top of page
DATA STEWARD PLLC
Your Privacy Policy Is a Copy-Paste Disaster
Most startups have a privacy policy. Almost none of them actually reflect product or service functionality. I've reviewed hundreds of privacy policies. Heck, it might be thousands at this point. You can guess how it typically goes: Founder Googles "free privacy policy generator," plugs in their company name, pastes the result onto a page labelled “Privacy Policy,” and calls it a day. (The policy says the business collects "name, email, and usage data." In reality, the produc
Lisa Gavin
Apr 102 min read


8 Questions You Should Ask Before Signing Any Vendor Contract
Signing a vendor contract without understanding how risk is allocated can leave your business exposed long after the deal is done. This post outlines the eight questions every business should ask before signing any vendor agreement, especially when data, privacy, and consumer trust are involved.
Lisa Gavin
Feb 14 min read


Customer and Employee Data Privacy: Illinois Businesses Must Act Affirmatively
Businesses in Illinois must comply with ever-evolving data privacy laws to protect both consumers and their own organizational operations. Under stringent regulations like the Biometric Information Privacy Act (BIPA) and the Personal Information Protection Act (PIPA) , failing to act can yield legal and reputational consequences. Understand these laws to help avoid the risks that come with handling sensitive customer information. Illinois Data Privacy Laws: Key Requirements
Lisa Gavin
Mar 20, 20252 min read


AI Rules for Illinois Employers Lack Detailed Guidance
It's here: Illinois' first AI law for business owners. Summary HB 3773 (effective Jan. 1, 2026) amends the Illinois Human Rights Act...
Lisa Gavin
Mar 1, 20252 min read
bottom of page