4th challenge: what's legal in one state may not be legal in another and may change with every legislative session. If your customers are physicians and other

4th challenge: what's legal in one state may not be legal in another and may change with every legislative session. If your customers are physicians and other practitioners, the state laws are even more complicated as to who any data belongs to. In some areas, any data about patients is technically owned by their physician. If you're contacting patients, your attorneys will debate at length whether something is legal under the rules of HIPAA. In the end, it will be a much ado about nothing, because HIPAA is barely policed or litigated over. So you'll end up with a large legal consulting fee, a confusing legal opinion, and no clear direction on whether to move forward or not. The next attorney will have a wholly different opinion. Healthcare law in the US is absolute shit.