IP, Internet & Compliance

Privacy Law

The policy is a promise. Keep it.

Privacy law in the United States is a patchwork, with no single federal statute covering most consumer data and a growing roster of state laws that reach any business collecting personal information from state residents. Hank advises online and offline businesses on what they can collect, what they have to disclose, and what they owe a customer who asks to see, correct, or delete their data.

Your privacy policy is an enforceable promise, and the fastest way into trouble is to publish one that doesn't match what you do with data. Hank writes the policy to your data practices, what you collect, why, who you share it with, and the rights you have to offer. Texas businesses now answer to the Texas Data Privacy and Security Act, effective July 1, 2024, which gives consumers the right to access, correct, delete, and opt out of the sale of their personal data and of targeted advertising. California, Virginia, Colorado, and a dozen more states impose their own versions, so a company selling nationwide has to satisfy the strictest rule that reaches its customers.

A policy on the website is only the visible part of privacy compliance. Hank drafts the data-processing terms that bind the vendors and platforms that touch your customers' information, builds the process for handling consumer requests within the deadlines the statutes set, and prepares for the breach notification obligations that follow a security incident under Texas law and the laws of every other state. When you collect data from children, sell to European customers, or run promotions that gather entries, he folds COPPA, the GDPR, and the disclosure rules into the same compliance picture instead of treating each as a separate fire.

Hank has counseled eCommerce companies, software and SaaS businesses, marketers, and service providers on building privacy practices that withstand a regulator and a contract audit alike. Every engagement works toward the same result, data practices you can describe accurately, defend if challenged, and rely on as the law keeps changing.

Services Include

  • Privacy policies
  • Website disclosures
  • Data collection practices
  • Vendor and platform issues
  • Online promotions
  • eCommerce compliance support
  • Contract privacy provisions
  • State privacy law compliance

Privacy Law Insights

Privacy Policies for Online Businesses and Platform Requirements

No single federal privacy statute requires every U.S. website to post a privacy policy. If your site collects personal information, your policy should match your data flows, tracking tools, vendor relationships, state privacy obligations, FTC risk, and platform requirements.

Read article

COPPA Compliance for Websites and Apps

COPPA gives parents control over personal information collected online from children under 13. If your website, app, game, ecommerce store, social platform, learning tool, or software service targets children under 13, the product needs notice, parental consent, data minimization, security, and retention controls before collection begins.

Read article

Texas Data Privacy and Security Act

Texas doesn't use the California model for consumer privacy coverage. The Texas Data Privacy and Security Act applies without a $26.625 million revenue trigger, a 100,000 consumer threshold, or a requirement that data sales drive half the business.

Read article

Texas Data Breach Notification

Texas divides a covered data breach into two notice tracks. A business generally has no more than 60 days after determining that a breach occurred to notify affected individuals. A breach involving at least 250 Texas residents also requires an electronic report to the Texas Attorney General as soon as practicable and no later than 30 days after that determination.

Read article

Data Processing Agreements for Vendors That Handle Customer Data

When you give a vendor access to customer data, your services agreement rarely limits how the vendor may use that data. A data processing agreement defines the permitted processing, security duties, assistance obligations, and end of service procedures.

Read article

State Privacy Laws Beyond Texas for Businesses That Sell Nationwide

As of July 30, 2026, 20 state consumer privacy laws have taken effect, including Florida's narrower Digital Bill of Rights. Alabama, Louisiana, Oklahoma, and Vermont have enacted four more laws with future effective dates, bringing the enacted total to 24 under that counting method.

Read article

Ready to make the right legal move?

Share the issue. Get direct attorney review. Receive a concrete recommendation.

Submit an Inquiry