You need to follow HIPAA rules and get consent. Keep client info private. Also, know about laws if you work with people in different places.