#legal
Legal considerations for business finance and accounting compliance
Property management trust accounts require a monthly three-way reconciliation matching the bank balance, general ledger, and tenant sub-ledgers to the penny, and even a one-dollar variance is treated as a noncompliant account by state real estate regulators.
Every US state has its own data breach notification law, with individual-notice deadlines ranging from 30 days (California, Colorado, Florida, New York, Washington) to 60 days (Connecticut, Texas), and small businesses must comply with the law of every state where an affected person lives, not just their home state.
Surcharging, cash discounts, and dual pricing are the three legal ways to pass card fees to customers in 2026—surcharges cap at 3% (Visa) and are banned in CT, ME, and MA, while cash discounts and dual pricing are legal in all 50 states and skip the 30-day network notice.
In 2025, plaintiffs filed 3,117 federal ADA Title III website accessibility lawsuits and an estimated 35,000–50,000 private demand letters reached U.S. businesses. This guide explains what WCAG 2.1 Level AA actually requires, why the Robles v. Domino's Pizza ruling and the DOJ's 2024 Title II rule made it the de facto standard, and how small and mid-size businesses can build a five-phase remediation roadmap and defensible paper trail before a demand letter arrives.
California SB 478, the FTC Junk Fees Rule, and new Minnesota, Massachusetts, and Connecticut statutes require all-in pricing across hotels, tickets, restaurants, and subscriptions in 2026. A practical compliance checklist covering pricing engines, third-party feeds, frontline scripts, and the accounting reclassification work that follows.
California's SB 53 (Transparency in Frontier AI Act) took operative effect on January 1, 2026, requiring foundation model developers training above 10^26 FLOPs to publish safety frameworks, report critical incidents to Cal OES within 15 days (24 hours for imminent threats), maintain anonymous whistleblower channels, and face civil penalties up to $1 million per violation enforced by the California Attorney General.
Colorado replaced its original AI Act with SB 26-189, which takes effect January 1, 2027 and imposes pre-use notices, 30-day adverse outcome disclosures, and consumer access, correction, and human review rights on businesses using automated decision-making technology in eight consequential decision categories. A compliance playbook for small and mid-size deployers and developers.
How the Fifth Circuit's vacatur of the 80/20/30 rule, the DOL's 2024 technical amendment, and an expanding state mini-tip-credit patchwork reshape FLSA tip pooling, dual jobs analysis, and Section 3(m) compliance for restaurants, bars, hotels, and salons in 2026.
A practical guide for U.S. SaaS founders, foundation model providers, and AI agent builders navigating the EU AI Act before the August 2, 2026 enforcement deadline — covering Article 22 representatives, Article 50 transparency disclosures, GPAI Code of Practice obligations, fine tiers up to 7% of global turnover, and procurement-questionnaire readiness.
The Eighth Circuit vacated the FTC's Click-to-Cancel rule in July 2025, but ROSCA, Section 5, and state auto-renewal laws still bind subscription operators—and refund reserves, chargeback liabilities, and contingency accruals still belong on the balance sheet.
How forensic accounting and litigation support practices should structure revenue recognition, engagement letters, conflict checks, and KPIs to stay defensible under Daubert, Rule 702, ASC 606, and AICPA SSFS 1.
NYC Local Law 144's AEDT bias-audit, public-summary, and ten-business-day candidate notice rules now carry real enforcement risk after the December 2025 State Comptroller audit — and Illinois HB 3773, California's ADMT regulations, Colorado SB24-205, and Maryland HB 1202 layer additional 2026 obligations on multi-state employers using AI hiring tools.
