Since 2020, Looking Ahead Elementary School has utilized a variety of ed tech products in its classrooms, believing that these products are preparing its students for advances in technology. Parents of students at Looking Ahead Elementary School are concerned that these ed tech products are engaging in surveillance of the students and are collecting student data for advertising purposes. These parents hire an attorney to lobby for stronger legal protections for student privacy. Which of the following federal laws currently contain the strongest legal protections related to ed tech products?

Just Learn, a university that opened in 2020, wants to make sure that people at the university have ready access to healthcare. Just Learn has plans to open a healthcare clinic that can be used by both students and faculty. The President of Just Learn asks you, as the privacy officer, what privacy requirements the healthcare clinic likely should follow. You respond:

Doctor Yasmine Yellow specializes in surgeries that are not medically necessary such as face lifts. Since most of the procedures Doctor Yellow performs would not be covered under health insurance, she only accepts credit cards for payment and does not bill insurance. Billy Blue, a potential patient, looks online for a doctor to perform a facelift and finds Doctor Yellow’s website. When Billy visits Doctor Yellow’s office, Billy does not receive a privacy notice with his initial paperwork. Billy asks Doctor Yellow for a copy of the privacy notice and is told that the office does not maintain a privacy notice. Is it likely that Doctor Yellow has violated HIPAA?

You are hired as the Chief Privacy Officer of Faster&Faster Delivery, a company based in Chicago, Illinois, which has ten warehouses located throughout the state. After the company’s CEO learns that the U.S. Congress is considering a bill known as the “Anti-Employer Surveillance Act,” which would prohibit employers from utilizing certain surveillance tools that use artificial intelligence, the CEO asks you to review the company’s current employee monitoring practices for any potential violations of existing federal or state laws. After investigating the current practices of the company, you become aware that Faster&Faster Delivery is using an employee-monitoring tool that records the video and audio of employees while on-site at the company’s warehouses. The tool utilizes artificial intelligence to identify the faces of individual employees and then to calculate for each identified employee the daily percentage of conversations that are not work related. Your investigation also reveals that employees who work in the warehouses are not informed of this employee-monitoring tool and only top-level executives receive the reports generated by the tool. Based on your investigation, your response to the CEO is:

TalkTogether.com, a world-wide social media company, is based in San Francisco, California. TalkTogether.com had worldwide revenues of $100 billion in 2024. After numerous meetings of top officials, TalkTogether.com decides that the company should focus on the individual privacy rights of its users. Despite this decision, the CEO determines that data portability is not feasible for the company. What maximum fines could TalkTogether.com face under the GDPR?

Since the 1960s, cardiologists have prescribed portable cardiac monitoring devices for patients to wear at home for short periods to help diagnose heart problems. Advanced Medical Assistant, a company focused on software as a medical device (SaMD), has developed an artificial intelligence tool to be used with these portable devices which would analyze the heart data in real time and immediately report certain irregularities to the patient’s doctor. The device would also collect heart data to help improve the algorithms used by the tool. As the Chief Compliance Officer, you recommend that:

Looking at the problem above of the Kirby Bauer test, the Federal Drug Administration (FDA) must decide which antibiotic to approve to fight a bacterial infection that results in high fevers and localized rashes. Which antibiotic do you predict that the FDA scientists will likely approve?  

What is the name of this organic compound?

Luke Lake, an experienced poker player, signs up to play in a national poker tournament at Cool Casino in Las Vegas, Nevada. After arriving at the casino, Luke decides to participate in 4 smaller tournaments in addition to the national poker tournament. To cover the entry fees, Luke pays the casino $20,000 in cash. Does this cash payment trigger a reporting requirement?

Five years after Gus Green retired from working for a major tobacco producer, Gus was diagnosed with lung cancer. Gus hires an attorney to determine if he has a viable legal claim against his former employer. Gus’s attorney sends a number of requests to the company for records maintained about Gus as well as for practices in place at the time that Gus was an employee of the company. What are the reasons that the company likely maintained these records?