accepting new clients
Counsel for What’s Next
The Atlanta law firm for companies building with AI and the businesses adopting it.
// services
Three ways to work together
AI & Data Privacy
AI governance and privacy programs built on the frameworks regulators actually cite, including GDPR, CCPA and the EU AI Act.
Outside General Counsel
An experienced business lawyer on call for contracts, vendors, policies, and the judgment calls in between.
Contracts & Transactions
Drafting, review, and negotiation that keeps deals moving and protects you without slowing you down.
// in practice
What engagements look like
Practical guidance delivered while the law is still moving, translated into decisions your team can act on.
- AI use policies your team can actually follow
- Governance frameworks aligned to NIST AI RMF
- Privacy programs built for the GDPR, CCPA, GLBA, HIPAA, and any other regime that applies to your data
- AI and data terms for vendor and customer contracts
- Legal risk mapping before launches, deals, and audits
- A standing outside counsel relationship for everything in between
// regimes
Monthly retainer, hourly, or a fixed fee project. See fees →
// track record
Proof, not promises
Kyth · client
Owning the AI-accountability narrative
Kyth wanted to get ahead of AI regulation before clients asked. I turned their compliance thinking into clear client-facing materials and a roadmap of safeguards to build next. Now they walk into meetings owning the narrative.
Cloth Goblin · client
Compliance built from day one
A consumer app on the App Store and Google Play. Privacy by design under GDPR and CCPA, app store billing compliance, and policies that scale with the product. The legal work ran alongside the engineering rather than after it, and the app cleared both Apple and Google review with its compliance already in place.
California Delete Act · writing
Advice your engineers can build from
On August 1, 2026 the Delete Act turned deletion into an engineering deadline for data brokers. I read California’s API specification and wrote the walkthrough, covering authentication, hashed matching, the six list types, and the 45 day compliance cycle. Read the write-up →
Want a legal challenge turned into an advantage? Let’s talk.
// who this is for
Problems we solve
Developers
Legal review of your systems for explainability, documentation, and defensible data practices.
Businesses using AI
Clear and pragmatic internal AI policies before incidents occur.
AI-powered products
Disclosures, incident handling, and compliance that scales with your platform.
Companies without a legal team
Legal questions come up every week. A full time hire is overkill. This practice fills that gap.
// about
Meet your advisor
Amanda N. Busse counsels companies on artificial intelligence governance and data privacy. She advises companies that build products with AI and companies that adopt AI internally, working on AI use policies, governance frameworks aligned to the NIST AI Risk Management Framework, privacy programs under the GDPR, CCPA, GLBA and HIPAA, and the AI and data protection terms that appear in vendor and customer agreements. She also serves as outside general counsel to growing companies with no internal legal function.
Amanda has spent fourteen years at the intersection of business and technology, including in-house roles at BlackRock, Trimont and Mailchimp. Having practiced from inside operating companies rather than only advising them, she treats governance as an operational problem as much as a legal one and gives clients advice they can put into effect.
- Bar
- Admitted in Georgia
- Certified
- CIPP/US and CIPM, IAPP
- LL.M.
- Emory University
- J.D.
- Mercer University
- B.A.
- DePauw University
// outside counsel
A lawyer on your team, without the full time hire.
Growing companies have real legal questions every week. Outside general counsel means having a lawyer who already knows your business, so questions get answered as they come up, contracts get reviewed before signing, and small issues stay small.
// notes from counsel
The blog
July 19, 2026 · 9 min
DROP Everything: Building a DROP API Integration for Delete Act Compliance
August 1, 2026 is the day California's Delete Act stops being a registration exercise and becomes an engineering deadline. How the DROP API works, from authentication to hashed matching to status reporting.
March 31, 2026 · 7 min
Goodbye LLM Road?
The rise of world models and the future of AI beyond LLMs.
February 22, 2026 · 8 min
The EU AI Act is Here. Does It Apply to You?
If your business builds, uses, or integrates AI in any way, this regulation deserves your attention right now. Here's what you actually need to know.