#47 - Navigating 2025 Privacy Laws: How Telemedicine Dodges Million-Dollar Privacy Fines in 2025

This episode is sponsored by Lightstone DIRECT. Lightstone DIRECT invites you to partner with a $12B AUM real estate institution as you grow your portfolio. Access the same single-asset multifamily and industrial deals Lightstone pursues with its own capital – Lightstone co-invests a minimum of 20% in each deal alongside individual investors like you. You’re an institution. Time to invest like one.__________________________What if complying with 19 U.S. state privacy laws and counting was as easy as copy-paste, and cost-effective for solo docs or big practices?In this timely episode of Telemedicine Talks, hosts Phoebe Gutierrez and Dr. Leo Damasco sits down with Michael Williams, as he breaks down the patchwork of laws (GDPR, CCPA, and 2025 updates), why they’re based on patient location not your HQ, and how per-incident fines can hit millions. He shares Clym’s origin story from a $100K consulting flop, explains enforcement trends e.g., revenue via “phantom taxes”, and offers nuggets on getting started fast: No devs needed, scalable for SMBs to enterprises, and focused on user experience without legal headaches.If you’re in telemedicine and sweating 2026 enforcement, this is your roadmap to proactive compliance—protecting patients, avoiding surprises, and turning regs into a competitive edge.Three Actionable Takeaways:Assess your exposure: Privacy laws apply based on patient location, not yours—e.g., California rules for CA patients even if you’re in Texas. Map your data collection, searches, forms and review for GDPR/CCPA compliance. Use tools like Clym to scan and implement banners and notices in 5 minutes to mitigate per-incident risks.Simplify setup: Don’t hire pricey consultants. Opt for scalable software. Copy-paste Climb’s code for default coverage across 160 regs, privacy, and accessibility. Customize as needed, but start basic: It’s dev-free, cost-effective, and ensures you’re compliant day one without ongoing manual tweaks or $100K fees.Prepare for enforcement: Ignorance isn’t a defense. 2026 brings ramped fines (up to $7,500 per record). Educate your team on per-occurrence penalties, monitor state changes (19 U.S. laws now), and build revenue buffers. Proactively audit data sharing to avoid “phantom taxes” and turn compliance into patient trust.About the Show:Telemedicine Talks explores the evolving world of digital health, helping physicians navigate new opportunities, regulatory challenges, and career transitions in telemedicine.About the Guest:Michael Williams is CFO and Co-Founder of Clym, a leading platform for automated compliance with data privacy, accessibility, and website regulations. A former pro basketball player (6’10”!), he started as a tax attorney at Ernst & Young, then served as CFO for global firms. Michael blends legal, financial, and operational expertise to make compliance scalable, affordable, and user-friendly, helping telemedicine providers reduce exposure while enhancing experiences.Connect with Michael Williams:· Website: https://www.clym.io· Email: [email protected] the Hosts:Dr. Leo Damasco – Pediatrician and emergency medicine doctor turned telemedicine advocate, helping physicians transition to digital health.Phoebe Gutierrez – Former state regulator turned telehealth executive, specializing in compliance and sustainable virtual care models.Connect with Phoebe Gutierrez:https://www.linkedIn.com/in/pkgutierrez/[email protected] (mailto:[email protected]) The information provided in Telemedicine Talks is for educational and informational purposes only and should not be construed as medical, legal, or financial advice. While we discuss best practices, industry trends, and real-world experiences, every situation is unique. Listeners should consult with qualified professionals before making decisions related to telemedicine practice, compliance, contracts, or business operations. The views expressed by the hosts and guests are their own and do not necessarily reflect those of any organizations they may be affiliated with. Hosted by Simplecast, an AdsWizz company. See pcm.adswizz.com for information about our collection and use of personal data for advertising.