This is a static, illustrative sample. It shows the categories, coverage, and format of the live Regulatory Radar™ but is not maintained and does not reflect current requirements. The live, monthly-refreshed Radar — with the full 63-record register, jurisdiction map, timeline, filters, and export — is available to subscribers.
One row per category, chosen to show the range of exposure the full register covers: from headline state privacy statutes to the highest-consequence federal cross-border rule. The full subscriber service adds status filters, jurisdiction map with click-to-filter, chronological timeline, monthly change log, CSV/XLSX export, and the full plain-English record for each requirement.
CCPA/CPRA is unique in covering employee (HR) and B2B contact data, and it treats precise geolocation and health inferences as "sensitive personal information." PHI handled under HIPAA is exempt, but marketing, HR,…
Pharma, device, and patient-services companies are usually business associates (or hybrid covered entities via patient-assistance and copay programs). The de-identification safe harbor (§164.514) and the limited data…
For U.S. life-sciences companies the practical effect is a longer runway, not a smaller obligation. Transparency duties under Article 50 are live now and apply to any AI a patient, investigator, or HCP interacts with in…
MHMDA is the highest-risk state health-privacy law because of its broad definition (any data linked to health status, including inferences) plus a private right of action that fuels class litigation. HIPAA-covered data…
BIPA is the most-litigated biometric law in the U.S.; life-sciences exposure comes from lab access controls, clinical-trial identity verification, and timekeeping systems. The 2024 amendment caps repeated-scan damages,…
The vacatur is routinely over-read as ending the exposure. It does not. It removed one HIPAA theory on one class of page while leaving authenticated-page exposure intact and leaving every non-HIPAA theory untouched.…
This is the highest-consequence and least-tooled obligation currently facing life-sciences data operations. There is no exemption for anonymised, pseudonymised, de-identified, or encrypted data, so the de-identification…
The SHIELD Act imposes an affirmative "reasonable safeguards" duty on any company holding NY residents’ private information—covering life-sciences HR, clinical, and commercial data even without a NY office. It is a…
Interactive jurisdiction map. Filter by status, category, and function. Chronological timeline. Full plain-English record for every requirement, including the client-ready talking point. CSV / XLSX export. Monthly change log with source citations. Available standalone or bundled with TRESTLE Privacy Console™, AI Integrity Test™, AI Integrity Framework™, and Praxis™.
Delivered as consulting by default; attorney engagement on request at higher rates. Signed by L. Stephan Vincze — attorney-client privileged when retained by a GC or outside counsel. This sample is a compliance-awareness illustration only and does not constitute legal advice; verify current requirements against primary sources and counsel.