Guides
Plain answers to the legal questions technology companies ask about privacy, AI governance and their contracts. Each guide is signed by the firm's founding attorney and shows the date it was published and the date it was last reviewed.
Website and app legal documents
Privacy policies, terms of use, cookie and tracking notices, and the privacy questions raised by the tools a website or app runs.
- Received a CIPA demand letter about your website? What to do first
- Privacy policies
- Terms of service
- Cookies, pixels & trackers
- Session Replay Tools
- Conversion APIs
- Digital Analytics
- A/B Testing
- Health Apps (Mobile)
- Ad-funded Mobile Games
Vendor contracts
Data processing agreements, master service agreements, statements of work and pilot terms: the contracts a technology company signs with customers and vendors.
- Do you need a DPA? GDPR Article 28 and CCPA service provider terms
- Master Service Agreements
- Scope of Work
- Pilot contracts
Assessments
Data protection impact assessments, privacy impact assessments, California risk assessments, AI impact assessments and transfer impact assessments.
- DPIA vs PIA: what each is, when you need one, and what goes in it
- How to run a DPIA in practice, with a checklist
EU AI Act and US AI rules
The EU AI Act and US state rules on AI: who is in scope, the duties of providers and deployers, and transparency for chatbots and assistants.
- EU AI Act timeline after the omnibus: what applies when
- AI compliance
- Customer-facing Chatbots
- AI Assistants
- Brain Computer Interfaces
International data transfers
Moving personal data out of the EU and the UK: the Data Privacy Framework, standard contractual clauses, transfer impact assessments and the UK addendum.
- Transferring personal data out of the EU after the Data Privacy Framework: SCCs, TIAs and the US adequacy decision
- UK and Swiss transfers: the IDTA, the UK Addendum and the Swiss list
Privacy-enhancing technologies
What data clean rooms, identity solutions, customer data platforms and other privacy-enhancing technologies do in law.
3 guidesAI-native law firms: a reference (October 2026)
An unranked comparison of firms that call themselves AI-native: structure, admissions, main work, published prices and AI, from each firm's own site.
Read the guideCrypto and digital assets have their own series, dated by the law it states: Deep Dives. The founding attorney's earlier articles, as first published, are in Publications.