#legal
Legal considerations for business finance and accounting compliance
Seven manufacturers received FTC warning letters on July 6, 2026 over unqualified "Made in USA" claims. This guide covers the "all or virtually all" standard under 16 CFR Part 323, the $53,088-per-violation penalty, qualified-claim wording, and the substantiation file every small manufacturer should keep.
On July 1, 2026, Connecticut lowered its privacy law threshold to 35,000 residents, Arkansas banned targeted ads to minors under ACTOPPA, and Utah added a data correction right, pulling more small businesses into scope than ever before.
New Jersey's Family Leave Act expands July 17, 2026, lowering the employer threshold from 30 to 15 workers and cutting eligibility to 3 months and 250 hours worked, extending job-protected leave to roughly 400,000 more employees.
More than 30 states now let prosecutors combine multiple small thefts into one felony charge under aggregation laws, making dated incident logs and police reports essential for both prosecution and the IRC §165 business theft-loss tax deduction.
Utah, Tennessee, Alabama, Georgia, and West Virginia have passed portable benefits laws letting businesses fund contractor health, retirement, or PTO accounts without that contribution counting as evidence of misclassification under state law — but the safe harbor is state-only and doesn't touch federal IRS or DOL tests.
In 2026 the Subchapter V small-business bankruptcy debt limit is $3,424,000, down from the pandemic-era $7.5 million ceiling that expired in June 2024 — a bill in Congress could restore the higher threshold for businesses currently locked out of the cheaper reorganization track.
The FTC formally withdrew its nationwide noncompete ban from the Code of Federal Regulations on February 12, 2026, and pivoted to case-by-case Section 5 enforcement — its April 2026 order against Rollins, Inc. covered more than 18,000 employees — while state law, from outright bans in California and Minnesota to salary thresholds in Washington and Colorado, remains the primary source of risk for small employers.
Business wire transfers are governed by UCC Article 4A, not Regulation E, meaning a company can be held liable for a fraudulent wire if its bank's security procedure was commercially reasonable, even though 86% of the FBI's $3.05 billion in 2025 BEC losses moved via wire or ACH.
Visa and Mastercard's 2026 interchange settlement caps credit card surcharges at 3% of the transaction or the merchant's actual cost of acceptance, whichever is lower, and requires 30 days' written notice to your processor before you can start charging it.
Nonprofit directors carry three legal fiduciary duties — care, loyalty, and obedience — and courts have held boards personally liable for failing to ask basic questions about how the organization spent its money.
Property management trust accounts require a monthly three-way reconciliation matching the bank balance, general ledger, and tenant sub-ledgers to the penny, and even a one-dollar variance is treated as a noncompliant account by state real estate regulators.
Every US state has its own data breach notification law, with individual-notice deadlines ranging from 30 days (California, Colorado, Florida, New York, Washington) to 60 days (Connecticut, Texas), and small businesses must comply with the law of every state where an affected person lives, not just their home state.
