Compliance (TCPA, GDPR, HIPAA)

Legal frameworks governing how businesses contact customers and handle their data. TCPA (US): voice and SMS marketing requires explicit opt-in plus opt-out. GDPR (EU): broad consumer data rights, breach reporting, right to deletion. HIPAA (US healthcare): PHI handling with BAA agreements required for any vendor that touches patient data. AI deployments must build compliance into the prompt layer, not retrofit after launch.