(06)Writing
Plain-English answers on AI, data and tech law.
Vibe-coded an app? Made images with ChatGPT? Pasting client files into AI? Detailed, sourced guides to the questions people really ask, and deep dives on the laws behind them.
Everyday AI questions
The questions people actually ask.
Answered properly.
Can you be sued over an inaccessible website? The ADA and the European Accessibility Act
Over 3,000 website accessibility suits hit US federal courts in 2025. Who gets sued under the ADA, what the European Accessibility Act requires, what to fix.
Does your cookie banner actually work? How to test it, and Google Consent Mode v2
Can UK websites use analytics without cookie consent in 2026?
Built with Cursor, Bolt, v0, Replit, Claude Code or Windsurf? What the tool leaves to you
Vibe-coded an app? The legal implications for you
The global AI law map 2026: every major rule, deadline and fine
Made images with ChatGPT, Gemini or Midjourney? What you can legally do
What legal documents does my website or app need in 2026?
Is it legal to put client data into ChatGPT or Claude?
Added an AI chatbot to your website? You’re responsible for what it says
Using AI to write your marketing? Disclosure, fake reviews and ‘AI-powered’ claims
Is it legal to clone a voice or use someone’s face with AI?
Using AI to screen CVs or interview candidates? The laws that apply
Is it legal to use an AI notetaker on calls? Consent and confidentiality
Deep dives
The rules in detail.
By topic.
The AI Act after the Omnibus: what moved, what didn’t.
The 2026 amendments pushed back high-risk deadlines. Transparency duties and general-purpose AI enforcement stayed on schedule.
Read articleColorado rewrote its AI law. Automated decisions are the new frame.
Colorado and California now converge on one question. When software makes a significant decision about a person, what are you telling them, and can a human step in?
Read articleMoving personal data across borders: EU, UK, US and India.
Every global product moves personal data between countries. Four regimes, four different starting points, one architecture to design.
Read articleLabelling AI content is now a product requirement.
The EU, India and South Korea now all expect AI-generated content to be identifiable. The details differ, but the build is similar.
Read articleYour team already uses AI. Write the policy they’ll follow.
Banning AI tools rarely works. A short, specific policy protects client data and IP while keeping the productivity.
Read articleNIS2, DORA, the CRA and the new PLD: Europe’s cyber package, decoded.
Four EU laws now reach far beyond Europe’s critical infrastructure. If you sell software or cloud services into the EU, at least one probably touches you.
Read articleAI and copyright: where training data and outputs stand worldwide.
Courts and regulators are answering two questions at different speeds: can you train on protected works, and who owns what the model produces?
Read articleThe US state privacy patchwork, explained for global founders.
There is still no federal privacy law. Around twenty states now have their own, and the differences matter more than the similarities.
Read articleChina’s data and AI rules: what global companies need to know.
China has one of the most developed digital rulebooks in the world. It reaches offshore companies, and launching AI there is its own regulatory project.
Read articleOne crypto product, many regulators. Map the activities first.
Licensing questions multiply with every market. A single map of what your product does makes each local answer faster.
Read articleIndia’s DPDP clock is running. Build before May 2027.
The DPDP Rules phase in over eighteen months. The policy is the easy part. Notice, consent and rights infrastructure is what takes time.
Read articleShipping an AI feature? Start with a system map.
A model name tells you little about legal exposure. Intended use, decision-making power and the people affected tell you much more.
Read articleYour first enterprise DPA is a product conversation.
A data processing agreement becomes meaningful when your engineers and operations team can deliver what it promises.
Read articleWhen does a product change need an impact assessment?
The important trigger is the risk to people. A new technology, use of data or decision process can change that risk.
Read articleThe token label is not your regulatory analysis.
Start with the rights, economic function and activities around an asset before deciding which regulatory framework applies.
Read article
General information, not legal advice. Each article links its primary sources; check current requirements for your situation.
(→)Next step
Turn the right question into a practical decision.
Thirty minutes. Which laws apply, your biggest exposure, and whether you need me at all. No obligation.
Built your app with AI tools and it isn’t quite ready? The launch package