2024 at Rikka: Achievements, Lessons, and What’s Next in 2025

CEO Rikka Law Group | Co-Founder Enzio.ai

January 21, 2025·Insights

We are now a few weeks into 2025, and the year is in full swing! I have spent the last couple of weeks really thinking about what the new year holds for Rikka, especially as we get through strategy and planning sessions to be able to focus on what is important - as a team and with our clients. 2024 was a significant year not only for us but for our clients as well.

Looking back on 2024, it was a year of huge preparation as we got crystal clear on our unique value proposition and the Rikka method of providing strategic, actionable legal and compliance advice, refreshed and relaunched our brand, as well as expanded our service offerings. Rikka comprises these four primary pillars that complement one another and allow us to provide a holistic, multi-faceted suite of services to our clients: Rikka Law, Rikka Academy, Rikka Insights and Rikka Government.

Grid displaying the four pillars of Rikka: Rikka Law, Rikka Academy, Rikka Insights, and Rikka Government, representing the firm's integrated legal and advisory services

From adapting to the ever-evolving legal and technology landscapes to securing critical certifications, we are not only better equipped but also reinforced in our commitment to providing unparalleled legal support for our clients.

So here’s a bit of what was important for us and our clients in 2024, as it also offers a glimpse into what 2025 might hold.

Navigating New Consumer Privacy Laws Across the U.S.

Laptop secured with a lock representing data privacy and cybersecurity compliance for technology businesses

We are actively monitoring the data privacy landscape across the U.S. As of January 16, 2025, 13 U.S. states have comprehensive consumer data privacy laws in effect.

These laws are:

Several more U.S. states also have data privacy laws that will take effect later in 2025, including:

Tennessee Information Protection Act (Goes into effect July 1, 2025)
Minnesota Consumer Data Privacy Act (Goes into effect July 31, 2025)
Nebraska Data Privacy Act (Goes into effect Oct. 1, 2025)
Maryland Online Data Privacy Act (Goes into effect Oct. 1, 2025)

These laws signal a continued focus on data protection and consumer privacy rights at the state level. However, there is still no overarching federal consumer privacy law, and the bipartisan American Privacy Rights Act is still making its way through Congress.

For businesses, this patchwork of data privacy regulations requires nuanced compliance strategies and operational adjustments tailored to the legal frameworks of each state. This means that companies must tailor their internal policies and external privacy disclosures according to the laws of the states in which they operate. This is no easy feat given the borderless nature of technology. To do this successfully, they must have a nuanced understanding of compliance requirements, operational adjustments, and legal know-how.

At Rikka, we are at the forefront of these regulatory changes, guiding companies to adapt and succeed within this evolving and challenging legal framework. Our team is working quickly to decode these laws, offering tailored solutions to our clients to ensure their business operations remain compliant; while keeping in mind the practical realities of running a business. Whether your organisation is addressing consent management, data minimization, or cross-border data transfers, let Rikka be your trusted partner for navigating this complex terrain.

The AI Regulatory Landscape is Undergoing Rapid Change

Artificial Intelligence (AI) continues to transform industries and our way of life, but its rapid adoption has brought forth critical questions about how to regulate AI. 2024 brought on continued development in the AI space and enhanced focus from governments around the world grappling with how to regulate AI. Notably, the world’s first comprehensive AI regulation, the European Union’s Artificial Intelligence Act, went into effect in 2024. In 2024 Colorado became the first US state to enact comprehensive legislation regulating AI.

The changing AI regulatory landscape is a wake-up call for companies to align their AI deployment strategies with new and existing legal requirements. However, Rikka advises companies to exercise caution before making drastic changes to their business models in response to emerging AI laws, regulations, and guidance. Governments worldwide are still navigating how to regulate AI effectively, and these frameworks may evolve or even be rescinded, as demonstrated by President Trump's recent revocation of Biden's 2023 Executive Order aimed at mitigating AI's risks to consumers, national security, and society.

Throughout last year, one of our main focuses has been helping businesses assess and recalibrate their AI initiatives to adapt to the changing regulatory landscape. Rather than taking an overly prescriptive approach to compliance counseling, Rikka strives to provide practical advice that helps companies mitigate risk while maximising their opportunities for business success.

Our Team Expanded!

As mentioned earlier, 2024 was a year of growth for Rikka. McLean Sieverding joined us as Member and Director of Legal and Business Affairs. He’s a commercial attorney with 20+ years of experience advising on complex technology transactional matters f or clients predominantly in the IT, software, telecom, healthcare, and financial services sectors. As a recognized privacy and data security law expert, he will use his vast expertise to counsel our clients on the development and implementation of comprehensive strategies to comply with the ever-increasing domestic and international privacy laws and regulations.

With McLean onboard in a critical role, we continue to increase our capacity to provide valuable services that help our clients achieve their desired results.

And We Got Certified!!

We registered our business as a government contractor on sam.gov and pursued and achieved key relevant certifications that allow us to connect more deeply with our clients as a woman-owned, minority-owned, and service-disabled veteran owned business:

CMMC (Cybersecurity Maturity Model Certification) L1
Service Disabled Veteran Owned Small Business
WOSB (Women-Owned Small Business) - Pending
GSA Schedule - pending
WBENC Certification - pending

These certifications enhance our credibility and enable us to serve a broader range of clients and contribute to impactful projects in the public and private sectors.

What’s Next for Rikka in 2025?

The lessons and achievements of 2024 have set the stage for a transformative year ahead. In 2025, we will:

Expand Our Expertise in Emerging Legal Areas:
As privacy laws and AI regulations evolve, Rikka will deepen its focus on these domains to keep our clients ahead of the curve. Our tailored services and resources will help organizations understand and navigate these rapidly changing landscapes effectively.
Leverage Our Certifications:
To pursue larger, more impactful projects, particularly in public sector partnerships. This includes leveraging our certifications to build relationships with federal agencies and state governments.
Champion Compliant Innovation:
As technologies like AI, blockchain, and quantum computing gain traction, we prioritize helping clients innovate in compliance with laws and regulations. Our focus will include building legal frameworks for technology deployment and adoption, enhancing trust, and fostering collaboration between industry stakeholders and policymakers.

Finally, in 2025…

With an expanded suite of services, strengthened certifications, and a clear vision for the future, we are well-positioned to tackle the challenges and opportunities of 2025.