tech privacy issues often surface late in acquisition diligence, when they are more difficult and costly to resolve. For healthcare and digital health companies, risks tied to clinical photography, PHI classification, and entity status can affect valuation, deal timing,…
Artificial intelligence procurement is increasingly being handled through existing SaaS contracting workflows. While many traditional SaaS concepts still apply, organizations that treat AI vendor reviews as ordinary software transactions may overlook operational, regulatory, governance, and enterprise-risk issues that extend far…
While Illinois doesn’t have a single comprehensive privacy law like California’s CCPA/CPRA, it remains one of the most evolved states in the U.S. when it comes to privacy protections. Illinois has taken significant steps to safeguard personal information through various…
In today's digital age, privacy compliance is a cornerstone of ethical business conduct, particularly for organizations handling individuals' personal information. For businesses and organizations in Illinois, understanding and adhering to relevant privacy laws and regulations is paramount to safeguarding the privacy rights of their members and attendees. In this guide, we'll delve into the pertinent requirements under Illinois laws, including the importance of checking local ordinances, and outline the necessary notices and consents to ensure robust privacy compliance across various domains, such as websites, event registrations, and meetings.
In today's interconnected world, social media platforms play a significant role in our personal and professional lives. From LinkedIn to Facebook, tagging has become a common practice for connecting with others and sharing content. However, the dynamics of social media etiquette, particularly concerning tagging individuals in posts, can sometimes lead to unexpected consequences. In this blog, we'll explore the privacy pitfalls associated with tagging in social media and provide best practices for businesses and organizations to navigate these issues effectively.
In recent times, many of us have found our mailboxes inundated with letters and our phones ringing with calls, all from the United States Census Bureau. Amidst this flurry of correspondence, it's crucial to understand the distinction between the NHIS (National Health Interview Survey) and the mandatory U.S. Census Survey. Let's delve into what sets these two apart and why knowing your rights matters.