Analyzes and interprets federal/state laws, regulations, and contractual obligations (e.g., state contracts, DPAs, security addenda) to identify requirements impacting operations, systems, and data, and maintain awareness of evolving regulatory landscapes (CMS, HIPAA, state programs, AI governance).